Lead Information Security Analyst (Individual Contributor)
Core
Senior security operations professional directing threat detection, alert triage, and incident response within the Security Operations Center (SOC).
Role type
Senior IC Information Security Analyst (SOC Lead).
Builds
SOC tooling, automation, detection content, and incident response capabilities for Applied Materials' global electronics manufacturing environment.
Domain
Cybersecurity / SOC Operations / Cloud Security.
Required skills
SIEM/SOAR operations, EDR/XDR management, incident response lifecycle, threat hunting (MITRE ATT&CK), cloud security (Azure/AWS/GCP), identity security (Entra ID/Okta/AD), scripting (Python/PowerShell/KQL/SPL), vulnerability management, security frameworks.
Preferred skills
CompTIA CySA+/Security+, GIAC (GCIA/GCIH/GCFA/GCED), SANS GSOC, Microsoft SC-200/AZ-500, CISSP, CISM.
Technologies
SIEM, SOAR, EDR, XDR, Azure, AWS, GCP, Entra ID, Okta, Python, PowerShell, KQL, SPL.
Responsibilities
Lead alert triage and event analysis across SIEM, EDR/XDR, cloud, and identity telemetry; manage alert queues, escalations, and SLAs. Investigate and contain complex, high-severity incidents (Tier 2/3) as technical lead or incident commander. Develop and tune detection content, produce IOCs/IOAs, and support threat hunting mapped to MITRE ATT&CK. Operate and improve SOC tooling and automation (SIEM/SOAR), maintain metrics and dashboards, and support vulnerability remediation. Uphold security standards, compliance, and audit requirements, and mentor analysts while driving awareness and post-incident improvements.
