Senior Security Analyst
Core
Senior member of the Security Operations team serving as an escalation point for complex security events, leading incident response, and tuning detection capabilities across cloud and enterprise environments.
Role type
Senior IC Security Analyst (SOC/Incident Response)
Builds
Detection rules, SOAR automations, playbooks, and incident response procedures for an enterprise SaaS platform.
Domain
Cybersecurity, Cloud Security, SOC Operations
Required skills
Threat detection and investigation, Incident response leadership, SIEM query writing (SPL, KQL, SQL), EDR/XDR tooling, Vulnerability management triage, Security automation (Python, PowerShell, Bash), SOAR implementation, Mentorship of junior analysts
Preferred skills
Relevant industry certifications (CompTIA Security+, CySA+, GSEC, GIAC)
Technologies
SIEM platforms, EDR/XDR tools (CrowdStrike, SentinelOne), SOAR, Python, PowerShell, Bash
Responsibilities
Lead threat detection and investigation for high-fidelity alerts, Own incident response for medium-severity events, Engineer and tune detection rules mapped to MITRE ATT&CK, Automate operations via playbooks and SOAR, Drive risk-based vulnerability management, Manage daily security support tickets, Mentor junior analysts
Seniority
Senior, hands-on IC
