Senior IS Analyst, Security Operations

What you'll do

• Monitor, triage, and investigate security alerts across endpoints, network, identity, email, and cloud environments.
• Lead incident response activities including containment, remediation tracking, and recovery support.
• Perform root cause analysis and document evidence, timelines, and lessons learned for security incidents.
• Conduct threat hunting using intelligence, indicators of compromise, and the MITRE ATT&CK framework.
• Tune and improve SIEM, EDR, and XDR detection rules to reduce false positives and increase accuracy.
• Identify gaps in logging and monitoring to recommend improvements for detection coverage and response processes.
• Prepare incident reports and technical communications for both technical and non-technical stakeholders.
• Maintain and update SOC playbooks, runbooks, and standard operating procedures.

What we're looking for

• Educational background in Cybersecurity, Computer Science, Information Technology, Engineering, or a related discipline.
• 4-7 years of hands-on experience in SOC, security operations, incident response, threat detection, or related cybersecurity roles.
• Strong hands-on experience with SIEM and EDR/XDR platforms for alert investigation, log analysis, and case handling.
• Strong understanding of security concepts including triage, network fundamentals, operating systems, identity, and cloud security.
• Experience improving detection rules, correlation logic, and reducing false positives in monitoring environments.
• Practical knowledge of MITRE ATT&CK, threat intelligence, indicators of compromise, and common threat hunting approaches.
• Familiarity with security frameworks such as NIST and CIS.
• Basic scripting or automation exposure using Python, PowerShell, APIs, JSON, or REST is a plus.