Senior SOC Analyst

Job Title

Senior SOC Analyst

Overview Security Operations Center L3 Analysts serve as senior technical escalation points for complex cybersecurity incidents, advanced threat investigations, and security monitoring activities. They analyze and respond to sophisticated attacks across endpoint, network, identity, cloud, application, and data environments using SIEM, EDR/XDR, SOAR, NDR, threat intelligence, and digital forensics tools. This role leads complex investigations, improves detection and response capabilities, and strengthens organizational defenses through threat hunting, incident response, and continuous SOC improvement.

• Education Requirements High School Diploma is preferred.
• Certification Requirements There are no certification requirements for this role.
• Clearance Requirements No clearance is required for this role.
• Work Arrangement Remote anywhere in the US

Responsibilities

• Analyze and respond to sophisticated attacks across endpoint, network, identity, cloud, application, and data environments.
• Lead investigations involving advanced persistent threats, malware, ransomware, credential compromise, insider threats, lateral movement, data exfiltration, and security control bypasses.
• Perform advanced threat hunting.
• Develop and tune detection logic.
• Create and enhance incident response playbooks.
• Identify opportunities to improve monitoring coverage and reduce false positives.
• Conduct root-cause analysis.
• Collect and preserve forensic evidence.
• Validate indicators of compromise.
• Coordinate containment, eradication, and recovery activities with infrastructure, cloud, application, identity, and business teams.
• Provide technical guidance during high-severity incidents.
• Support incident command and executive communications.
• Produce detailed incident reports, lessons learned, and remediation recommendations.
• Proactively research emerging threats, vulnerabilities, attacker tactics, techniques, and procedures to improve organizational defenses.
• Support purple-team exercises, detection engineering, vulnerability prioritization, security architecture reviews, and the continuous improvement of SOC processes and technologies.
• Participate in stakeholder meetings and communicate high-risk findings.
• Mentor L1 and L2 analysts.
• Help establish standards for incident handling, escalation, documentation, and operational readiness.
• Support Disaster Recovery (DR), Business Continuity Planning (BCP), and Continuity of Operations (COOP) assessments and exercises.

Required Qualifications

• Typically requires 5-8 years of experience in cybersecurity, security operations, incident response, threat hunting, digital forensics, or a related discipline, with significant experience in a SOC or enterprise security environment.
• Advanced knowledge of SIEM, EDR/XDR, SOAR, network security monitoring, identity security, cloud security, malware analysis, and incident response methodologies.
• Demonstrated ability to lead complex investigations, develop detection use cases, write and maintain response playbooks, perform root-cause analysis, and coordinate cross-functional remediation efforts.
• Strong analytical, communication, documentation, and leadership skills.
• Ability to operate effectively under pressure.
• Experience mentoring junior analysts.
• SIEM/XSIAM

Desired Skills

• Seven years of experience is preferred.
• Experience with security frameworks such as MITRE ATT&CK, NIST, CIS Controls, and relevant incident response standards is preferred.
• Palo Alto
• Fortinet
• Tenable
• Rapid7
• Cribl
• Cortex
• GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Examiner (GCFE), GIAC Certified Detection Analyst (GCDA), Certified Information Systems Security Professional (CISSP), or equivalent industry certifications.

Pay Range $40.00–$55.00 (annual)

Why Apply This opportunity offers the scope and technical depth to lead advanced threat investigations, strengthen detection capabilities, and guide response during high-severity cybersecurity incidents. If you are an experienced SOC professional ready to apply your L3 expertise across complex security environments, apply today.

Equal Employment Opportunity Take2 is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, disability status, or any other characteristic protected by law. If you are a qualified individual with a disability or a disabled veteran, you may request a reasonable accommodation if you are unable or limited in your ability to access job openings or apply for a job on this site as a result of your disability. You can request reasonable accommodations by contacting Careers@Take2it.com.