FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Security Operations Analyst
Core Specialty Insurance Holdings, Inc.. Investigate escalated alerts, validate threats, and perform deep-dive forensic analysis using SIEM, EDR, and threat intelligence tools .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in incident response, threat validation, and forensic analysis using SIEM and EDR tools. Proficient in developing automation workflows and maintaining security protocols while collaborating with cross-functional teams.
Highest-signal resume keywords
SIEM PlatformsEDR ToolsSQL/KQL Query CapabilitiesSecurity Automation WorkflowsIncident Response
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Forensic AnalysisThreat IntelligenceMalware AnalysisScripting (Python, PowerShell)Network Traffic AnalysisBehavioral AnalyticsCloud Security MonitoringAttack Lifecycle FrameworksIncident ReportingSecurity Documentation
Soft Skills
Excellent CommunicationDocumentation SkillsTeam CollaborationTraining and Guidance
Tools & Technologies
SIEMEDRThreat Intelligence PlatformsAutomation WorkflowsCIS Benchmarks
Certifications & Qualifications
GCIHGCIACEHCompTIA CySA+CISSP
Industry Keywords
SOC OperationsIncident ResponseCybersecurityNetwork MonitoringCloud Security
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityGoogle Cloud PlatformPythonSQL
About the role
Key responsibilities & impact- Investigate escalated alerts, validate threats, and perform deep-dive forensic analysis using SIEM, EDR, and threat intelligence tools
- Lead containment and remediation efforts for escalated incidents across multiple environments
- Develop and tune SIEM use cases, correlation rules, and EDR detection logic
- Design and implement automation workflows to enhance incident response and investigation efforts
- Leverage AI platforms to assist with automation of SOC processes
- Conduct proactive hunts using behavioral analytics and intelligence feeds to identify emerging threats
- Collaborate with IT, network, and security engineering teams to contain incidents and strengthen defenses
- Maintain and enhance SOC playbooks, runbooks, and standard operating procedures
- Prepare detailed incident reports, root cause analyses, and preventive recommendations
- Train and guide L1 analysts
- Assess and recommend new security technologies and measures
- Maintain endpoint security baselines aligned with CIS benchmarks
- Support integration and operations of a new primary EDR/SIEM platform
- Partner with IT operations to test and deploy endpoint security changes
- Act as a senior technical escalation point during security incidents
- Contribute to incident response playbooks and post-incident reviews
- Produce technical documentation, including security architecture diagrams, SOPs and runbooks, policy rationale and audit artifacts, and incident timelines
Requirements
What you’ll need- Applicants must be authorized to work for any employer in the U.S.
- The employer is unable to sponsor or take over work authorization sponsorship now or in the future for this position
- Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent practical experience
- 3+ years of experience in SOC operations, cybersecurity, or incident response
- Strong understanding of SIEM platforms, EDR tools, and network monitoring solutions
- Strong SQL/KQL query capabilities
- Deep knowledge of attack lifecycle frameworks (MITRE ATT&CK, Cyber Kill Chain)
- Proven ability to analyze network traffic, logs, and host-based artifacts
- Ability to work in a fast-paced 24x7 environment with rotational on-call coverage
- Excellent communication and documentation skills
- Experience with malware analysis or reverse engineering
- Experience with scripting (Python, PowerShell) for automation and SOC process improvement
- Familiarity with threat intelligence platforms and integration
- Experience in cloud security monitoring (AWS, Azure, GCP)
- Proven experience designing and implementing security automation workflows
- Certifications such as GCIH, GCIA, CEH, CompTIA CySA+, or CISSP is preferred
Benefits
Comp & perks- Competitive salary
- Opportunities for professional development and advancement
- Medical insurance
- Dental insurance
- Vision insurance
- Life insurance
- Short-term disability
- Long-term disability
- Company match of 100% of a 6% contribution 401(k) plan
- Employee Assistance Plan
- Health Savings Account
- Flexible Spending Account
- Health Reimbursement Account
- Wellness program