Senior IT Cyber Defense Analyst

Harris Computer

. Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence .

Posted 10/26/2026full-timeRemote • IndiaSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading SOC operations, incident investigation, and threat detection while leveraging automation and AI tools to enhance security measures. Proficient in developing SIEM queries and collaborating with cross-functional teams to ensure effective incident response and operational consistency.

Highest-signal resume keywords

SOC Operations LeadershipIncident InvestigationMicrosoft Sentinel ProficiencyAI/LLM ProficiencyThreat Detection and Hunting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEM DevelopmentKQL DevelopmentPython ScriptingPowerShell ScriptingIncident ResponseThreat DetectionEDR/XDR ExperienceNetwork SecurityMalware AnalysisPhishing Investigation

Soft Skills

Analytical SkillsCommunication SkillsDecision-Making SkillsTeam LeadershipMentoring

Tools & Technologies

Microsoft SentinelCrowdStrikeSOAR ToolsAI/LLM ToolsMicrosoft Defender

Certifications & Qualifications

Microsoft SC-200CompTIA CySA+GCIH

Industry Keywords

CybersecurityIncident CoordinationThreat IntelligenceMITRE ATT&CKCloud Security

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxPython

About the role

Key responsibilities & impact

Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence
Investigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity
Conduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework
Develop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL
Use approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation; independently validate AI-generated outputs
Automate repetitive SOC tasks using Python, PowerShell, APIs, or SOAR capabilities
Mentor analysts, improve investigation quality, reduce false positives, and maintain accurate incident documentation and audit-ready evidence
Coordinate with Incident Response, IT, Endpoint, Network, and Cloud teams to support containment, remediation, and recovery
Deliver effective shift leadership and timely, high-quality incident handling
Improve detection coverage, investigation efficiency, and reduce false positives
Drive practical adoption of AI and automation while maintaining security, accuracy, and human oversight
Support analyst development, documentation, and operational consistency

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or equivalent practical experience
5+ years of experience in SOC, cyber defense, or incident response, including shift leadership, incident coordination, or analyst mentoring
Strong hands-on experience with SIEM, EDR/XDR, incident investigation, and threat detection
Proficiency in Microsoft Sentinel and KQL; experience with Microsoft Defender, CrowdStrike, or similar security platforms
Strong understanding of networking, Windows/Linux, identity security, email threats, and MITRE ATT&CK
Mandatory practical AI/LLM proficiency, including prompt engineering, AI-assisted investigations, validation of AI-generated queries/scripts, and awareness of hallucinations, prompt injection, and data privacy risks
Scripting or automation experience using Python, PowerShell, APIs, or SOAR tools
Strong analytical, communication, decision-making, and team leadership skills
Willingness to work in a 24/7 rotational shift environment
Certifications such as Microsoft SC-200, CompTIA CySA+, GCIH, or relevant SIEM/EDR vendor certifications
Experience in proactive threat hunting, detection engineering, cloud security, and SOC process improvement

Benefits

Comp & perks

24/7 rotational shifts
AI-enabled security operations environment
Mentoring and analyst development opportunities