Sentinel Blue

Security Operations

• Serve as the primary escalation point for Tier I analysts
• Take ownership of critical/high-severity alerts and escalated security incidents
• Analyze endpoints, network traffic, and log data to validate incidents and perform root cause analysis
• Lead containment, eradication, and recovery during active security incidents
• Follow and document Standard Operating Procedures and Incident Response Plans
• Reconstruct attack chains using the MITRE ATT&CK Framework and Cyber Kill Chain
• Conduct intelligence- and hypothesis-driven threat hunts
• Write executive reports with clear narratives, detailed analysis, and actionable recommendations
• Manage the vulnerability management lifecycle, including scan analysis, risk-based prioritization, and remediation coordination
• Develop and maintain incident response playbooks and SOPs
• Provide technical guidance, training, and feedback to Tier 1 analysts
• Participate in an on-call rotation for critical incidents outside standard business hours
• Collaborate with and mentor junior staff
• Help advance capabilities in digital forensics and incident response, threat hunting, vulnerability management, and threat intelligence

Explore SOC Analyst II at Sentinel Blue. Review requirements and application details.