Cybersecurity Operations Senior Analyst

Allied Solutions•Carmel, IN

About The Position

The Cybersecurity Operations Senior Analyst is a senior technical resource within the Security Operations Center, responsible for security monitoring, investigations, incident response, threat analysis, detection engineering, and technical leadership. The role requires sound technical judgment and collaboration with analysts and cross-functional teams to investigate complex security events, correlate enterprise data, identify anomalous or malicious behavior, and develop defensible findings and recommendations. The analyst takes ownership of assigned work, contributes to team objectives, and provides technical guidance and mentorship to other analysts. The role leads advanced monitoring and threat analysis, complex incident investigations, and security research and technical leadership. It also supports improvements to SOC detection coverage, investigative capabilities, operational efficiency, and response maturity, and communicates findings to technical and nontechnical audiences.

Requirements

5–7 years of relevant cybersecurity experience, including security operations, security investigations, incident response, or related cybersecurity functions.
Demonstrated ability to analyze complex or ambiguous technical problems, determine appropriate next steps, and collaborate with relevant resources toward resolution.
Demonstrated ability to correlate information from multiple security technologies and data sources to develop defensible conclusions and recommendations.
Working knowledge of SIEM, EDR, identity, network, endpoint, and other cybersecurity technologies.
Knowledge of security monitoring, incident response, threat hunting, detection engineering, and investigative methodologies.
Ability to work effectively as part of a team, provide technical guidance, accept and incorporate feedback, and contribute to the development of other analysts.
Ability to operate effectively in a high-accountability environment where individual ownership, team success, operational discipline, and timely execution are essential.
Strong written and verbal communication skills, including the ability to communicate technical information to technical and nontechnical audiences.

Nice To Haves

Bachelor’s degree in cybersecurity, information technology, computer science, or a related discipline; an equivalent combination of education and relevant professional experience may be considered.
Advanced cybersecurity certifications in incident response/DFIR, security architecture, cloud security, offensive security, detection engineering, or related disciplines.

Responsibilities

Lead advanced monitoring and analysis of enterprise security events and telemetry; detect, investigate, and escalate potential attacks, intrusions, anomalous activity, and misuse.
Lead proactive threat hunting informed by emerging threats, adversary behaviors, organizational risk, and observed trends.
Correlate data across SIEM, EDR, identity, network, cloud, email, and other enterprise sources to identify anomalous or malicious behavior.
Develop, validate, tune, and maintain detection rules, investigative queries, notifications, and reporting capabilities; evaluate detection effectiveness and recommend improvements.
Identify telemetry, logging, and detection gaps and recommend appropriate improvements or alternative investigative approaches.
Lead complex cybersecurity investigations from initial detection through containment, remediation, recovery, and closure; serve as a senior incident lead and technical resource.
Coordinate incident-response activities across Security and partner teams, and provide technical support during incidents as required.
Determine investigative approaches, data sources, technical pivots, and evidence needed to support findings; collaborate with analysts, infrastructure teams, application owners, and subject-matter experts.
Write and distribute detailed incident reports and after-action reviews; identify lessons learned and recommend improvements to controls, detections, telemetry, procedures, and response capabilities.
Produce executive-level incident summaries and communicate complex technical findings to technical and nontechnical audiences.
Research emerging threats, vulnerabilities, adversary techniques, technologies, and defensive practices across the enterprise.
Serve as a technical resource and escalation point for SOC analysts; provide technical guidance and mentorship.
Develop and maintain SOC playbooks, runbooks, procedures, investigative methodologies, and technical documentation.
Identify opportunities to improve SOC detection coverage, investigative capabilities, operational efficiency, and response maturity.
Lead or contribute to cross-functional cybersecurity initiatives requiring technical analysis.
Provide daily, periodic, trend, and executive-level reporting on security activity and emerging risk; share investigative techniques, technical knowledge, and lessons learned.