Senior Security Operations Center (SOC) Analyst

ISO New England, Inc•Holyoke, MA

2d•$115,000 - $142,000•Hybrid

About The Position

ISO New England is an independent system operator responsible for ensuring the safe and reliable flow of electricity in New England and planning for the future of the electric grid. The Senior SOC Analyst helps defend critical infrastructure that supports millions of residents and is important to public safety, economic stability, and national security. The analyst works independently with minimal supervision in a fast-paced, mission-critical SOC environment supporting electric grid operations. The role leads responses to high-severity and complex incidents, performs advanced threat detection and investigation, improves SOC detection and response capabilities, coordinates security exercises and assessments, mentors junior analysts, and implements SOC-related projects in partnership with the PMO. This is a U.S.-based hybrid role requiring four days per week onsite. Distance-based relocation assistance is available; candidates residing outside the United States must relocate. The role participates in a seven-person paid on-call rotation. The employer does not sponsor work visas for this position. The expected base salary range is $115,000–$142,000, with eligibility for an annual performance bonus.

Requirements

Experience with SIEM platforms such as Splunk, QRadar, ArcSight, or Microsoft Sentinel, or similar.
Experience with EDR/XDR solutions such as CrowdStrike, Carbon Black, Microsoft Defender, or SentinelOne, or similar.
Knowledge of network analysis tools such as Wireshark, Zeek, and tcpdump.
Knowledge of forensic tools and techniques such as EnCase, FTK, Volatility, and Autopsy.
Knowledge of attack frameworks such as MITRE ATT&CK and the Cyber Kill Chain.
Knowledge of threat actor tactics, techniques, and procedures (TTPs), threat intelligence frameworks, and indicators of compromise (IOCs).
Knowledge of network protocols including TCP/IP, DNS, HTTP/S, SMTP, and SMB.
Knowledge of firewalls, IDS/IPS, and proxy technologies.
Knowledge of Windows and Linux administration and security hardening.
Knowledge of cloud environments such as AWS, Azure, and GCP, and cloud security principles.
Experience with scripting languages such as Python, PowerShell, and Bash.
Knowledge of static and dynamic malware analysis techniques, log analysis, event correlation, and vulnerability management concepts.
Strong ownership, accountability, professional judgment, analytical and problem-solving skills, and the ability to remain calm and decisive under pressure.
Excellent written and verbal communication skills, including the ability to explain complex issues clearly and communicate accurately under stress.
Ability to rapidly triage and prioritize simultaneous alerts, maintain situational awareness, and coordinate with IT, OT, engineering, and leadership teams.
Commitment to continuous learning and staying current with evolving threats and technologies.
Must be able to work in the United States without employer-sponsored work authorization.

Nice To Haves

Relevant certifications such as GCIA, GCIH, GCFA, GREM, CISSP, CySA+, or equivalent.
Experience in critical infrastructure or energy-sector environments.
Background in threat hunting or offensive security concepts.
Familiarity with NERC CIP compliance requirements.
Experience with SOAR platforms such as Splunk SOAR, Palo Alto XSOAR, or Swimlane.
Knowledge of OT/ICS security concepts.

Responsibilities

Independently detect, analyze, and respond to complex security threats in a mission-critical SOC environment supporting electric grid operations.
Lead responses to high-severity and complex security incidents, coordinating containment, eradication, and recovery across IT, OT, and engineering teams.
Use threat modeling to anticipate adversary attack paths, inform detection strategy, and improve defensive coverage across critical infrastructure systems.
Perform advanced threat detection and analysis using SIEM, EDR/XDR, network monitoring, and forensic tools.
Conduct malware analysis, digital forensics, and root cause investigations following security events affecting critical systems.
Develop, tune, and maintain detection rules, correlation logic, and automated response playbooks to improve SOC effectiveness.
Coordinate tabletop exercises, purple team activities, and grid-focused security assessments.
Mentor and train junior SOC analysts on investigation techniques, tools, and best practices.
Serve as the project implementor for SOC-related initiatives, partnering with the PMO to plan, coordinate, and execute corporate security projects affecting SOC operations.

Benefits

Distance-based relocation assistance is available.
Paid on-call rotation.
Competitive compensation with an annual performance bonus.
Comprehensive health insurance, including medical, dental, and vision coverage.
Flexible spending and health savings accounts.
401(k) plan with generous employer contributions and financial planning support.
Student debt benefit.
Tuition reimbursement and professional development.
Life and AD&D insurance.
Disability insurance.
Critical illness and hospital indemnity benefits.
Paid time off and paid leave.
Wellness program, including an onsite gym.
Employee assistance program.
Flexible work hours.
Employee Business Networks.
Free coffee at the onsite café.