Senior SOC Analyst

IronRoad•Cincinnati, OH

2d•$95,000 - $125,000•Hybrid

About The Position

IronRoad is conducting a confidential search for a Senior SOC Analyst on behalf of our Cincinnati-based client. In this role, you will act as a lead analyst on the floor, owning the assessment of security events and incidents across client environments, mentoring newer analysts, and delivering scheduled security briefings directly to executive stakeholders.

Requirements

4+ years as a SOC Analyst, Detection Engineer, Security Content Developer, or Security Engineer.
Deep skills in PCAP data analysis, network traffic interpretation, indicator extraction, network protocols, and network architecture.
Hands-on experience with major EDR platforms (CrowdStrike Falcon, SentinelOne, Carbon Black, or Microsoft Defender for Endpoint).
Proficiency with log analysis tooling, pattern recognition, and building/maintaining operational dashboards.
Ability to clearly communicate technical concepts to both technical staff (e.g., Network Engineers) and executive leadership (e.g., CFOs).
Proven capability to mentor others and a strong focus on high-precision incident investigation.
Bachelor's degree in computer science, Information Security, or a related field (or equivalent hands-on experience).
Must be eligible to work in the United States without sponsorship (Open strictly to US citizens physically residing in the US).

Nice To Haves

6+ years of relevant security experience.
Prior SOC or CSIRT experience on a 24x7 watch desk.
Working knowledge of attacker tooling, malware families, and threat actor TTPs mapped to the MITRE ATT&CK framework.
Strong foundation in incident response frameworks and root cause analysis (RCA).
Track record of hunting unknown threats and tracking active threat campaigns/adversaries.
Experience delivering managed network security monitoring (MSSP format) across multi-client environments.
Hands-on experience configuring and managing firewalls, routers, and network security appliances.
Process optimization mindset with a focus on cycle-time reduction.

Responsibilities

Run proactive threat hunts across client environments to surface anomalous activity, active/prior compromises, and misconfigurations.
Investigate alerts across multiple detection technologies, scope incidents, and guide clients toward rapid remediation.
Continuously monitor SIEM platforms and log data for threats, intrusions, and security anomalies.
Collaborate with the Cyber Threat Intelligence team to apply global threat trends directly to client data analysis.
Support containment and post-incident remediation efforts.
Write clear, concise incident reports tailored for C-suite executive review.
Partner with detection engineering to validate detections and tune logic to reduce false positives without compromising coverage.
Ensure security-relevant data reaches designated platforms and collaborate with cross-functional teams to resolve data pipeline gaps.
Run sprint reviews for your workstream while maintaining current documentation, workflows, and SOC processes.
Mentor junior analysts and gather metrics to support daily, weekly, and monthly executive briefings.