Senior SOC Analyst

S-RM•New York, NY

3d•$80,000 - $110,000•Hybrid

About The Position

S-RM is a global intelligence and cyber security consultancy seeking a Senior SOC Analyst to join their growing Cyber Security team. This role is crucial for delivering managed detection and response services to clients, with a particular focus on those in the United States. The Senior SOC Analyst will leverage existing SOC infrastructure and tools to achieve security outcomes, requiring proficiency in platforms like SIEM, SOAR, and EDR. The position involves leading other analysts, acting as an escalation point, managing high-level incidents, improving processes, and mentoring junior staff. This is a hybrid role, combining remote work with some in-office presence for collaboration and development.

Requirements

Bachelors or Masters degree in a relevant subject, for example cybersecurity, computer science.
3+ years of experience in a SOC or cybersecurity operations role.
Demonstrated team leadership / supervisory experience.
Strong understanding of EDR and Secops toolsets - with experience configuring and leveraging these tools for incident detection and response.
Experienced in mentoring junior SOC analysts, with good communication and team-building skills.
Comfortable in client facing situations and able to discuss cybersecurity issues in customer-friendly language.
An investigative mindset.
Comfortable solving problems with limited information and guidance and be curious to learn.
Dependable.
Some demonstrable knowledge of cyber threat actors, and their tactics, techniques, and interest in cybersecurity matters, security monitoring and threat detection techniques.
Clear and concise communication skills, with the ability to work effectively across teams.
Able to communicate technical findings for a non-technical audience in a professional setting.
Able to vet and quality assure incident reports and summaries.
Permission to work in the United States by the start of their employment.

Nice To Haves

Relevant industry certifications are advantageous, including any of the following or evidence of working towards attaining these: Blue Team, CISSP, Security+.

Responsibilities

Contribute to day-to-day SOC team-related activities, ensuring efficient monitoring, detection, and response to security threats across clients’ estates.
Continuously monitor and analyze security alerts from EDR, SIEM, and other security tools to detect suspicious activities or potential threats.
Conduct investigations and respond to security incidents, executing containment, mitigation, and remediation steps as necessary.
Tune detection rules, automate workflows, and improve incident detection accuracy.
Perform in-depth log analysis from firewalls, endpoint protection platforms, and other solutions to investigate complex incidents.
Ensure all incidents are thoroughly documented, including timelines, analysis, mitigation steps, and lessons learned, and deliver regular reports to stakeholders.
Act as a second line escalation and support to the on-shift SOC Analysts in the 24x7 SOC team.
Support onboarding and service request activity for regional MDR clients.
Proactively search for indicators of compromise (IoCs) and advanced threats within the environment, utilizing both automated tools and manual analysis.
Stay up to date on the latest cybersecurity threats, vulnerabilities, and attack techniques, and integrate threat intelligence into detection and response efforts.
Provide guidance and mentorship to junior SOC analysts, fostering skill development and ensuring adherence to security best practices.
Collaborate with the SOC team to develop and implement SOC strategies, improve processes, and introduce new technologies to strengthen clients’ security posture.
Collaborate with SOC analysts, security engineers, and IT teams to ensure seamless operation of security tools and alignment with broader cybersecurity practices.
Identify areas for improvement in security monitoring and response capabilities, proposing and assisting with implementing new solutions where appropriate.
Assist with onboarding and configuring SOC services and technology for new customers.
Work closely with other cyber security service lines to ensure seamless integration of SOC operations with broader cybersecurity initiatives and business units, especially Incident Response.
Participate in and contribute to internal technical development initiatives, enhancing tools, processes, and overall incident response capabilities when the schedule allows.

Benefits

20 days holiday per year in addition to 12 public holidays (+1 day for every day of service up to a maximum of 25 days)
Life insurance – 4x annual salary
Matching pension contribution up to 6% (up to a maximum of 12% combined), and financial education
Military Leave– to a maximum of 5 years
Hybrid working and flexible working hours
Fertility treatment leave – 5 days of leave per cycle of treatment per year
Maternity leave – 26 weeks of full pay followed by 13 weeks of half pay
Paternity leave – 6 weeks of full pay
100% Company paid private medical, dental and vision insurance for employee, partner and children
Gym discounts for you and your partner
EAP programme for you and your immediate family
Free access to the world-famous mindfulness app Headspace