Senior SOC Analyst

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

DeepSeas

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 30 years

🏥 Healthcare

🏭 Manufacturing

🍽️ Food & Beverage

Healthcare • Manufacturing • Food & Beverage

DeepSeas is a leading Managed Detection & Response (MDR) provider that specializes in transforming cybersecurity programs for various industries. Their offerings include CISO Advisory, Managed Detection & Response, and Offensive Security & Attack Surface Management. DeepSeas excels in areas such as cloud defense, ransomware protection, and critical infrastructure security. They provide solutions for cybersecurity transformation, including under vCISO services, pen testing, and AI risk management. DeepSeas is ranked as a top global MDR provider and is praised for its rapid and meaningful outcomes in enhancing cybersecurity measures across financial, healthcare, manufacturing, and pharmaceutical sectors.

📋 Description

• Lead and mentor L1 and L2 incident responders • Coordinate with internal and external stakeholders during high-severity incidents • Develop, refine, and test incident response playbooks and procedures • Conduct advanced threat hunting • Collaborate with threat intelligence and vulnerability management teams • Provide guidance on root cause analysis and post-incident reviews • Develop and tune detection rules • Apply MITRE ATT&CK to categorize threat actor tactics, techniques, and procedures • Drive continuous improvement within the SOC • Generate leadership metrics and reports on incident response activities and trends • Brief leadership on security incidents and trends • Develop and maintain automation scripts for incident response • Conduct in-depth malware analysis • Correlate malware findings with threat actor campaigns • Recommend detection and prevention improvements • Lead digital forensics investigations, including memory forensics • Oversee network forensics activities • Serve as a subject matter expert for DeepSeas and client leadership

🎯 Requirements

• 5+ years of experience in security operations, incident response, or threat detection, including senior (L3) or investigation-lead experience; or equivalent combination of education and experience • Experience leading high-severity incident response through containment, eradication, and recovery • Proficiency with SIEM, EDR/XDR, and SOAR platforms • Experience writing and tuning detection content, including KQL, SPL, Sigma, and YARA • Working knowledge of MITRE ATT&CK and the incident response lifecycle, including NIST SP 800-61 • Experience with host, memory, and network forensics • Experience with static and dynamic malware analysis • Scripting proficiency in Python, PowerShell, or Bash • Experience mentoring or leading junior analysts • Strong written and verbal communication skills for technical, executive, and client audiences • Must be a U.S. citizen currently residing within the United States • Preferred: GCIH, GCFA, GREM, GNFA, OSCP, or CISSP • Preferred: MDR or MSSP experience supporting multiple clients • Preferred: reverse engineering and memory forensics tools such as Ghidra, IDA Pro, x64dbg, and Volatility • Preferred: threat-hunting or detection engineering program experience • Preferred: Bachelor's degree in Cybersecurity, Computer Science, or related field

🏖️ Benefits

• Supportive crew of teammates and opportunities for growth • Personal health and well-being prioritized • Diversity-focused workplace • Information security participation and awareness • Random background/drug screens may be performed for data security