Job Description- Work Arrangement: Hybrid –Dallas, Texas Remote is not available
- Exabeam: Mandatory – strong hands-on Exabeam engineering and operations experience is required.
We are seeking a Senior SOC Analyst / Lead SOC Analyst with strong hands-on expertise in Exabeam SIEM and UEBA to serve as the primary onshore Security Operations resource supporting a strategic customer environment. This individual will lead advanced incident investigations, threat hunting, detection engineering, and incident response activities while acting as the day-to-day SOC representative for the customer.
The ideal candidate will be comfortable operating in a customer-facing role, engaging directly with the customer's CISO organization, leading critical security incidents, and driving improvements across detection and response capabilities.
Key Responsibilities
- Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
- Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post-incident reviews.
- Serve as the primary SOC point of contact for the customer and represent SOC operations in day-to-day engagements.
- Act as the Incident Responder and Commander during high-priority security incidents, coordinating response activities across multiple teams.
- Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content.
- Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence.
- Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness.
- Map detections and investigations to the MITRE ATT&CK framework.
- Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams.
- Produce executive and technical incident reports, threat trend analysis, and operational metrics.
Required Skills & Experience
- Minimum 4 years of core SOC experience.
- Mandatory hands-on experience with Exabeam SIEM and UEBA.
- Strong experience in:
- Security Monitoring & Incident Response
- Threat Hunting
- Detection Engineering
- Security Event Correlation & Log Analysis
- Threat Intelligence Operations
- MITRE ATT&CK Framework
- IOC/IOA Analysis
- Root Cause Analysis
- Experience with:
- Must have: Exabeam
- Good to have: Anomali
