Sr IT Cyber Defense Analyst

About the role

We are seeking an experienced Senior IT Cyber Defense Analyst (Shift Lead) to lead day-to-day SOC operations, oversee security investigations, coordinate incident response, and mentor SOC analysts. The ideal candidate will bring strong SIEM/EDR expertise, advanced threat investigation skills, and hands-on experience using AI/LLM tools and automation to improve SOC efficiency and detection capabilities.

What you'll do

• Lead SOC shift operations, prioritize alerts, manage escalations, and ensure timely handovers and SLA adherence
• Investigate complex incidents involving phishing, malware, ransomware, compromised accounts, endpoint threats, and suspicious network activity
• Conduct threat hunting, correlate security telemetry, and map attacker behavior to the MITRE ATT&CK framework
• Develop, optimize, and troubleshoot SIEM queries, analytics rules, and detection use cases using Microsoft Sentinel and KQL
• Use approved AI/LLM tools for alert triage, investigation assistance, threat intelligence enrichment, KQL development, incident reporting, and workflow automation

What you need

• Incident response
• SIEM
• EDR
• Linux
• Python
• LLMs

Good to have

• Cloud security
• PowerShell
• Prompt engineering
• Data privacy