Cybersecurity Operations Senior Analyst

Allied Solutions is hiring a Cybersecurity Operations Senior Analyst in Carmel, IN (onsite) to lead monitoring, investigations, and incident response activities within the Security Operations Center.

Responsibilities

• Lead advanced monitoring and analysis of enterprise security events and telemetry.
• Drive detection, identification, investigation, and escalation of potential attacks, intrusions, anomalous activity, and misuse.
• Perform proactive threat hunting using emerging threats, adversary behaviors, organizational risk, and observed trends.
• Correlate data across SIEM, EDR, identity, network, cloud, email, and other enterprise sources to uncover anomalous or malicious behavior.
• Develop, validate, tune, and maintain detection rules, investigative queries, notifications, and reporting capabilities.
• Assess detection effectiveness and recommend improvements based on investigative outcomes.
• Identify telemetry, logging, and detection gaps and propose recommendations or alternate investigative approaches.
• Lead complex cybersecurity investigations from initial detection through containment, remediation, recovery, and closure.
• Act as a senior incident lead and technical resource during cybersecurity incidents.
• Coordinate incident-response activities across Security and partner teams.
• Select investigative approaches, data sources, technical pivots, and evidence needed to support conclusions.
• Partner with analysts, infrastructure teams, application owners, and subject-matter experts to resolve incidents.
• Provide technical support during incidents as needed.
• Write and distribute detailed incident reports and after-action reviews.
• Capture lessons learned and recommend improvements to security controls, detections, telemetry, procedures, and response capabilities.
• Produce executive-level incident summaries and communicate complex findings to technical and nontechnical audiences.
• Conduct enterprise-wide research into emerging threats, vulnerabilities, adversary techniques, technologies, and defensive practices.
• Serve as a technical escalation point for SOC analysts and provide mentorship and guidance.
• Develop and maintain SOC playbooks, runbooks, procedures, investigative methodologies, and technical documentation.
• Identify opportunities to improve SOC detection coverage, investigative capabilities, operational efficiency, and response maturity.
• Lead or contribute to cross-functional cybersecurity initiatives requiring technical analysis.
• Deliver daily, periodic, trend, and executive-level reporting on security activity and emerging risk.
• Share investigative techniques, technical knowledge, and lessons learned to improve team capability.

Requirements

• 5-7 years of relevant cybersecurity experience, including security operations, security investigations, incident response, or related roles.
• Bachelor’s degree in cybersecurity, information technology, computer science, or a related discipline (preferred); an equivalent mix of education and relevant professional experience may be considered.
• Ability to analyze complex or ambiguous technical problems, determine next steps, and collaborate with relevant resources toward resolution.
• Ability to correlate information across multiple security technologies and data sources to reach defensible conclusions and recommendations.
• Working knowledge of SIEM, EDR, identity, network, endpoint and other cybersecurity technologies.
• Knowledge of security monitoring, incident response, threat hunting, detection engineering, and investigative methodologies.
• Proven teamwork skills, including providing technical guidance, accepting and incorporating feedback, and developing other analysts.
• Ability to operate in high-accountability environments with individual ownership, operational discipline, timely execution, and team success.
• Advanced certifications in areas such as incident response/DFIR, security architecture, cloud security, offensive security, detection engineering, or related disciplines (preferred, not required).
• Strong written and verbal communication skills for both technical and nontechnical audiences.

Technologies

• SIEM
• EDR
• identity
• network
• cloud
• email
• endpoint

Benefits

• Medical, dental and vision insurance coverage
• 100% company-paid life and disability coverage
• 401k options with company match
• Three weeks PTO by the end of the first year
• Career growth opportunities