Senior Security Operations Analyst - Onsite
Role Overview
Core Specialty is seeking a Senior SOC Analyst at Level 2 or 3 for its Security Operations Center team.
The role focuses on advanced threat detection, incident analysis, response coordination, and security automation.
The analyst acts as an escalation point for L1 analysts and helps improve detection and response capabilities.
Key Skills for This Role
Full Job Posting
Role Overview
Core Specialty is seeking a Senior SOC Analyst at Level 2 or 3 for its Security Operations Center team.
The role focuses on advanced threat detection, incident analysis, response coordination, and security automation.
The analyst acts as an escalation point for L1 analysts and helps improve detection and response capabilities.
Workplace and Schedule
- This is an onsite role in the Cincinnati office Monday through Friday.
- The position operates in a fast-paced 24/7 environment with rotational on-call coverage.
- The role is not hybrid or remote.
Key Responsibilities
- Investigate escalated alerts and conduct forensic analysis using SIEM, EDR, and threat intelligence tools.
- Lead containment and remediation for escalated incidents.
- Develop and tune SIEM use cases, correlation rules, and EDR detection logic.
- Design automation workflows and use AI platforms to improve SOC processes.
- Conduct proactive threat hunts using behavioral analytics and intelligence feeds.
- Maintain playbooks, runbooks, SOPs, incident reports, root cause analyses, and post-incident reviews.
- Train L1 analysts and recommend technologies that improve SOC capabilities.
Technical Knowledge
- Strong understanding of SIEM, EDR, network monitoring, alert logic, security settings, and IOC blocks is required.
- Strong SQL or KQL query capabilities and knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks are required.
- Experience analyzing network traffic, logs, and host-based artifacts is required.
- Python or PowerShell scripting, threat intelligence platforms, and cloud security monitoring are relevant to the role.
Experience and Qualifications
- A bachelor’s degree in cybersecurity, computer science, IT, or equivalent practical experience is required.
- 3+ years of experience in SOC operations, cybersecurity, or incident response is required.
- Certifications such as GCIH, GCIA, CEH, CompTIA CySA+, or CISSP may support the role.
- Malware analysis or reverse engineering experience is preferred.
Documentation and Security Operations
- Produce security architecture diagrams, SOPs and runbooks, policy rationale, audit artifacts, and incident timelines.
- Maintain endpoint security baselines aligned with CIS benchmarks.
- Support integration and operations of a new primary EDR/SIEM platform and safely test endpoint security changes with IT operations.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career