Senior Security Operations Specialist

Role Overview

Service Delivery

• Resolve second-level support requests and escalate unresolved issues.
• Develop and optimize security use cases, SIEM rules, and detection mechanisms.
• Lead Tier-3 incident investigations, containment strategies, and remediation guidance.
• Perform security analytics and provide findings and recommendations to clients.
• Conduct vulnerability assessments, analyze threat intelligence, and prioritize risk mitigation.
• Lead hypothesis-based threat hunts across client environments.
• Build AI agents within SIEM and EDR for incident investigation and response.
• Configure and administer SIEM and EDR platforms and perform platform integrations.
• Perform root-cause analysis for recurring system performance or configuration issues.
• Deliver client reports, briefings, and monthly or quarterly account meetings.

Service Improvement

• Recommend solutions for technical deficiencies, service issues, product utilization, bugs, and enhancements.
• Mentor analysts and act as an escalation point for technical issues.
• Improve workflows, reduce false positives, and automate repetitive work.
• Test new system releases, upgrades, and patches.
• Develop SOPs, knowledge-base articles, and actionable threat advisory documentation.
• Conduct technical and incident-handling knowledge transfer sessions.

Qualifications

• Bachelor's degree or 3-year technology-related diploma plus 3 to 5 years of relevant security experience, or 8 years of IT experience including 3 to 5 years of relevant security experience.
• At least two administrator- or expert-level certifications in managed security services disciplines are required.
• Relevant certifications may include Cortex, QRadar, SANS, Splunk, CrowdStrike Falcon, Exabeam, Tenable, Microsoft SC-200 or SC-100, C|EH, or C|CIH.
• Enterprise IT infrastructure and information systems support or implementation experience is required.
• Strong analysis, independent work, collaboration, communication, customer satisfaction, and Microsoft Office proficiency are required.

Schedule

• The managed services operation runs 24 hours a day, 7 days a week.
• Availability for weekends, holidays, and overtime is required.

Professional Development

• Attend training or shadowing activities and obtain industry certifications as determined by the manager.
• Participate in assigned self-paced training.