Senior SOC Analyst

Requirements:

• Typically seven or more years in cybersecurity, including substantial hands-on SOC, MDR, or MSSP experience and independent complex investigations across multiple customer environments; demonstrated ability matters more than an exact year count.
• Strong fundamentals in networks and packet analysis, identity and cloud security, endpoint detection, and SIEM investigation; familiarity with Elastic, Zeek, or Suricata is valuable.
• Working awareness of industrial control system protocols such as DNP3 and Modbus, or experience with Zeeks ICS parsers, is strongly preferred.
• Ability to write concise, evidence-based customer explanations and communicate calmly with technical staff and executives.
• Practical experience with scripting, detection tuning, workflow improvement, or automation, and sound judgment about what requires human review.
• Ownership and reliability, including documenting decisions, closing loops, meeting on-call commitments, asking for help early, and supporting analysts development.
• Authorization to work in the United States without sponsorship.
• Ability to meet the offer condition of a background check, including identity verification and a criminal history check.

Responsibilities:

• Provide hands-on managed security coverage for existing customers by reviewing alerts and telemetry, investigating suspicious activity, prioritizing cases, and documenting follow-through.
• Lead complex investigations and escalations across OT and IT telemetry, including timely notification, triage, and customer-authorized response actions; involve our OT security engineer when control-system expertise is needed.
• Improve the quality of daily checks, case notes, and monthly security reports, explaining events, their significance, and recommended customer actions in plain language.
• Partner with our detection engineer to improve signal quality across agreed OT and IT data sources by validating and tuning detections.
• Develop practical runbooks, quality checks, reusable reporting, and measured automation, including AI-assisted workflows with tested accuracy and controls.
• Coach analysts through real cases and act as the senior escalation point on the on-call rotation.
• Transition smoothly into our existing customer base and on-call rotation while maintaining service commitments.
• Improve case consistency, customer reporting, and repeatable playbooks for high-volume workflows.
• Deliver measurable gains in triage efficiency and useful automation while protecting security outcomes and customer trust.

Technologies:

• AI
• Cloud
• Security

More

We are Léargas Security, helping organizations that operate essential services understand cyber exposure and strengthen protection across OT and IT. We focus on electric, water, and wastewater utilities, as well as selected industrial and other critical-infrastructure operators. Our analysts monitor customers office and control networks on the Léargas platform, while our Lattice assessment practice shows utilities how attackers could reach systems that keep essential services running. This senior role is for someone interested in building and running long-term managed security for utilities, with visibility from customer alerts through discussions with general managers. We are an equal opportunity employer and make employment decisions without regard to characteristics protected by law. Compensation starts at $120,000 per year, with dental, health, and vision insurance and paid time off. The position is hybrid remote in Kennesaw, Georgia. Applicants should include a brief note describing a difficult managed-security case they owned and a measurable operational improvement they made.

last updated 43 week of 2026