Senior SOC Analyst

Job Title: Senior SOC Analyst

Job Location: Lawrenceville, GA

Job Type: Contract

Job Overview:

Requirement/Must Have:

• Experience in Information Security and Security Operations Center (SOC) environments.
• Strong hands-on experience with Microsoft Sentinel.
• Strong hands-on experience with Microsoft Defender.
• Strong hands-on experience with Microsoft Entra ID.
• Experience monitoring and remediating security alerts.
• Experience investigating security incidents and supporting response activities.
• Experience developing Sentinel workflows and playbooks for response automation.
• Experience providing forensic data for investigations.
• Experience using Microsoft Threat Explorer and Advanced Hunting for security investigations.
• Experience configuring Exchange transport rules related to security events.
• Experience configuring Defender tenant block and allow lists.
• Strong analytical and problem-solving skills.
• Ability to work under general supervision while managing day-to-day security operations.

Experience:

• Experience planning, directing, and coordinating security operational duties in IT preferred.
• Experience developing and enforcing security policies and procedures preferred.
• Experience with incident triage, threat detection, and remediation in enterprise environments preferred.
• Experience with Microsoft security ecosystem in a production environment strongly preferred.

Responsibilities:

• Plan, direct, and coordinate security operational duties within the Information Technology environment.
• Monitor and remediate security alerts generated from Microsoft Sentinel and Microsoft Defender.
• Investigate suspicious activity and support incident response efforts.
• Develop and maintain Microsoft Sentinel workflows and playbooks to automate response actions.
• Provide forensic data and findings to support future investigations.
• Utilize Microsoft Threat Explorer and Advanced Hunting for threat investigations and analysis.
• Configure Exchange transport rules in response to security events and threats.
• Configure and maintain Defender tenant block and allow lists.
• Support the development and enforcement of organizational security policies and procedures.
• Collaborate with internal teams to strengthen overall security operations and incident handling.

Should Have:

• Strong understanding of SOC processes and security operations best practices.
• Experience with threat hunting and forensic analysis.
• Ability to work in a fast-paced incident response environment.
• Strong documentation and communication skills.
• Experience with security automation and workflow optimization.

Skills:

• Security Operations Center (SOC).
• Information Security.
• Microsoft Sentinel.
• Microsoft Defender.
• Microsoft Entra ID.
• Threat detection and response.
• Security monitoring.
• Incident response.
• Threat hunting.
• Advanced Hunting.
• Microsoft Threat Explorer.
• Security automation.
• Sentinel playbooks.
• Forensic investigation support.
• Exchange transport rules.
• Defender tenant block and allow lists.

Qualification and Education:

• Bachelor s degree in Cybersecurity, Information Technology, Computer Science, or related field preferred.
• Equivalent hands-on experience in SOC and information security operations may be considered.