Full-Time Senior SOC Analyst / Lead SOC Analyst (Hans-on Exabeam)  || Onsite to Westlake, TX

Job Description:

Senior SOC Analyst / Lead SOC Analyst (Exabeam) | Full-Time | Onsite (Westlake, TX)

Position Summary

Key Responsibilities

• Monitor, investigate, and respond to security alerts and incidents using Exabeam SIEM and UEBA.
• Lead advanced incident investigations, including root cause analysis, containment, eradication, recovery, and post-incident reviews.
• Serve as the primary SOC point of contact for the customer and represent SOC operations in day-to-day engagements.
• Act as the Incident Responder and Commander during high-priority security incidents, coordinating response activities across multiple teams.
• Develop, tune, and optimize Exabeam correlation rules, behavioral analytics use cases, dashboards, and detection content.
• Conduct proactive threat hunting activities leveraging security telemetry, UEBA insights, and threat intelligence.
• Leverage Anomali threat intelligence to enrich investigations and improve detection effectiveness.
• Map detections and investigations to the MITRE ATT&CK framework.
• Collaborate with onshore and offshore SOC teams, as well as infrastructure, network, cloud, and application teams.
• Produce executive and technical incident reports, threat trend analysis, and operational metrics.

Required Skills & Experience

• Minimum 4 years of core SOC experience.
• Mandatory hands-on experience with Exabeam SIEM and UEBA.
• Strong experience in:
  • Security Monitoring & Incident Response
  • Threat Hunting
  • Detection Engineering
  • Security Event Correlation & Log Analysis
  • Threat Intelligence Operations
  • MITRE ATT&CK Framework
  • IOC/IOA Analysis
  • Root Cause Analysis
• Experience with:
  • Must have: Exabeam
  • Good to have: Anomali

Stakeholder & Leadership Expectations

• Act as the face of the SOC for the customer during U.S. business hours.
• Build strong working relationships with customer security leadership and operational teams.
• Provide regular operational updates and incident briefings directly to the customer''s CISO organization.
• Lead incident communications and drive coordination during major cyber security events.

Work Environment

• Full-Time
• Onsite in Westlake, TX
• Support U.S. business hours from the Westlake office.
• Follow-the-sun operating model with after-hours coverage provided by the offshore India SOC team.
• Participate in on-call rotations for critical incident support.
• Hybrid delivery model consisting of onshore and offshore SOC personnel.
• Travel to the customer site (approximately 30 minutes from the Westlake office) during high-priority incidents, monthly operational reviews and quarterly governance/cadence meetings.

Preferred Qualifications

• Bachelor''s degree in Cybersecurity, Computer Science, Information Technology, or a related discipline.
• Experience supporting large enterprise / public sector environments.
• Relevant certifications.

Ideal Candidate Profile