Principal Security Operations Center Analyst

The Role

This senior position owns the most complex multi-host intrusions from triage through forensic timelining, root cause analysis and remediation, spanning endpoint, identity and SIEM data. The analyst also shapes detection improvements and mentors the wider SOC team.

Skills & Experience

Requires 6+ years in SOC, incident response, DFIR or MDR roles, deep knowledge of MITRE ATT&CK tradecraft, forensic investigation across Windows, macOS and Linux, malware analysis skills and strong Microsoft 365 cloud identity investigation experience.

Who It Suits

Ideal for an experienced DFIR or SOC professional ready for a technical leadership role, comfortable mentoring analysts, driving detection engineering and publishing research while handling the toughest intrusion cases.