Ensure consistent incident handling across multiple SOC locations through standardize procedures and communication
Lead daily operations such as threat briefings, queue health checks, and high-severity incident oversight
Serve as final escalation for complex investigations (multi-stage intrusions, lateral movement, persistence, data exfiltration)
Lead containment/eradication strategy in partnership with IT, Cloud, Endpoint, and Network teams
Perform root-cause analysis and produce actionable remediation guidance
Coach Tier 1/2 analysts on investigation techniques, log analysis, and response playbooks
Integrate AI‑driven detections and response

5+ years of relevant experience or equivalent combination of education and work experience
Ability to lead and coordinate in a multi-location / follow-the-sun SOC model
Strong mentoring and coaching skills
Excellent written and verbal communication for technical and non-technical audiences
Calm, structured decision-making during high-pressure incidents
Strong case management discipline and evidence-based analysis
Incident response experience handling high-severity events end-to-end (containment through recovery)
Solid understanding of common attacker techniques: phishing, ransomware, C2, privilege escalation, lateral movement, exfiltration
EDR/XDR proficiency: triage, remote response actions, artifact collection
Familiar with AI-assisted attacks including deepfakes and social-engineering at scale.

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone.

Principal Cybersecurity – Tier-3 Team Lead SOC Analyst

Key skills