Position Summary

Sentry is looking to add a Senior Security Operations Center (SOC) Analyst to its Cyber Security team. The person selected for this role will be responsible for observing, identifying, examining, and handling security incidents in hybrid and cloud-native environments. The role is centered on safeguarding cloud infrastructure, strengthening detection functions, guiding advanced incident investigations, and improving the organization’s overall security posture through threat hunting, detection engineering, and security automation.

The preferred candidate brings strong experience with SIEM platforms such as Elastic Security and Splunk, solid expertise in cloud security, and the capability to investigate advanced threats affecting endpoints, identities, networks, and cloud workloads.

Key Responsibilities

• Oversee and analyze security events across cloud infrastructure, endpoints, identity systems, and enterprise applications by using Elastic Security, Splunk, Wazuh, and other monitoring solutions.
• Direct the investigation, containment, elimination, and recovery phases of complex cybersecurity incidents.
• Conduct proactive threat hunting by using telemetry from cloud environments, endpoints, identity providers, and network security controls.
• Build, refine, and sustain SIEM detection rules, correlation searches, dashboards, and alerting logic to increase detection precision and minimize false positives.
• Produce and improve detection content in line with the MITRE ATT&CK framework and current threat intelligence.
• Examine cloud-related security events, including identity compromise, privilege escalation, attacks on workloads, container security incidents, and cloud misconfigurations.
• Review authentication logs, API activity, network traffic, endpoint telemetry, and cloud audit logs in order to detect malicious actions and indicators of compromise.
• Work closely with cloud, infrastructure, and DevOps teams to investigate and resolve security findings.
• Contribute to incident response tasks such as collecting forensic data, preserving evidence, performing root cause analysis, and documenting lessons learned.
• Prepare and maintain SOC playbooks, investigation procedures, and operational documentation.
• Help onboard new log sources and security telemetry into SIEM platforms.
• Take part in purple team exercises, adversary emulation activities, and validation of detection capabilities.
• Support junior analysts through mentorship and technical guidance during investigations.
• Participate in ongoing SOC improvement efforts, including automation, workflow enhancement, and detection engineering.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or comparable practical experience.

Position Summary

Sentry is looking to add a Senior Security Operations Center (SOC) Analyst to its Cyber Security team. The person selected for this role will be responsible for observing, identifying, examining, and handling security incidents in hybrid and cloud-native environments. The role is centered on safeguarding cloud infrastructure, strengthening detection functions, guiding advanced incident investigations, and improving the organization’s overall security posture through threat hunting, detection engineering, and security automation.

The preferred candidate brings strong experience with SIEM platforms such as Elastic Security and Splunk, solid expertise in cloud security, and the capability to investigate advanced threats affecting endpoints, identities, networks, and cloud workloads.

Key Responsibilities

• Oversee and analyze security events across cloud infrastructure, endpoints, identity systems, and enterprise applications by using Elastic Security, Splunk, Wazuh, and other monitoring solutions.
• Direct the investigation, containment, elimination, and recovery phases of complex cybersecurity incidents.
• Conduct proactive threat hunting by using telemetry from cloud environments, endpoints, identity providers, and network security controls.
• Build, refine, and sustain SIEM detection rules, correlation searches, dashboards, and alerting logic to increase detection precision and minimize false positives.
• Produce and improve detection content in line with the MITRE ATT&CK framework and current threat intelligence.
• Examine cloud-related security events, including identity compromise, privilege escalation, attacks on workloads, container security incidents, and cloud misconfigurations.
• Review authentication logs, API activity, network traffic, endpoint telemetry, and cloud audit logs in order to detect malicious actions and indicators of compromise.
• Work closely with cloud, infrastructure, and DevOps teams to investigate and resolve security findings.
• Contribute to incident response tasks such as collecting forensic data, preserving evidence, performing root cause analysis, and documenting lessons learned.
• Prepare and maintain SOC playbooks, investigation procedures, and operational documentation.
• Help onboard new log sources and security telemetry into SIEM platforms.
• Take part in purple team exercises, adversary emulation activities, and validation of detection capabilities.
• Support junior analysts through mentorship and technical guidance during investigations.
• Participate in ongoing SOC improvement efforts, including automation, workflow enhancement, and detection engineering.

Required Qualifications

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or comparable practical experience.