Senior Security Operations Analyst - Onsite

-

We are seeking a Senior SOC Analyst (Level 2/3) to join our Security Operations Center team onsite (Monday through Friday) within our Cincinnati office (this is NOT a hybrid or remote role). This role is pivotal in advanced threat detection, incident analysis, response coordination, and automation development. Acting as an escalation point for L1 analysts, you will lead investigations into complex security incidents, mentor junior team members, and drive improvements in detection and response capabilities within a fast-paced, 24/7 operational setting.

Key Accountabilities/Deliverables:

• Investigate escalated alerts, validate threats, and perform deep-dive forensic analysis using SIEM, EDR, and threat intelligence tools.

• Lead containment and remediation efforts for escalated incidents across multiple environments.

• Develop and tune SIEM use cases, correlation rules, and EDR detection logic to improve SOC efficiency.

• Design and implement automation workflows to enhance incidents response and investigation efforts.

• Leverage AI platforms to assist with automation of SOC processes.

• Conduct proactive hunts leveraging behavioral analytics and intelligence feeds to identify emerging threats.

• Work closely with IT, network, and security engineering teams to contain incidents and strengthen defenses.

• Maintain and enhance SOC playbooks, runbooks, and standard operating procedures (SOPs).

• Assist with preparation of detailed incident reports, root cause analyses, and recommendations for preventive measures.

• Train and guide L1 analysts, fostering a culture of continuous learning and operational excellence.

• Assess and recommend new security technologies or security measures to enhance SOC capabilities.

• Maintain endpoint security baselines aligned with CIS benchmarks.

• Support integration and operations of a new primary EDR/SIEM platform.

• Partner with IT operations to safely test and deploy endpoint security changes.

• Act as a senior technical escalation point during security incidents.

• Contribute to incident response playbooks and post‑incident reviews.

• Produce high‑quality technical documentation, including:

  • Security architecture diagrams

  • SOPs and runbooks

  • Policy rationale and audit artifacts

  • Incident timelines

-

At Core Specialty, you will receive a competitive salary and opportunities for professional development and advancement.  We offer medical, dental, vision, and life insurances; short and long-term disability; a Company-match of 100% of a 6% contribution 401(k) plan; an Employee Assistance Plan; Health Savings Account, Flexible Spending Account, Health Reimbursement Account, and a wellness program