Deeply analyze and interrogate logs across diverse sources (network, host, application, cloud, identity) to identify anomalies, gaps, and indicators of compromise- Monitor, tune, and optimize SIEM platforms to improve detection fidelity and reduce false positive/negative rates- Evaluate log volume, retention, and ingestion pipelines to ensure completeness of data and identify blind spots in coverage- Develop, refine, and maintain correlation rules, use cases, and detection content aligned to current threat intelligence techniques- Serve as an escalation point for Tier 1/2 analysts on complex triage, investigation, and incident analysis- Utilize and maintain proficiency across relevant security tool stacks (SIEM, EDR, NDR, SOAR, threat intel platforms, packet capture/analysis tools)- Support containment, eradication, and recovery efforts during security incidents as a senior technical responder- Collaborate with the SOC Program Manager to report on SOC metrics, detection coverage, and operational effectiveness- Recommend and support implementation of process improvements, automation, and playbooks to increase SOC efficiency- Stay current on emerging threats, adversary TTPs, and industry best practices, incorporating relevant intelligence into detection strategy- Assist in mentoring and upskilling junior SOC analysts on log analysis and investigative techniques. The SOC Technical SME reports directly to the SOC Program Manager and serves as the technical backbone of a 24/7 security operations center, providing deep expertise in log analysis, SIEM administration and tuning, and detection engineering.