Cybersecurity Analyst III

Overview

Position: Sr. Cybersecurity Analyst

 

Salary:  Starting at $124,400/year+ D.O.E  

*Actual compensation may vary from posting based on geographic location, work experience, education, and/or skill level.

 

Location: Santa Ana, CA (on-site preferred; open to remote candidates located beyond a 31-mile radius)

 

Position Summary:

The Sr. Cybersecurity Analyst leads the protection of enterprise systems, networks, and data through advanced monitoring, detection, analysis, and response to security events.

This role provides technical leadership to the security operations team, mentors junior analysts, collaborates with engineers, IT, and DevOps teams, and contributes to strategic improvements in threat detection, incident response, and overall security posture in a fast-paced, evolving environment.

The position emphasizes hands-on expertise in SOC tools, proactive threat hunting, and team guidance to maintain a resilient defensive capability.

 

*Disclaimer: Identity Verification checks are in place throughout the Candidate journey to prevent candidate fraud  

Responsibilities

Monitoring & Detection

• Oversee and perform advanced monitoring of alerts from SIEM, EDR/XDR, IDS/IPS, firewalls, and other security platforms.
• Lead triage, escalation decisions, and quality assurance for security events across the team.
• Develop, tune, and maintain detection rules; lead proactive threat hunting programs to uncover hidden threats.
• Analyze security telemetry trends to identify emerging attack patterns and refine detection strategies.

Incident Response Leadership

• Lead investigations of complex suspicious activity, conduct in-depth root cause analysis, and coordinate multi-team response efforts.
• Direct containment, eradication, and recovery during security incidents; serve as primary escalation point for major events.
• Oversee documentation of incidents, findings, lessons learned, and corrective actions in incident management systems.
• Develop, refine, and maintain incident response playbooks, procedures, and post-incident review processes.

 

Automation and Integration

• Develop scripts and automate routine security tasks using Python, PowerShell, or Bash to improve efficiency.
• Collaborate with DevOps to embed security controls in systems, applications, and cloud environments.

Mentorship and Collaboration

• Mentor and develop junior security analysts and team members through technical guidance, training, and knowledge sharing.
• Partner with IT, DevOps, and business teams to implement security best practices across the organization.
• Lead or support company-wide cybersecurity awareness initiatives, including phishing simulations and training programs.

Thought Leadership

• Stay current with emerging threats, attack vectors, defensive techniques, and threat intelligence sources.
• Share insights with the team and leadership to drive proactive security enhancements.
• Contribute to security program strategy, tool evaluations, and process optimization.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related discipline (or equivalent work experience).
• 4–7+ years of experience in IT security, SOC operations, incident response, or related technical roles (with at least 2 years in a senior or lead capacity preferred).
• Strong hands-on experience with SIEM platforms, EDR/XDR, vulnerability scanners, firewalls, and endpoint protection tools.
• In-depth knowledge of networking protocols, operating systems (Windows/Linux), authentication mechanisms, and cloud security principles (AWS, Azure, O365).
• Excellent analytical, troubleshooting, and problem-solving skills.
• Proven ability to lead investigations, mentor team members, and communicate effectively with technical and non-technical stakeholders.
• Attention to detail and demonstrate performance under pressure in high-stakes security situations.

 

Education, Experience, and Certifications:

• Security certifications such as CompTIA Security+, CySA+, CASP+, CEH, GCIH, GCIA, CISSP, or equivalent.
• Scripting proficiency (Python, PowerShell, Bash) for automation, analysis, and orchestration.
• Prior experience leading SOC operations, incident response teams, threat hunting programs, or shift supervision.
• Familiarity with threat intelligence platforms a