Lead SOC Analyst (Cybersecurity)

Location: On-site full-time in Grand Rapids, Michigan, United States

Company

hirify.global is an organization operating an internal Security Operations Center with an external managed detection and response provider.

What you will do

• Lead daily SOC operations and serve as the senior escalation point for security incidents.
• Perform advanced threat hunting, incident investigation, root cause analysis, containment, and remediation.
• Coordinate incident response across IT, infrastructure, application, and business teams.
• Manage operational coordination with the MDR provider, including alert triage, escalations, service reviews, and detection quality.
• Develop and maintain SOC SOPs, playbooks, runbooks, documentation, metrics, and KPIs.
• Improve detection engineering by tuning SIEM, XDR, and MDR rules and expanding logging and telemetry coverage.

Requirements

• Bachelor’s degree in computer science, information security, or equivalent experience.
• 7+ years of experience in SOC, incident response, or cybersecurity operations.
• Experience leading incident investigations, managing escalations, threat hunting, detection tuning, and log analysis.
• Strong understanding of SIEM, XDR, EDR, and SOAR platforms.
• Experience developing SOC processes, playbooks, runbooks, and operational documentation.
• Strong leadership, mentoring, analytical, decision-making, and communication skills.

Nice to have

• Experience with Splunk, Microsoft Sentinel, Defender XDR, or similar platforms.
• Experience working with an MDR provider or in a hybrid internal-plus-MDR SOC model.
• Familiarity with NIST or CMMC compliance frameworks.
• CISSP, GCIA, GCIH, or equivalent certification.

Culture & Benefits

• Player/coach role combining hands-on cybersecurity operations with technical leadership.
• Opportunity to mentor analysts and support hiring, onboarding, and skill development.
• Focus on continuous improvement, audit readiness, compliance, and organizational security posture.