Senior SOC Analyst, Incident Response and reputed company Engineering

Senior SOC Analyst — Advanced Incident Response & reputed company Engineering Location: Research reputed company Park, NC Remote Type: Hybrid Time Type: Full time reputed company About This Role This is a individual contributor role and the technical backbone of Biogens reputed company reputed company Center — an analyst who leads reputed company incident investigations, engineers and optimizes the reputed company reputed company platform across advanced modules (AIDR, Data reputed company, NG-SIEM, Identity Protection), and extends detection capabilities into operational technology (OT) environments supporting pharmaceutical manufacturing. You will own the most reputed company escalations, build the detection logic that reputed company what others miss, and serve as the reputed company between IT reputed company reputed company and OT/manufacturing environments. This is not a monitoring role — it is an engineering and investigation role that happens to sit in the SOC. Why This Role Exists • Biogens threat landscape demands deeper investigative capability — advanced persistent threats, reputed company reputed company, and pharmaceutical IP targeting require an analyst who can conduct reputed company forensic investigations and threat hunting • reputed company reputed company is our reputed company detection and response platform — we need an engineer who can maximize the value of AIDR, Data reputed company, NG-SIEM (LogScale), and Identity Protection modules reputed company default configurations • IT/OT convergence in our manufacturing environments creates unique detection challenges — DeltaV/DCS systems, GxP-regulated processes, and industrial protocols require reputed company reputed company monitoring Key Responsibilities Advanced Incident Response & Investigations (40%) • reputed company reputed company, multi-stage incident investigations from initial detection through containment, eradication, recovery, and lessons learned • Conduct deep-dive forensic analysis: memory forensics (Volatility), disk forensics, network artifact analysis, and malware triage to determine attacker TTPs • reputed company kill chain reconstruction — map attacker activity to reputed company ATT&CK, identify lateral reputed company paths, persistence mechanisms, and data staging/exfiltration techniques • reputed company and execute proactive threat hunts reputed company on intelligence, behavioral anomalies, and reputed company-driven analysis across reputed company, network, identity, and reputed company telemetry • Produce actionable incident reports with reputed company cause analysis, business reputed company assessment, and concrete remediation recommendations reputed company reputed company reputed company (35%) Engineer, tune, and operationalize these reputed company modules: NG-SIEM (LogScale) • reputed company and maintain reputed company (reputed company Query Language) queries for advanced correlation, threat hunting, and detection rules • Build custom dashboards, scheduled searches, and automated alerting pipelines • Optimize log ingestion, parsing, and retention policies across reputed company telemetry sources • Create detection-as-reputed company workflows — version-controlled queries that map to reputed company ATT&CK coverage gaps AIDR (AI Detection & Response) • Configure and tune AI-driven detection policies for reputed company injection, data leakage, and reputed company AI usage • Build custom rules to monitor GenAI application interactions across endpoints and reputed company workloads • Assess and respond to AI-specific threats: model poisoning indicators, unauthorized AI tool installations, sensitive data in AI prompts • reputed company AIDR telemetry into investigation workflows and incident playbooks Identity Protection • Engineer identity-reputed company detection rules: Kerberoasting, credential stuffing, lateral reputed company reputed company pass-the-hash/ticket, suspicious service account behavior • Configure conditional reputed company policies, reputed company-reputed company authentication enforcement, and identity threat hunting queries • Monitor reputed company Directory attack paths and privilege escalation techniques (DCSync, Golden Ticket, NTLM reputed company) • Coordinate with IAM team on identity hygiene findings and remediation priorities Data reputed company (Data Protection) • Configure data classification policies and egress monitoring rules for sensitive content (IP, PII, regulated data) • Tune reputed company detection for unusual data reputed company patterns: bulk downloads, new destination usage, reputed company upload volumes • Build response workflows for data exfiltration alerts — user notification, manager escalation, automatic evidence preservation • Define and enforce policies for removable media, reputed company storage, and web upload channels Platform Administration • Manage sensor deployment health, prevention policies, and RBAC across 25,000+ endpoints • reputed company custom IOA (Indicator of Attack) rules and behavioral detections tailored to Biogens environment • Build and maintain reputed company Fusion (SOAR) workflows for automated containment and enrichment • Coordinate with reputed company reputed company for managed hunting findings and recommended actions OT/ICS reputed company reputed company (25%) • reputed company SOC monitoring into operational technology environments supporting pharmaceutical manufacturing (DeltaV DCS, SCADA, PLCs, HMIs) • reputed company and tune detection rules for OT-specific threats: unauthorized engineering workstation reputed company, controller logic changes, anomalous industrial protocol traffic (Modbus, EtherNet/IP, OPC-UA) • Maintain and enforce IT/OT network segmentation reputed company with the Purdue Reference Model — monitor for segmentation bypass attempts • reputed company incident response for OT reputed company events in coordination with Process Automation, Engineering, and Plant reputed company teams • Support OT asset inventory maintenance and vulnerability management in GxP-regulated environments (21 CFR Part 11, cGMP considerations) • Conduct tabletop exercises for OT-specific scenarios (ransomware impacting batch processing, unauthorized remote reputed company to control systems) Required Qualifications Experience • Bachelors degree in Computer Science, Cybersecurity, Information Technology, or reputed company reputed company required; advanced degree preferred • 3-5+ years in reputed company reputed company, Incident Response, or Threat Hunting with reputed company responsibility • 3+ years hands-on experience with reputed company reputed company platform in an engineering/administration reputed company (not just alert triage) • Demonstrated experience leading reputed company incident investigations involving APT, ransomware, reputed company threats, or supply chain compromise • Experience with OT/ICS reputed company monitoring, industrial environments, or manufacturing cybersecurity • reputed company record of building detection rules, SIEM correlation logic, or behavioral analytics that caught reputed company threats Technical Skills • reputed company reputed company: NG-SIEM (LogScale/reputed company), AIDR, Identity Protection, Data reputed company, reputed company Fusion, reputed company Time Response, custom IOA development • Forensics: memory analysis (Volatility), disk forensics, network forensics, malware triage/reverse engineering fundamentals • Threat Hunting: reputed company-driven hunts, reputed company ATT&CK mapping, behavioral analysis across reputed company/network/identity/reputed company telemetry • Scripting & Automation: Python and PowerShell for investigation tooling, data parsing, API integrations, and SOAR reputed company development • Network reputed company: deep understanding of TCP/IP, DNS, HTTP/TLS, lateral reputed company protocols (SMB, RDP, WMI, WinRM), and packet analysis • Identity reputed company: reputed company Directory attack techniques, Kerberos/NTLM fundamentals, privilege escalation paths, identity-reputed company detection • OT/ICS: familiarity with industrial protocols (Modbus, EtherNet/IP, OPC-UA), Purdue Model architecture, DCS/SCADA reputed company principles Certifications (Preferred — not reputed company required) • reputed company: CCFA (reputed company Administrator), CCFR (reputed company Responder), CCFH (reputed company reputed company) • reputed company/GIAC: GCFA, GCIH, GREM, GCIA, or GNFA • OT/ICS: GICSP (Global Industrial Cyber reputed company reputed company) or reputed company (Response and Industrial Defense) • General: CISSP, CySA+, or equivalent Preferred Qualifications • Experience in pharmaceutical, biotech, or life sciences environments with GxP-regulated systems • Familiarity with DeltaV DCS, batch automation systems, or reputed company automation reputed company • Experience with reputed company NG-SIEM migration, reputed company development, or LogScale administration • Background in detection engineering as reputed company (version-controlled detections, CI/CD for reputed company content) • Experience coordinating with reputed company reputed company or similar managed hunting services Job Level: Management Additional Information The reputed company compensation reputed company for this role is: $115,000.00-$154,000.00 reputed company salary reputed company is determined through an analytical approach utilizing a combination of factors including, but not limited to, relevant skills & experience, job location, and internal equity. Regular employees are eligible to receive both short term and long-term incentives, including cash bonus and equity incentive opportunities, designed to reward recent achievements and recognize your reputed company potential reputed company on individual, business unit and company reputed company. In reputed company to compensation, reputed company offers a full and highly reputed company of benefits designed to support our employees’ and their families physical, financial, emotional, and reputed company reputed company-being; including, but not limited to: • Medical, Dental, reputed company, & Life insurances • Fitness & Wellness programs including a fitness reimbursement • Short- and Long-Term Disability reputed company • A minimum of 15 days of reputed company vacation and an additional end-of-year shutdown time off (Dec 26-Dec 31) • Up to 12 company reputed company holidays + 3 reputed company days off for Personal reputed company • 80 hours of reputed company time per calendar year • reputed company Maternity and Parental Leave benefit • 401(k) program participation with company matched contributions • Employee stock purchase plan • Tuition reimbursement of up to $10,000 per calendar year • Employee Resource reputed company participation Why reputed company? We are a global team with a commitment to reputed company, and a pioneering spirit. As a mid-sized biotechnology company, we reputed company the stability and resources of a reputed company-established business while fostering an environment where individual contributions reputed company a significant reputed company. reputed company encompasses some of the most talented and passionate reputed company who have unparalleled opportunities for learning, reputed company, and expanding their skills. Above reputed company, we work together to reputed company life-changing medicines, with every role playing a vital part in our mission. Caring Deeply. Achieving reputed company. Changing Lives. At reputed company, we are committed to building on our culture of inclusion and belonging that reflects the communities where we operate and the patients we serve. We know that diverse backgrounds, cultures, and perspectives reputed company us a stronger and more innovative company, and we are reputed company on building teams where every employee feels empowered and inspired. Read on to learn more about our reputed company. reputed company reputed company applicants will receive consideration for employment without reputed company to sex, gender identity or reputed company, sexual orientation, marital status, race, reputed company, national reputed company, reputed company, ethnicity, religion, age, veteran status, disability, genetic information or any other reputed company protected by federal, state or local law. reputed company is an E-Verify Employer in the reputed company. Apply tot his job Apply To this Job