Note: The job is a remote job and is open to candidates in USA. Dragonfli Group is a cybersecurity and IT consulting firm serving federal agencies and Fortune 100 enterprises by securing mission-critical systems. The Senior Lead SOC Analyst will anchor the overnight security operations team, leading advanced investigations, incident response, threat hunting, escalations, quality control, client communication, analyst mentoring, and continuous improvement of operational procedures and detection capabilities.
Responsibilities
- Lead advanced investigation and incident response for escalated events across client tenants
- Conduct proactive threat hunting
- Perform quality control review of Tier 1 and Tier 2 triage, investigation, and documentation
- Mentor and provide real-time guidance to Tier 1 and Tier 2 analysts on shift
- Own the most complex containment, response, and escalation decisions
- Serve as the primary point of contact for clients and on-call leadership during overnight events
- Drive continuous improvement of standard operating procedures, runbooks, and detection tuning
- Support monthly reporting with accurate event and response data and trend analysis
Skills
- This position is well suited to candidates with 6+ years of SOC experience, including incident response leadership and mentoring
- U.S. Citizenship or Permanent Residency is required
- If hired, all work related to this role must be performed within the continental U.S
- * United States citizenship
- * 6+ years of SOC or security operations experience, including incident response and mentoring or leadership
- * Demonstrated threat hunting and advanced investigation experience
- * Strong command of SIEM and EDR platforms and vulnerability management workflows
- * Understanding of the incident lifecycle: detection, triage, containment, and escalation
- * Ability to work overnight shifts reliably on a rotation that includes weekends
- * Excellent written communication and documentation discipline
- Candidates with previous consulting or contracting experience are preferred
- * Expert-level experience with Microsoft Sentinel, Splunk, CrowdStrike or comparable EDR, and Tenable
- * GCIH, GSEC, GCFA, CySA+, or a similar advanced certification
- * Scripting or automation experience (Python or PowerShell)
- * Prior managed security services or multi-tenant SOC leadership experience
- * Exposure to critical-infrastructure environments
- * Residency in the Hampton Roads, Virginia area
Benefits
- Medical – Multiple POS health plan options including an HSA-compatible plan
- Dental – PPO coverage for preventive, basic, and major services
- Vision – Annual exam, frames, lenses, and contact lens allowance
- 401(k) – Employer match up to 5% of eligible compensation
- Long-Term Disability – 100% employer-paid coverage at 50% of pre-disability earnings
- Life Insurance & AD&D – 100% employer-paid coverage valued at $10,000 each
- PTO – 15–25 days annually based on tenure
- Paid Federal Holidays – All 11 federal holidays observed
Company Overview