Senior SOC Analyst

About the role

The Senior SOC Analyst is a hands‑on, senior‑level member of NAD’s Security Operations Center. You will lead advanced threat detection, investigation and incident response across NAD’s enterprise IT, OT and airport systems, acting as the technical escalation point for junior analysts.

Key responsibilities

• Perform Tier 2/3 monitoring, triage and analysis of alerts from Rapid7 InsightIDR, Darktrace, Tenable and ManageEngine.
• Lead end‑to‑end incident response activities, from detection through recovery and post‑incident root‑cause analysis.
• Conduct proactive threat hunting using AI‑driven anomaly detection and SIEM data to uncover IOCs and APTs.
• Design, build and maintain automated detection rules, correlation searches and SOAR playbooks in Rapid7 Insight Connect.
• Oversee vulnerability management in Tenable, including scan scheduling, false‑positive tuning and risk‑based prioritisation.
• Manage patch deployment cycles through Tenable Patch Management to meet SLA requirements.
• Administer asset and configuration data in ManageEngine to support accurate inventory and vulnerability correlation.
• Mentor Tier 1/2 analysts, act as shift or incident lead when required, and produce technical incident reports and metrics dashboards.
• Support security assessments, penetration‑test remediation and audits related to aviation cybersecurity regulations.

Required profile

• Several years of experience in security operations, incident response and threat hunting.
• Strong understanding of IT, OT and aviation‑specific security requirements.
• Proven ability to lead investigations and mentor junior analysts.
• Excellent communication skills for reporting to stakeholders and senior management.

Required skills

• Tenable Vulnerability Management and Tenable Patch Management
• ManageEngine asset and configuration management
• Rapid7 InsightIDR (SIEM) and Insight Connect (SOAR)
• Darktrace AI‑based anomaly detection
• SIEM, SOAR and threat‑hunting techniques
• Incident response and vulnerability management processes