Senior Security Operations Specialist

The Sr. Specialist – Managed Security Services continues second-level technical client support provided by the Analyst and Sr. Analysts. The Sr. Specialist has proven process experience in all technical disciplines supported by the Managed Security Services practice, specializing in at least one of three particular disciplines: Network Security, Information Security and/or Endpoint Security. The Sr. Specialist provides both technical and process mentorship in these areas to Analysts and Sr. Analysts. The Sr. Specialist continues to develop a platform of technical expertise.

Service Delivery – 50% job weight  Deliver tasks on time and with minimal or no supervision  Monitors and resolving second-level support requests accurately and timely. Escalates unresolved issues to senior team members and/or manager(s)  Develop, tune, and optimize security use cases, SIEM rules, and detection mechanisms across diverse client environments. Lead complex or Tier-3 security incident investigations, coordinate containment strategies, and provide expert remediation guidance. Performs security analytics and provides timely summarized findings and recommendations to clients  Conduct vulnerability assessments, review threat intelligence feeds, and prioritize risk mitigation recommendations for discussion with clients. Lead and conduct hypothesis-based threat hunt across clients’ environments. Build custom AI agents within SIEM/EDR for autonomous incident investigation and response. Configure and administer SIEM and EDR platform for optimization Performs root cause analysis and collaborate with Consultants and Analysts to solve repetitive system performance or configuration problems  Provide technical knowledge transfer to clients and internal department on low complexity problems  Build investigation playbooks and automated workflows to drive efficiency across the MSSP operations center Carry out platform integrations for improved threat detection and response. Serve as a subject matter expert for internal teams and external clients, delivering security posture reports, briefings, and strategic recommendations Identifies, records, and escalates service performance trends, anomalies, and SLA breaches to senior leadership  Applies Trusted Advisor techniques to build up client trust and influence loyalty  Manages Great Client Communications  Works towards confidently running Great Meetings, differentiating services per MSS positioning  Handles technical account management responsibilities for assigned accounts  Provides supervision over technical aspects of service delivery  Prepare and deliver client facing quarterly, monthly meetings and tuning calls with designated accounts    Services Improvement and Enhancement - 30% job weight  Identifies and provides recommendations for technical deficiencies, service performance issues, product utilization, bugs, and enhancements  Assists in the development of reports and presentations and provides technical knowledge transfer and analysis to clients on performance status, trends, and metrics in a specific area of discipline.  Mentor analysts and serve as an escalation point for their technical related issues  Recommends process enhancements and drives efficiency by reducing average time to trouble-shoot, repetitive issues and problem service tickets, reducing false-positives  Performs ongoing analysis and system testing of new system releases, upgrades, and/or patches in one or more specific technologies  Makes recommendations to improve workflows and drive automation, creating efficiencies  Develops Standard Operating Procedures (SOPs) and knowledge base articles  Conduct technical and incident handling knowledge transfer sessions  Carry out research on supported technologies and develop actionable threat advisory documentation    Professional Development – 20% job weight  Attends training sessions or shadowing activities, and obtains