8+ years in incident response / advanced SOC operations
Proven track record leading incident response for confirmed security incidents Robust, hands-on proficiency with LogRhythm SIEM — rule creation, tuning, AI Engine, case management
Experience with threat hunting, malware analysis, or digital forensics a strong plus
Comfortable mentoring junior analysts and owning escalations end-to-end
Certifications: GCIH, GCIA, CEH, Security+, or equivalent, LRPA, LRSA Experience working in a multi-tenant / MSSP setting Exposure to SOAR platforms and automation of response workflows