Senior SOC Engineer

If you’re passionate about building a better future for individuals, communities, and our country—and you’re committed to working hard to play your part in building that future—consider WGU as the next step in your career.Driven by a mission to expand access to higher education through online, competency-based degree programs, WGU is also committed to being a great place to work for a diverse workforce of student-focused professionals. The university has pioneered a new way to learn in the 21st century, one that has received praise from academic, industry, government, and media leaders. Whatever your role, working for WGU gives you a part to play in helping students graduate, creating a better tomorrow for themselves and their families.The salary range for this position takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs.At WGU, it is not typical for an individual to be hired at or near the top of the range for their position, and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is:  Grade: Technical 409Pay Range: $127,700.00 - $191,500.00Job DescriptionThe Senior IT Security Analyst uses their knowledge of current security methods and standards to gather operational information and assess and analyst tools, systems, and processes in defense of applications, systems, and networks and collaborate with Infrastructure and business teams. The Senior IT Security Analyst is a lead support role for the IT Security team. They will provide mentorship, administrative service and support for monitoring systems, security breaches, providing investigative analysis and supporting incident response plans, security awareness, risk assessments, document review, vendor risk, vulnerability management and threat hunting. They will also engage in the support of other security focused tools and services and other duties as assigned. In addition, they may be asked to assist with risk assessments, forensics analysis, data collection, user training and other security related tasks. About the TeamOur Security Operations Center (SOC) team is responsible for a broad range of security operations, including monitoring, incident response, risk assessment, policy development, audit and compliance, technical operations, and collaboration across departments. This team plays a critical role in safeguarding WGU’s systems and data while driving innovation and collaboration across the organization.As a Senior SOC Engineer, you will lead advanced security monitoring and incident response efforts, ensuring WGU maintains a strong and resilient security posture. You’ll work on cutting-edge technologies, collaborate with cross-functional teams, and help shape the future of our security operations.What You’ll Do• Perform advanced threat detection, analysis, and response across multiple platforms and environments• Lead investigations into security incidents and coordinate remediation efforts• Develop and tune SIEM content, alerts, and dashboards to improve detection capabilities• Monitor endpoint and network security tools to identify anomalies and enforce security policies• Collaborate with engineering and IT teams to implement secure configurations and best practices• Research emerging threats and recommend innovative solutions to strengthen security posture• Support compliance initiatives and contribute to security audits and risk assessmentsWhat you'll ownAdvanced threat detection, triage, and response across multi-platform environmentsLead security incident investigations and drive remediation to closureBuild and tune SIEM content, alerting rules, and detection dashboardsMonitor EDR and network tools for anomalies and enforce security policyCollaborate with engineering to harden configurations and implement secure designThreat hunting, vulnerability management, and emerging threat researchSupport audits, compliance initiatives, and risk assessmentsWhat you bring5+ years in security operations (10+ years earns bonus consideration)Hands-on SIEM expertise — content development, not just queryingExperience with CrowdStrike or Carbon Black (EDR), Mimecast, and vulnerability management toolsWorking knowledge of the MITRE ATT&CK framework and cloud security principlesPython or Bash scripting for automation and workflow improvementStrong communicator who can brief leadership and work across non-security teamsBachelor's degree in IT Security, Computer Science, or related field — or equivalent experienceNice to have: CISSP, GIAC, CCSP, or AWS Security Specialty · SOAR experience · Cloud-native security toolingExperience in Lieu of EducationEquivalent relevant experience may substitute for educational requirements at the hiring manager’s discretion.What to ExpectAt WGU, our mission drives everything we do, including how we hire. Our interview experience is designed to give qualified candidates the opportunity to show their best work through meaningful conversations, practical problem-solving, and authentic collaboration.We thoughtfully review every application and invite forward the candidates whose experience and potential best align with the role and our mission. If selected, you will hear from a recruiter or hiring manager who will guide you through the process. We aim to communicate decisions promptly and respectfully.Here is what that typically looks like:• Introductory call• Recruiter screen• Hiring Manager and Supervisor interview• Team Technical InterviewWork LocationThis is a full-time, in-office position at WGU’s office in Raleigh, NC or Salt Lake City, Utah.Visa SponsorshipWhile we welcome applicants from all backgrounds, WGU is not able to provide visa sponsorship for this role.What You’ll Receive as a Full-Time WGU Employee• Comprehensive healthcare• HSA and FSA optio