Principal Information Security Analyst

Gen

Principal Information Security Analyst designing detection capabilities across multiple security platforms. Leading detection improvement initiatives and supporting incident investigations in global SOC.

Posted 4/18/2026full-timeTempe • Arizona, New York • 🇺🇸 United StatesLeadWebsite

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

Independently design and implement detection use cases across multiple security platforms (SIEM, WAF, EDR, DLP, email, cloud, network, and threat intelligence tools)
Lead cross-team detection improvement initiatives to optimize detection logic, reduce false positives, and enhance alert fidelity
Map detections to MITRE ATT&CK tactics and techniques and identify coverage gaps
Drive automation, enrichment, and AI-assisted workflows to reduce manual effort and support faster, more informed security decision-making
Perform deep multi-source correlation and root cause analysis across enterprise-scale telemetry
Support complex incident investigations and provide technical expertise during escalations
Mentor junior analysts in advanced analysis, detection engineering, and investigative techniques
Contribute to the continuous improvement of SOC monitoring maturity, visibility, and operational efficiency

Requirements

What you’ll need

5+ years of hands-on experience in security operations with strong focus on detection engineering in a complex enterprise environment
Proven experience independently designing and tuning detection use cases across multiple security platforms, including SIEM (Splunk preferred)
Strong practical experience with multi-source log analysis across SIEM, WAF, EDR, DLP, email, cloud, network, and threat intelligence
Understanding of cloud security concepts and experience monitoring cloud environments in major providers (AWS, Azure, GCP)
Practical understanding of MITRE ATT&CK and the ability to align detections to attacker tactics and techniques
Experience leading detection, monitoring, or automation improvement initiatives involving multiple security and technology teams
Experience operating in regulated environments (e.g., fintech or financial services) is preferred

Benefits

Comp & perks

flexible working options
time off
competitive pay
benefits
well-being programs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

detection engineeringmulti-source log analysisroot cause analysisautomationalert fidelityincident investigationdetection use casescloud securityMITRE ATT&CKtelemetry analysis

Soft Skills

mentoringcross-team collaborationleadershipproblem-solvingcommunication