Lead Information Security Analyst (Individual Contributor)

Role Summary

Core Responsibilities

• Lead alert triage and event analysis across SIEM, EDR/XDR, cloud, and identity telemetry; manage alert queues, escalations, and SLAs.
• Investigate and contain complex, high-severity incidents (Tier 2/3) as technical lead or incident commander, maintaining high-quality case management and stakeholder communication.
• Develop and tune detection content, produce IOCs/IOAs, and support threat hunting mapped to MITRE ATT&CK to improve coverage and reduce false positives.
• Operate and improve SOC tooling and automation (SIEM/SOAR), maintain metrics and dashboards, and support vulnerability remediation and cloud/on-prem reviews.
• Uphold security standards, compliance, and audit requirements, and mentor analysts while driving awareness, training, and post-incident improvements.

Key Requirements

• Strong, hands-on expertise in SOC operations, SIEM/SOAR, EDR/XDR, and the incident response lifecycle (NIST SP 800-61).
• Proficiency in event/log correlation, detection development and tuning, and threat hunting using MITRE ATT&CK, IOCs, and TTPs.
• Working knowledge of cloud security (Azure/AWS/GCP), identity security (Entra ID/Okta/AD), and scripting/automation (Python, PowerShell, KQL/SPL).
• Understanding of security frameworks, vulnerability management, and governance/compliance, plus strong communication and problem-solving skills.

Education

Experience

Certifications (Preferred)

Relocation Eligible

• Applied Materials is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, national origin, citizenship, ancestry, religion, creed, sex, sexual orientation, gender identity, age, disability, veteran or military status, or any other basis prohibited by law.