Senior Security Operations Center (SOC) Analyst

About the role

ISO New England is the independent system operator responsible for ensuring the safe and reliable flow of electricity in our region and planning for the future of the electric grid. We are at the forefront of New England’s ongoing transition to clean energy. As a Senior SOC Analyst, you will play a pivotal role in defending critical infrastructure that powers millions of residents across New England. Our organization is responsible for safeguarding the electric grid, a cornerstone of public safety, economic stability, and national security.

This employer will not sponsor applicants for work visas for this position (e.g., H-1B, F-1/CPT/OPT, O-1, E-3, TN, J, etc.).

Responsibilities

• Operate independently with minimal supervision to detect, analyze, and respond to complex security threats in a fast paced, mission critical SOC environment supporting electric grid operations.
• Lead response efforts for high severity and complex security incidents, coordinating containment, eradication, and recovery across IT, OT, and engineering teams.
• Apply threat modeling techniques to anticipate adversary attack paths, inform detection strategy, and improve defensive coverage across critical infrastructure systems.
• Perform advanced threat detection and analysis using SIEM, EDR/XDR, network monitoring, and forensic tools.
• Conduct malware analysis, digital forensics, and root cause investigations following security events affecting critical systems.
• Develop, tune, and maintain detection rules, correlation logic, and automated response playbooks to continuously improve SOC effectiveness.
• Coordinate tabletop exercises, purple team activities, and grid focused security assessments.
• Mentor and train junior SOC analysts, providing guidance on investigation techniques, tools, and best practices.
• Serve as the project implementor for SOC related initiatives, partnering with the PMO to plan, coordinate, and execute corporate security projects impacting SOC operations.

Requirements

• SIEM platforms (Splunk, QRadar, ArcSight, Microsoft Sentinel, or similar)
• EDR/XDR solutions