Senior Security Operations Analyst III

About the role

Clear is looking for a Senior Security Operations Analyst III to join its Security Operations Center. The analyst will lead complex investigations across corporate networks, endpoints, data centers and cloud environments, and will help improve detection and response capabilities.

Key responsibilities

• Lead complex investigations of security events across corporate networks, endpoints, data centers, cloud environments and other critical systems, driving incidents from analysis through escalation and remediation.
• Develop, tune and optimize threat detection logic in SIEM, EDR and other platforms, reducing false positives and improving alert fidelity.
• Partner with Engineering, Infrastructure and other teams to investigate threats, identify root causes, communicate risk and drive remediation.
• Apply threat intelligence, data, automation and AI‑enabled tools to identify emerging attack patterns and accelerate investigations.
• Serve as subject matter expert and escalation point, mentoring junior analysts and establishing scalable processes, playbooks and standards.
• Continuously evaluate detection coverage against frameworks such as MITRE ATT&CK and improve visibility.
• Lead improvements to SOC workflows, SOPs, documentation and tooling to increase efficiency.
• Participate in on‑call rotation and respond to critical security events outside standard hours.

Required profile

• Proven experience leading security investigations in enterprise environments.
• Strong analytical and problem‑solving abilities with sound security judgment.
• Excellent communication skills to convey technical findings to both technical and non‑technical audiences.
• Ability to mentor and share knowledge with junior team members.
• Experience working in a fast‑paced SOC environment and handling on‑call duties.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR)
• Threat detection logic development
• Threat intelligence platforms
• Automation and AI‑enabled security tools
• MITRE ATT&CK framework
• Cloud and data‑center security concepts