Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee security tools and platforms to detect suspicious activities and potential threats.

• Investigate alerts, triage incidents, and document findings, root causes, and remediation steps.

• Act as the main operational liaison between customers, MDR providers, and internal teams for security events and escalations.

• Organize incident response actions among MDR partners and internal teams.

• Communicate security incidents, associated risks, and remediation progress to customers.

• Participate in incident reviews, root cause analysis discussions, and customer meetings.

• Ensure that MDR services adhere to customer SLAs and contractual obligations.

• Escalate critical risks and guarantee timely resolutions across stakeholders.

• Conduct vulnerability assessments and coordinate remediation efforts across various environments.

• Identify and prioritize risks, suggesting mitigation strategies to internal leadership and customers.

• Maintain and optimize security tools, including SIEM, EDR, firewalls, and intrusion detection/prevention systems.

• Analyze logs and telemetry to detect threats and enhance detection capabilities.

• Develop and sustain security operations processes, SOPs, and incident response runbooks to ensure consistent and scalable service delivery.

• Create repeatable workflows for incident detection, escalation, and remediation.

• Continuously update playbooks based on lessons learned and threat intelligence.

• Assist in onboarding new customers by defining operational procedures.

• Collaborate with Help Desk and Infrastructure teams to foster security awareness and operational readiness.

• Provide training on security tools, processes, and escalation protocols.

• Empower teams to identify, triage, and appropriately escalate security events.

• Offer ongoing guidance to enhance collaboration across teams and improve response effectiveness.

• Support the development and enforcement of security policies, standards, and procedures.

• Engage in audits and maintain documentation aligned with frameworks such as ISO 27001, NIST, SOC 2, and CMMC.

• Stay updated on emerging threats, vulnerabilities, and industry trends.

• Propose and implement enhancements to bolster security posture across both internal and customer environments.

⛳️ Requirements

• Minimum of 2 years of experience in cybersecurity, SOC operations, or managed security services.

• Experience working with MDR providers or in managed security settings.

• Strong comprehension of incident response procedures and threat detection methodologies.

• Experience in developing documentation, runbooks, or operational workflows.

• Capability to convey technical security issues to both technical and non-technical audiences.

• Familiarity with Microsoft Security tools, CrowdStrike, Palo Alto, and SentinelOne.

• Exceptional analytical, problem-solving, and organizational abilities.

• Ability to juggle multiple priorities and respond efficiently under pressure.

🏝️ Benefits

• Comprehensive medical, dental, and vision benefits with significantly subsidized premiums.

• Two weeks of paid time off during your first year, with increasing PTO as tenure grows, plus most major holidays off.

• 401(k) Plan with employer matching contributions.

• Onsite Fitness Center available for employees.

• Monthly onsite massages offered to staff.