Security Operations Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee SIEM, EDR/XDR, and various security tools to identify, analyze, and manage security alerts.

• Adhere to established protocols for prompt and precise initial responses to potential threats.

• Utilize SOAR platforms to efficiently manage alerts and automate repetitive manual processes.

• Integrate and configure log-source ingestion into SIEM tools, focusing on field and data normalization.

• Develop monitoring solutions based on current threat intelligence and uphold detection and log lifecycles.

• Review daily threat intelligence feeds, security advisories, and industry alerts.

• Safeguard against known Indicators of Compromise (IoCs) and emerging threat trends.

• Collaborate with IT Operations to maintain hardware and software asset inventories.

• Implement and troubleshoot endpoint security agents on employee devices.

• Work alongside Engineering, Product, IT, and other departments to address operational security requirements and enhance architectural detectability.

• Act as the primary security technical expert for cross-functional collaborations.

• Produce security metrics and operational reports.

• Collect technical evidence for security policies and compliance audits, including SOC 2 and ISO 27001.

⛳️ Requirements

• A minimum of 3 years of progressive experience in Security Operations, with at least 2 years in a SOC, Managed Detection Response Service, or Incident Response team.

• Proven experience in designing, implementing, and managing advanced SOC processes and automations.

• Practical experience with Python.

• Technical proficiency in threat detection, incident response, vulnerability management, SIEM, EDR/XDR, security monitoring platforms, and IAM solutions and processes.

• Strong knowledge of contemporary security threats, attack vectors, and defensive strategies.

• Expertise in security frameworks like NIST and MITRE ATT&CK, along with their practical applications.

• Capability to collaborate with both technical and non-technical stakeholders across all levels, including executive leadership.

• Ability to simplify complex operational security incidents and risks into clear, actionable strategies.

• Relevant industry certifications such as CISSP, CISM, GCIH, GCIA, or OSCP are highly preferred.

• A Bachelor’s degree in Computer Science, Information Security, or a related technical field; a Master’s degree is a plus.

🏝️ Benefits

• Option to work from home within a remote-first community.

• Unlimited Paid Time Off (PTO).

• Student loan repayment program.

• Comprehensive medical, dental, and vision coverage for employees and their dependents, fully funded by the employer.

• Flexible Spending Account (FSA).

• Monthly stipend for work-from-home setup, vacation, professional development, and more.

• Employer-sponsored 401(k) plan with matching contributions.

• Subsidized ClassPass membership.

• Generous Paid Parental Leave.

• Eligibility for target incentives.

• Company equity in the form of stock options.