Security Operations Analyst II

This is a fully remote position, open to applicants in United States.

📋 Description

• Analyze alert data to identify malicious activities within the Rapid7 environment.

• Oversee investigations that involve collecting evidence, analyzing data, determining intrusion vectors, and identifying malicious activities.

• Develop comprehensive Incident Reports that document technical analyses, findings, and suggested remediation steps.

• Engage in rotational threat hunting activities to proactively detect unknown threats.

• Support Incident Response initiatives by examining forensic artifacts to trace threat actor movements.

• Deliver threat detection services to safeguard the organization.

• Investigate current attack methodologies to improve threat detection capabilities.

• Offer ongoing technical insights to Rapid7 product development teams.

⛳️ Requirements

• Strong problem-solving skills, critical thinking abilities, and technical creativity.

• Knowledge of Windows, macOS, and Linux operating systems.

• Practical experience with SIEM tools, such as the Rapid7 command platform or Splunk.

• Background in Security Operations Center functions, including incident response, threat hunting, and forensic investigations.

• Capability to identify process improvement areas and implement sustainable solutions.

• Ability to make prompt decisions during investigations.

• Responsibility for incident analyses, findings, and tracking remediation efforts.

• Proficiency in collaborating across security teams and with product developers.

• Commitment to embodying the company core values.

• Capacity to work in a collaborative, multi-dimensional team environment.

🏝️ Benefits

• Comprehensive healthcare coverage.

• Opportunities for professional development and training.

• Flexible work arrangements.

• Competitive salary and performance-based incentives.