Security Operations Analyst L2 – SOC

This is a fully remote position, open to applicants in Colombia.

📋 Description

• Execute and support daily security operations independently.

• Monitor, triage security alerts, and investigate potential security incidents.

• Evaluate the scope, impact, priority, and appropriate next actions.

• Document the outcomes of alerts, findings, decisions, and actions taken.

• Escalate confirmed or suspected security events with necessary context.

• Coordinate approved containment, recovery, and follow-up actions during specified working hours.

• Conduct recurring security and compliance reviews across designated controls and frameworks.

• Gather, review, organize, and maintain compliance evidence effectively.

• Identify control vulnerabilities, absent evidence, control drift, and potential findings.

• Monitor findings and remediation commitments until completion or escalation.

• Maintain security plans, compliance records, assessment materials, and documentation.

• Conduct reviews of vulnerabilities, endpoints, configurations, backups, access, and security tools.

• Review vulnerability findings and confirm remediation status.

• Assess access, authentication, permissions, shared accounts, service accounts, and least-privilege controls.

• Conduct or aid in security risk assessments for systems, applications, vendors, projects, integrations, and significant changes.

• Maintain risk and remediation documentation and follow up on outstanding items.

• Develop and maintain security procedures, runbooks, checklists, assessment tools, and triage guidelines.

• Ensure security documentation aligns with current systems and processes.

• Design, configure, execute, and assess phishing simulations and related security testing.

• Identify deficiencies and propose enhancements to monitoring, processes, documentation, and controls.

• Collaborate with IT, Engineering, and internal teams regarding security activities, findings, remediation, and user-focused security requirements.

• Provide practical operational insights as security tools, processes, and workflows evolve.

⛳️ Requirements

• Over 3 years of relevant experience in security operations, information security, cybersecurity, or a similar role.

• Hands-on experience with security monitoring and SIEM tools, including alert triage, investigation, search or query abilities, and documenting alert outcomes.

• Practical experience with device provisioning.

• Strong preference for hands-on experience with Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls.

• Solid understanding of vulnerability management, access control, endpoint security, logging, and incident response protocols.

• Experience in performing recurring security or compliance control tasks and producing clear, review-ready documentation and evidence.

• Preferred experience with CMMC, NIST SP 800-171, PCI DSS, or similar frameworks, along with relevant security certifications.

• Excellent organizational, prioritization, written communication, and follow-through skills.

• Ability to manage ongoing responsibilities and competing deadlines autonomously.

• Proven problem-solving abilities and sound judgment in ambiguous situations or with incomplete information.

• Professional proficiency in English, both written and spoken.

• Availability to work during core business hours from 7:00 AM to 4:00 PM PST.

• Enthusiasm for remote work and collaboration within a distributed team.

• Application and resume must be submitted in English.

🏝️ Benefits

• 15 paid vacation days annually.

• Paid sick leave with medical certification.

• Other applicable statutory paid leaves.

• Paid US holidays.

• Colombian statutory benefits.

• Contributions to social security.

• Prima de Servicios (13th month pay).

• Cesantías.

• Holiday Pay Rate and Overtime Pay.

• Surprise treats, including coffee.

• Company shout-outs and celebrations.

• Virtual parties and team bonding moments throughout the year.