
Senior Information Security Analyst
Posted May 21

Posted May 21
This is a fully remote position, open to applicants in Guatemala.
• Identify, evaluate, and manage security incidents across cloud, identity, endpoint, and network environments.
• Lead incident response efforts, encompassing investigation, containment, eradication, recovery, and post-incident evaluations.
• Act as the main escalation contact for Information Security Analysts, offering guidance on complex alerts, root-cause analysis, investigative strategies, and mentorship.
• Promote continuous enhancement of SOC tools, workflows, procedures, and alerting by minimizing noise, optimizing detections, and boosting automation while maintaining security coverage.
• Collaborate with SOC, Offensive Security, Engineering, IT, Cloud, and business teams to pinpoint detection and response deficiencies, validate controls, and proactively address security vulnerabilities.
• Advocate for the integration of AI, advanced analytics, threat intelligence, and industry best practices to enhance alert fidelity, threat detection, analyst productivity, and overall security posture.
• Over 5 years of practical experience in a SOC, incident response, or related cybersecurity position, demonstrating a strong history in security investigations.
• Extensive experience securing cloud-first environments, especially AWS, along with familiarity with other cloud platforms.
• Established expertise with contemporary security tools, including EDR/ITDR, CSPM, SIEM and logging, email protection, network and access security, case management/workflow platforms, and SOAR.
• Strong knowledge of incident response across endpoint, cloud, identity, SaaS, and network attack scenarios, with experience in threat intelligence platforms and structured threat hunting initiatives.
• Experience in creating or refining playbooks, runbooks, automated response workflows, and AI/ML-driven security capabilities to bolster detection and improve analyst efficiency.
• Exceptional written and verbal communication skills, capable of clearly documenting incidents and conveying technical findings to both technical and non-technical stakeholders; relevant certifications such as GCFR, AWS Security Specialty, or AZ-500 are advantageous.
• Comprehensive health benefits.
• Life and disability insurance.
• Fertility and family-forming support programs.
• Paid holidays.
• Volunteer time off.
• Quarterly self-care days and no meeting days.
• Tuition and reading reimbursement programs.
• Thrive Global Wellness Program.
• Confidential Employee Assistance Program (EAP).
• Employee programs—including Employee Resource Groups (ERGs), GoTo Gives, and our charitable matching program.
OneSeven Tech (OST)
Get handpicked remote jobs straight to your inbox weekly.