Senior Security Operations Analyst – Detection & Response

This is a fully remote position, open to applicants in Alabama, +30 more states.

📋 Description

• Participate in the 24/7 on-call and incident-response rotation alongside the security lead.

• Assess, investigate, and manage the containment of security alerts and incidents.

• Develop and sustain incident-response runbooks, escalation procedures, and post-incident analyses.

• Create, refine, and oversee SIEM detections, correlation rules, dashboards, and reports in Coralogix.

• Integrate new log sources while minimizing false positives and detection blind spots.

• Conduct daily vulnerability management, prioritize findings, coordinate remediation efforts, and report on risk mitigation.

• Design detection-as-code solutions and lightweight SOAR automation.

• Act as a supplementary administrative and response pathway.

• Generate regular security metrics and reports for leadership.

• Provide control evidence for audit processes.

• Utilize AI/LLM tools to enhance investigation, correlation, and detection engineering.

• Contribute to the ongoing enhancement of security operations, tools, and threat monitoring.

⛳️ Requirements

• Over 5 years of experience in security operations, incident response, SOC, or detection engineering.

• Proven hands-on experience in independently participating in an on-call/incident-response rotation.

• Strong proficiency in SIEM, including the creation and tuning of detections, correlation rules, and dashboards.

• Familiarity with tools such as Coralogix, Splunk, Elastic, Microsoft Sentinel, or similar platforms.

• Practical experience with cloud security in AWS and Google Workspace, specifically concerning identity and log sources.

• Capability to investigate and manage phishing, account takeover, business email compromise, and cloud/identity threats from start to finish.

• Working knowledge of vulnerability management and collaboration with engineering teams for remediation.

• Scripting and automation skills in Python or a similar language.

• Ability to produce runbooks, metrics, and documentation suitable for audits.

• Capacity to work independently and manage issues comprehensively.

• Authorized to work in the United States.

• Willingness to participate in an off-hours on-call rotation.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Flexible spending accounts (FSA) and health savings accounts (HSA).

• Unlimited paid time off.

• 10 company holidays.

• Fully paid parental leave, including supplemental state Paid Family Leave, up to 8 weeks in states without PFL, and 4 weeks of fully paid transition time.

• Meaningful equity opportunities.

• 401K retirement plans.

• Guaranteed life insurance.

• Coverage for short- and long-term disabilities.

• Monthly stipends for internet, mobile plans, and wellness.

• One-time reimbursement for home office setup.

• Company-provided equipment such as a MacBook and monitor.

• Options for fully remote work and access to the in-person Palo Alto HQ environment.