Senior Security Operations Analyst – Detection & Response

This is a fully remote position, open to applicants in Alabama, +30 more states.

📋 Description

• Participate in the 24/7 on-call and incident-response rotation alongside the security lead.

• Assess, investigate, and manage security alerts and incidents.

• Create and sustain incident-response runbooks, escalation procedures, and post-incident evaluations.

• Develop, adjust, and uphold SIEM detections, correlation rules, dashboards, and reporting within Coralogix.

• Integrate new log sources while minimizing false positives and detection gaps.

• Oversee vulnerabilities, prioritize findings, coordinate remediation efforts, and report on risk mitigation.

• Innovate detection-as-code solutions and lightweight SOAR automation.

• Provide consistent administrative and response support.

• Generate regular security metrics and reports for leadership.

• Supply control documentation for audits.

• Leverage AI/LLM tools to enhance investigations, correlation, and detection engineering.

• Enhance security operations tools, threat monitoring, and processes.

⛳️ Requirements

• A minimum of 5 years of experience in security operations, incident response, SOC, or detection engineering.

• Proven hands-on experience in independently participating in an on-call or incident-response rotation.

• Strong proficiency in SIEM, including the ability to author and tune detections, correlation rules, and dashboards.

• Familiarity with platforms such as Coralogix, Splunk, Elastic, Microsoft Sentinel, or similar.

• Practical experience in cloud security within AWS and Google Workspace, including identity and log sources.

• Capability to investigate and manage incidents comprehensively, including phishing/AiTM, account takeovers, business email compromise, and cloud/identity threats.

• Working knowledge of vulnerability management and coordinating remediation with engineering teams.

• Proficiency in scripting and automation using Python or similar languages.

• Ability to produce runbooks, metrics, and documentation suitable for audits.

• Capacity to operate independently and manage problems from start to finish.

• Must be authorized to work in the United States.

• Willingness to participate in an off-hours on-call rotation.

• Preferred: Experience in AI/LLM security analysis, regulated financial services or fintech, relevant certifications, and experience in establishing detection and response practices.

🏝️ Benefits

• Comprehensive medical, dental, and vision coverage.

• Flexible spending accounts (FSA) and health savings accounts (HSA).

• Unlimited paid time off.

• Ten company holidays.

• Fully remote work options available.

• Fully paid parental leave.

• Paid transition time following parental leave.

• Meaningful equity opportunities.

• 401K retirement plans.

• Guaranteed life insurance benefits.

• Short- and long-term disability coverage.

• Monthly stipends for internet and mobile plans.

• Wellness perks.

• One-time reimbursement for home office setup.

• Company-provided equipment, including a MacBook and monitor.