Security Operations Analyst

Accountabilities:

• • Monitor SIEM, EDR/XDR, and other security platforms, investigate alerts, and perform accurate and timely initial triage and response using established playbooks.
  • Leverage SOAR capabilities to improve alert handling and automate repetitive security operations, identifying opportunities to increase efficiency and reduce manual effort.
  • Engineer and maintain SIEM integrations and log ingestion, including data normalization, detection rules, monitoring solutions, and log lifecycle management.
  • Use current threat intelligence, security advisories, and indicators of compromise to identify emerging threats and strengthen detection and defensive strategies.
  • Support threat hunting, incident response, vulnerability management, and broader security operations activities across the environment.
  • Partner with IT Operations to maintain accurate hardware and software inventories and support the deployment, troubleshooting, and maintenance of endpoint security controls.
  • Collaborate with Engineering, Product, IT, and other teams to incorporate operational security requirements, improve system detectability, and influence technical and architectural decisions.
  • Serve as a technical security partner across the organization, communicating risks, incidents, and recommended actions to both technical and non-technical stakeholders.
  • Support security metrics, operational reporting, and the collection of technical evidence for security policies and compliance frameworks, including SOC 2 and ISO 27001.
  • Contribute to the continuous improvement of security processes, controls, playbooks, and automation capabilities.

  Requirements:

  • 3+ years of progressive experience in Security Operations, including at least 2 years contributing to a SOC, Managed Detection and Response service, or Incident Response team.
  • Demonstrated engineering experience designing, implementing, and managing mature SOC processes, security workflows, and automation.
  • Strong hands-on Python development experience for security operations, automation, or related use cases.
  • Practical expertise in threat detection, incident response, vulnerability management, SIEM, EDR/XDR, security monitoring platforms, and IAM solutions and processes.
  • Strong understanding of modern cyber threats, attack techniques, vulnerabilities, and defensive strategies.
  • Practical knowledge of security frameworks such as NIST and MITRE ATT&CK and their application to threat detection, investigation, and incident response.
  • Excellent analytical, problem-solving, communication, and interpersonal skills, with the ability to collaborate effectively across technical and executive audiences.
  • Ability to translate complex security incidents and risks into clear, actionable recommendations and communicate them effectively to diverse stakeholders.
  • Bachelor's degree in Computer Science, Information Security, or a related technical discipline; a Master's degree is a plus.
  • Industry certifications such as CISSP, CISM, GCIH, GCIA, or OSCP are highly preferred.

  Benefits:

  • Salary: $70,000–$90,000 annually for Tier 2 locations or $80,000–$100,000 for Tier 1 locations, with compensation determined by location, experience, skills, and other relevant factors.
  • Potential eligibility for a target incentive and company equity in the form of stock options.
  • Remote-first work environment with work-from-home flexibility.
  • Unlimited paid time off, with an emphasis on taking meaningful time away from work.
  • 100% employer-covered medical, dental, and vision options for employees and dependents.
  • Flexible Spending Account (FSA).
  • Monthly stipend supporting work-from-home setup, vacation, professional development, and other needs.
  • Employer-sponsored 401(k) with contribution matching.
  • Student loan repayment program.
  • Subsidized ClassPass membership.
  • Generous paid parental leave.
  • Opportunities to develop expertise across threat detection, incident response, security engineering, automation, and compliance.
  • A collaborative environment focused on security, privacy awareness, continuous improvement, and professional growth.