This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst based in the United States.
This is a remote-first opportunity for a security professional focused on protecting critical enterprise systems against an evolving threat landscape. You will contribute across security monitoring, threat detection, incident response, threat intelligence, and security automation. The role combines hands-on technical work with opportunities to improve SOC processes, detection capabilities, and operational resilience. You will work closely with IT, Engineering, Product, and other technical teams to embed security into systems and workflows. You will also help strengthen security architecture, asset protection, and compliance readiness. This role is well suited to an analytical, technically strong professional who enjoys solving complex security challenges and turning intelligence into practical defensive action.
Accountabilities:
- Monitor SIEM, EDR/XDR, and other security platforms, investigate alerts, and perform accurate and timely initial triage and response using established playbooks.
- Leverage SOAR capabilities to improve alert handling and automate repetitive security operations, identifying opportunities to increase efficiency and reduce manual effort.
- Engineer and maintain SIEM integrations and log ingestion, including data normalization, detection rules, monitoring solutions, and log lifecycle management.
- Use current threat intelligence, security advisories, and indicators of compromise to identify emerging threats and strengthen detection and defensive strategies.
- Support threat hunting, incident response, vulnerability management, and broader security operations activities across the environment.
- Partner with IT Operations to maintain accurate hardware and software inventories and support the deployment, troubleshooting, and maintenance of endpoint security controls.
- Collaborate with Engineering, Product, IT, and other teams to incorporate operational security requirements, improve system detectability, and influence technical and architectural decisions.
- Serve as a technical security partner across the organization, communicating risks, incidents, and recommended actions to both technical and non-technical stakeholders.
- Support security metrics, operational reporting, and the collection of technical evidence for security policies and compliance frameworks, including SOC 2 and ISO 27001.
- Contribute to the continuous improvement of security processes, controls, playbooks, and automation capabilities.
Requirements:
- 3+ years of progressive experience in Security Operations, including at least 2 years contributing to a SOC, Managed Detection and Response service, or Incident Response team.
- Demonstrated engineering experience designing, implementing, and managing mature SOC processes, security workflows, and automation.
- Strong hands-on Python development experience for security operations, automation, or related use cases.
- Practical expertise in threat detection, incident response, vulnerability management, SIEM, EDR/XDR, security monitoring platforms, and IAM solutions and processes.
- Strong understanding of modern cyber threats, attack techniques, vulnerabilities, and defensive strategies.
- Practical knowledge of security frameworks such as NIST and MITRE ATT&CK and their application to threat detection, investigation, and incident response.
- Excellent analytical, problem-solving, communication, and interpersonal skills, with the ability to collaborate effectively across technical and executive audiences.
- Ability to translate complex security incidents and risks into clear, actionable recommendations and communicate them effectively to diverse stakeholders.
- Bachelor's degree in Computer Science, Information Security, or a related technical discipline; a Master's degree is a plus.
- Industry certifications such as CISSP, CISM, GCIH, GCIA, or OSCP are highly preferred.
Benefits:
- Salary: $70,000–$90,000 annually for Tier 2 locations or $80,000–$100,000 for Tier 1 locations, with compensation determined by location, experience, skills, and other relevant factors.
- Potential eligibility for a target incentive and company equity in the form of stock options.
- Remote-first work environment with work-from-home flexibility.
- Unlimited paid time off, with an emphasis on taking meaningful time away from work.
- 100% employer-covered medical, dental, and vision options for employees and dependents.
- Flexible Spending Account (FSA).
- Monthly stipend supporting work-from-home setup, vacation, professional development, and other needs.
- Employer-sponsored 401(k) with contribution matching.
- Student loan repayment program.
- Subsidized ClassPass membership.
- Generous paid parental leave.
- Opportunities to develop expertise across threat detection, incident response, security engineering, automation, and compliance.
- A collaborative environment focused on security, privacy awareness, continuous improvement, and professional growth.
How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
#LI-CL1
