Security Operations Analyst

• Experienced SOC analyst - bring 3+ years of hands-on experience monitoring, triaging, and investigating security alerts within a high-velocity SOC setting.
• Multi-platform telemetry investigator - skilled at correlating data daily across EDR, firewall, IPS, WAF, and SIEM tools to trace root causes under pressure.
• Autonomous incident owner - demonstrated ability to own complex investigations end to end and make sound escalation calls with minimal oversight.
• Clear technical communicator - able to document findings and explain complex technical incidents in plain language directly to client stakeholders.
• 24x7 rotation performer - willing and able to work a 24x7 rotating shift schedule, including nights, weekends, and holidays as assigned.
• Collaborative shift operator - thrives in fast-paced team environments, backing up colleagues across shift transitions and maintaining operational continuity.

What help you succeed

• Active security credentials - hold recognized industry designations such as CompTIA Security+, CySA+, GCIH, or equivalent credentials.
• EDR and SIEM platform mastery - practical experience with EDR tools (CrowdStrike, SentinelOne, Defender) and SIEM solutions (Splunk, Microsoft Sentinel, Sumo Logic, Wazuh).
• Tooling administration and tuning - experience configuring, maintaining, and tuning security platforms beyond day-to-day alert triage.
• SOAR and automation scripting - proficiency writing Python or PowerShell scripts and developing SOAR playbooks to automate triage workflows.
• MSSP environment background - prior experience in managed security service provider environments supporting multiple client organizations concurrently.
• Compliance framework familiarity - awareness of how SOC 2, ISO 27001, and HIPAA requirements align with threat detection and incident response operations.