Security Operations Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Operations Analyst monitoring and investigating threats across client environments for Workstreet’s managed security and compliance services. Tuning detections, guiding remediation, and supporting 24x7 SOC coverage.
Responsibilities:
- Monitor and triage real-time alerts across EDR, firewall, IPS, WAF, and SIEM platforms
- Prioritize alert severity and distinguish true positives under time pressure
- Maintain continuous 24x7 threat monitoring through rotating shifts, including nights, weekends, and holidays
- Conduct deep incident investigations by correlating EDR, network, and cloud telemetry
- Determine incident root cause, scope, and indicators of compromise
- Provide incident analysis, containment recommendations, and remediation guidance to client teams
- Refine SIEM correlation rules and detection logic to eliminate false positives and close coverage gaps
- Document investigation findings and incident timelines in case management systems
- Update SOC playbooks and standard operating runbooks
- Partner with GRC engineers and vCISOs to align threat detection with client compliance obligations
- Execute investigation handoffs across shift rotations
- Guide junior analysts on investigative techniques
- Partner directly with client stakeholders to maintain strong detection coverage
Requirements:
- 3+ years of hands-on experience monitoring, triaging, and investigating security alerts within a high-velocity SOC setting
- Skilled at correlating data across EDR, firewall, IPS, WAF, and SIEM tools
- Ability to own complex investigations end to end and make sound escalation decisions with minimal oversight
- Ability to document findings and explain complex technical incidents in plain language to client stakeholders
- Willingness and ability to work a 24x7 rotating shift schedule, including nights, weekends, and holidays
- Recognized security credential such as CompTIA Security+, CySA+, GCIH, or equivalent credentials
- Practical experience with EDR tools such as CrowdStrike, SentinelOne, and Defender
- Practical experience with SIEM solutions such as Splunk, Microsoft Sentinel, Sumo Logic, and Wazuh
- Experience configuring, maintaining, and tuning security platforms beyond day-to-day alert triage
- Proficiency writing Python or PowerShell scripts and developing SOAR playbooks
- Prior experience in managed security service provider environments supporting multiple client organizations concurrently
- Familiarity with SOC 2, ISO 27001, and HIPAA requirements as they align with threat detection and incident response
- Excellent written and verbal English communication skills
- Reliable, high-speed internet connection and a professional home office environment supporting confidential conversations and uninterrupted shift coverage
- Willingness to travel locally for occasional onsite meetings, team gatherings, or business activities
- Participation in live video interviews with camera on and identity verification during recruitment and onboarding
- Successful identity verification and background screening, where permitted by law
Benefits:
- Clear career path with mentorship and training opportunities
- Reimbursement for successful completion of approved training and certification courses relevant to the current role
- Competitive base salary with regular performance reviews linked to merit-based appraisals and bonus opportunities
- Significant room for career advancement
- Remote-first flexibility to work from anywhere while collaborating with a global team, within the assigned shift
Similar Jobs
Security Operations Analyst
Security Operations Analyst monitoring and investigating threats across EDR, SIEM, firewall, IPS, and WAF platforms. Providing actionable incident findings and remediation guidance for Workstreet’s cybersecurity and compliance clients.
Security Operations AI Engineer – Contract
Security Operations AI Engineer securing enterprise AI/ML systems for 66degrees, an AI transformation partner. Building detection pipelines, incident playbooks, and governance controls for emerging AI threats.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing managed security services for Axians Switzerland. Analyzing cyberthreats and operating Microsoft Azure and M365 security environments.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss customers. Analyzing cyber threats across Microsoft 365 and Azure environments.
Security Operations Engineer, Microsoft Solutions
Security Operations Engineer operating managed security services across Microsoft 365 and Azure. Analyzing cyber threats and delivering security projects for Axians Schweiz’s digital transformation clients.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer implementing and operating managed security services for Axians’ Swiss cloud and IT customers. Analyzing cyberthreats and delivering Microsoft security projects.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating Axians Switzerland’s managed security services. Analyzing cyberthreats and implementing Microsoft-focused security projects across Azure and M365 environments.
SOC Analyst
Information Security & Compliance Analyst maintaining SOC 2, ISO 27001 and Cyber Essentials readiness for SyncEzy’s B2B SaaS integration platform. Owning evidence, controls, risks and audit coordination remotely.
Director, Security Operations Center
Director leading Thrive’s Security Operations Center for cloud, cybersecurity, networking, disaster recovery, and managed services. Overseeing SOC operations, incident response, threat monitoring, and analyst teams.
SOC Analyst
SOC Analyst monitoring security alerts and resolving incidents for Leadtech’s global digital products. Improving vulnerability management and security processes across cross-functional teams.
Global IT Security Operations Lead – Exposure Management
Global security operations leader building incident response, detection, and exposure management capabilities. Protecting aerospace intellectual property, manufacturing uptime, and hybrid IT environments.
Security Operations Associate
Security Operations Associate supporting Everbridge’s critical event management technology. Coordinating secure journey services, security assistance, vendors, client communications, and operational records.
Security Incident Response Manager – Abuse Operations
Stripe Security Incident Response Manager investigating fraud and abuse across its financial infrastructure platform. Leading incident response, mitigation, automation, and cross-functional security improvements.
Senior SOC Analyst
Senior SOC Analyst investigating and resolving OT security incidents for ABB’s industrial technology solutions. Performing forensic analysis, improving threat detection, and automating SOC processes.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer bei Axians Schweiz für Microsoft Cloud- und Managed-Security-Umgebungen. Implementierung, Betrieb und Weiterentwicklung von Managed Security Services sowie Analyse von Cyberbedrohungen.
Security Operations Engineer – Microsoft Solutions
Security Operations Engineer operating managed security services for Axians Switzerland’s Microsoft cloud and IT environments. Analyzing cyberthreats and implementing security projects.
Security Engineer III – Security Operations
Security Engineer detecting, investigating, and responding to threats across Primer's global payments infrastructure. Building Elastic, AWS, Python, and Terraform security operations automation.
Director of Security Operations
Director of Security Operations leading Backblaze’s cybersecurity monitoring, incident response, and vulnerability programs. Driving AI-assisted defenses, automation, and operational resilience across cloud and distributed environments.
Security Engineer – SOC
Security Engineer developing SOC detection systems for APT-ONE, a Berlin cybersecurity consultancy. Building SIEM/XDR platforms, detection-as-code pipelines, and AI-assisted security workflows.
HR Operations Analyst – Security & Apps
HR operations security analyst optimizing NBCUniversal’s global HR applications and access systems. Managing security access, audits, application releases, and HR technology improvements.