Security Operations Analyst L2 – SOC
Posted 57mins ago
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Operations Analyst monitoring alerts, investigating incidents, and maintaining compliance for Supply Chimp’s US government supply and logistics operations. Improving security tools, documentation, and controls remotely from Colombia.
Responsibilities:
- Independently execute and support day-to-day security operations
- Monitor and triage security alerts and investigate suspected security events
- Assess scope, impact, priority, and appropriate next steps
- Document alert dispositions, findings, decisions, and actions
- Escalate confirmed or suspected security events with relevant context
- Coordinate approved containment, recovery, and follow-up activities during defined working hours
- Execute recurring security and compliance reviews across assigned controls and frameworks
- Collect, review, organize, and maintain compliance evidence
- Identify control gaps, missing evidence, control drift, and potential findings
- Track findings and remediation commitments through completion or escalation
- Maintain security plans, compliance records, assessment artifacts, and documentation
- Perform vulnerability, endpoint, configuration, backup, access, and security-tool reviews
- Review vulnerability findings and verify remediation status
- Evaluate access, authentication, permissions, shared accounts, service accounts, and least-privilege controls
- Conduct or support security risk assessments for systems, applications, vendors, projects, integrations, and material changes
- Maintain risk and remediation records and follow up on open items
- Create and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance
- Keep security documentation aligned with current systems and processes
- Design, configure, execute, and evaluate phishing simulations and related security testing
- Identify gaps and recommend improvements to monitoring, processes, documentation, and controls
- Collaborate with IT, Engineering, and internal teams on security activities, findings, remediation, and user-facing security needs
- Contribute practical operational input as security tools, processes, and workflows mature
Requirements:
- 3+ years of relevant experience in security operations, information security, cybersecurity, or a closely related role
- Hands-on experience with security monitoring and SIEM tools, including alert triage, investigation, search or query capabilities, and documenting alert dispositions
- Hands-on experience with provisioning devices
- Hands-on experience with Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls is strongly preferred
- Strong understanding of vulnerability management, access control, endpoint security, logging, and incident response
- Experience performing recurring security or compliance control activities and producing clear, review-ready evidence and documentation
- CMMC, NIST SP 800-171, PCI DSS, or comparable framework experience and relevant security certifications are preferred
- Strong organization, prioritization, written communication, and follow-through
- Ability to manage recurring responsibilities and competing deadlines independently
- Demonstrated problem-solving and sound judgment with incomplete information or unclear conditions
- Professional proficiency in English, written and spoken
- Ability to work during core business hours of 7:00 AM to 4:00 PM PST
- Excitement about remote work and collaborating across a distributed team
- Application and resume must be submitted in English
Benefits:
- 15 paid vacation days per year
- Paid sick leave with medical certification
- Other applicable statutory paid leaves
- US Paid Holidays
- Colombian statutory benefits
- Social security contributions
- Prima de Servicios (13th month pay)
- Cesantías
- Holiday Pay Rate and Overtime Pay
- Surprise treats, including coffee
- Company shout-outs and celebrations
- Virtual parties and team moments throughout the year
















