Security Operations Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Operations Analyst defending Unqork’s AI-powered enterprise application platform. Monitoring threats, engineering SIEM/SOAR detections, and supporting incident response and compliance.
Responsibilities:
- Monitor SIEM, EDR/XDR, and other security tools to detect, analyze, and triage security alerts
- Follow established playbooks for timely and accurate initial responses to potential threats
- Use SOAR platforms to handle alerts efficiently and automate repetitive manual tasks
- Integrate and configure log-source ingestion into SIEM tools, including field and data normalization
- Create monitoring solutions based on active threat intelligence and maintain detection and log lifecycles
- Review daily threat intelligence feeds, security advisories, and industry alerts
- Protect against known Indicators of Compromise (IoCs) and emerging threat trends
- Work with IT Operations on hardware and software asset inventories
- Deploy and troubleshoot endpoint security agents on employee devices
- Collaborate with Engineering, Product, IT, and other departments on operational security requirements and architectural detectability
- Serve as the primary security technical expert for cross-functional partnerships
- Generate security metrics and operational reports
- Gather technical evidence for security policies and compliance audits such as SOC 2 and ISO 27001
Requirements:
- 3+ years of progressive experience in Security Operations, including at least 2 years contributing to a SOC, Managed Detection Response Service, or Incident Response team
- Experience designing, implementing, and managing mature SOC processes and automations
- Hands-on Python experience
- Technical expertise in threat detection, incident response, vulnerability management, SIEM, EDR/XDR, security monitoring platforms, and IAM solutions and processes
- Strong understanding of modern security threats, attack vectors, and defensive strategies
- Expertise in security frameworks such as NIST and MITRE ATT&CK and their practical application
- Ability to collaborate with technical and non-technical stakeholders at all levels, including executive leadership
- Ability to translate complex operational security incidents and risks into clear, actionable strategies
- Relevant industry certifications such as CISSP, CISM, GCIH, GCIA, or OSCP highly preferred
- Bachelor's degree in Computer Science, Information Security, or a related technical field; Master's degree a plus
Benefits:
- Work from home with a remote-first community
- Unlimited PTO
- Student loan payback program
- 100% employer-covered medical, dental, and vision options for employees and dependents
- Flexible Spending Account (FSA)
- Monthly stipend toward WFH setup, vacation, development and more
- Employer-sponsored 401(k) with contribution match
- Subsidized ClassPass Membership
- Generous Paid Parental Leave
- Target incentive eligibility
- Company equity in the form of stock options
Similar Jobs
Tier 2 SOC Analyst
Tier 2 SOC Analyst investigating and containing escalated SIEM and EDR threats for federal and Fortune 100 clients. Developing runbooks, managing vulnerabilities, and meeting overnight incident-response SLAs.
Tier 1 SOC Analyst
Tier 1 SOC Analyst monitoring SIEM and EDR alerts for Dragonfli Group’s federal and Fortune 100 cybersecurity clients. Triaging incidents, tracking vulnerabilities, and escalating overnight events.
Associate SOC Analyst
Associate SOC Analyst protecting Expel customers through managed detection and response. Investigating alerts, hunting threats, and responding across endpoint and cloud environments.
Director of Security Operations
Aledade, a value-based primary-care network, seeking a remote Director of Security Operations in the United States. Leading SOC operations, incident response, threat intelligence, vulnerability management, and security teams.
Senior GRC Analyst, SOC 2
Senior GRC Auditor I ensuring client satisfaction through effective IT controls and compliance audits. Develops client relationships while leading external audits to meet industry standards.
Security Operations Engineer – Incident Response
Security Operations Engineer leading incident response and forensic investigations at ProCircular. Managing critical security incidents and developing detection methodologies in a SOC environment.
Security Operations Engineer
Security Operations Engineer managing security operations and compliance for AI functions in higher education. Ensuring data protection and security in cloud environments and IT operations.
Senior Security Engineer, Incident Response
Senior Security Engineer leading the technical response to incidents and enhancing security processes for Twilio. Working across R&D Engineering and Business teams on security challenges and incident management.
SecOps Transformation Advisor
SecOps Transformation Advisor driving XSIAM revenue and consultative sales strategy for cybersecurity solutions. Engaging executive relationships and providing business value through tailored proposals.
Security Operations Engineer
Security Operations Engineer providing technical and operational support for MDR customers at Vector3. Involved in incident response, troubleshooting, and security initiatives.
Cybersecurity Incident Response Triage Analyst
Cybersecurity Incident Response Triage IR Analyst working with the CIRT team at Accenture Federal Services. Monitoring, analyzing incidents, and developing response strategies to enhance cybersecurity for federal government entities.
Presales Security Architect – SecOps
Presales Security Architect at GuidePoint Security serving as a technical advisor. Leading technical discovery, design, and positioning in cybersecurity across the Northeast region.
Analyst, Security Operations
Analyst in Security Operations at Danaher handling security events, mentoring junior analysts, and developing relationships with Security and IT teams. Reviewing security alerts and improving security posture across a multinational corporation.
Cyber Operations Lead – Incident Response
Cyber Operations Lead responsible for managing cyber incident response operations at Chickasaw Nation Industries. Collaborating with teams to guide investigations and implement security strategies.
Senior SOC Analyst
Analista SOC Sênior responsible for security operations, monitoring, and incident response at a fintech. Collaborating with teams to secure systems and mitigate risks.
External Communications, Operations & Analytics Specialist – Experienced/Senior
Boeing seeks External Communications Specialist to shape communication strategies and engage key media stakeholders. Collaborate across teams to manage communications operations and content strategy.
Cybersecurity Operations Engineer
Cybersecurity Operations Engineer enhancing cybersecurity operations for business customers in Switzerland. Working end-to-end with customers from implementation to operations.
SOC Analyst I
SOC Analyst I monitoring and detecting cybersecurity threats for Apollo Information Systems. Collaborating with the team to protect client networks and systems.
Junior SOC Analyst
SOC Analyst - Level 1 responsible for routine security investigations at Accesa. Combining alert analysis, evidence correlation, and case documentation in a shift-based operations role.
Cybersecurity Operations – Incident Response Lead
Cybersecurity Operations Lead managing 24×7 security operations and incident response for Coastal's hybrid banking environment. Leading detection, response, and vulnerability management to protect businesses and clients.