Security Operations Analyst

Role overview

This is a hands-on cybersecurity position supporting a fast-moving security operations center. The role is based in the United States and is posted through a partner organization that handles applications and the remaining hiring steps. The focus is on spotting, examining, and responding to real-world threats across endpoint, network, and cloud environments.

You will work in a technically demanding, collaborative setting where the work centers on alert investigation, incident triage, forensic analysis, malware review, and response coordination. The position is well suited to someone who wants to deepen their experience in DFIR, threat analysis, and detection improvement while contributing to a mission-driven global security team protecting large-scale endpoint and identity environments.

Key accountabilities

• Review, investigate, and handle alerts raised by SOC tooling and detection platforms, making sure incidents are managed quickly and accurately.
• Carry out detailed analysis of EDR telemetry, log data, and forensic evidence to identify root cause and suggest remediation steps.
• Perform both static and dynamic malware analysis to help classify threats and support containment.
• Examine suspicious activity in cloud and productivity environments, including Microsoft M365, and provide practical remediation advice.
• Assist with escalation paths coming from product support and other internal teams for security-related issues.
• Help refine detection rules and improve alert quality through tuning and related detection engineering work.
• Take part in team efforts to improve SOC processes, tools, and security outcomes overall.

Required profile

• At least 2 years of experience in a SOC, incident response, or digital forensics/DFIR role.
• Comfort working across Windows, Linux, and macOS as possible attack surfaces.
• Practical understanding of adversary tradecraft mapped to MITRE ATT&CK, including persistence, privilege escalation, lateral movement, and defense evasion.
• Hands-on experience analyzing malware behavior using static and dynamic techniques.
• Good knowledge of Windows administration and enterprise environments, including Active Directory, Group Policy, and domain architecture.
• Strong grasp of networking basics such as TCP/IP, DNS, ports and protocols, NAT, VLANs, and routing.
• Awareness of web technologies and common security weaknesses, including the OWASP Top 10.
• Ability to communicate technical findings clearly for both technical and non-technical audiences.
• A naturally curious approach and interest in ongoing learning and threat research.

Compensation and benefits

The role offers a competitive base salary of USD 100,000 to USD 125,000 per year, with bonus and equity eligibility. There may also be eligibility for on-call or call-in pay in addition to base compensation.

• 100% remote work with flexibility aligned to a US Pacific Time Zone schedule.
• Medical, dental, and vision coverage.
• 401(k) plan with employer contributions regardless of the employee contribution level.
• Generous paid time off, including vacation, sick leave, and paid holidays.
• 12 weeks of paid parental leave.
• Stock options for all full-time employees.
• Home office setup stipend and a monthly digital reimbursement allowance.
• Annual support for learning and professional development.
• Access to coaching and personal development resources.

Application and hiring process

The employer uses an AI-supported matching process to screen applications quickly and fairly against the role’s core requirements. Candidate shortlists are shared with the hiring company, and interviews or assessments are handled by the company’s own team.

Privacy and data use

Submitting an application means your personal data may be processed to evaluate your candidacy and shared with the hiring employer under applicable data protection laws, including GDPR where relevant. You may request access, correction, deletion, or objection to the processing of your data at any time.

The hiring process may also use AI tools to assist with tasks such as resume review or response analysis. These tools support recruiters but do not replace human judgment, and final hiring decisions are made by people.