SOC Analyst

Job Title: Sr. Security Analyst with SOC
Location: 100% Remote

Job Summary:

We are seeking a Senior Security Analyst to strengthen and mature Security Operations (SOC) detection and response capabilities across enterprise, cloud, and third-party environments. This role is accountable for advanced alert triage, investigation, and incident analysis. The Senior Security Analyst partners closely with the incident response team, IT, and engineering teams to improve signal quality, close detection gaps, and strengthen operational readiness. The ideal candidate is a senior individual contributor with strong investigation skills, excellent judgment under pressure, and the ability to translate attacker behavior and telemetry into actionable response and detection improvements.

Requirements:

• 6+ years in security operations, incident response, or threat detection, with demonstrated ownership of complex investigations
• Strong experience triaging and investigating alerts across SIEM, EDR/XDR, identity platforms, and cloud/SaaS environments
• Proficiency with investigation workflows: hypothesis-driven analysis, scoping, timeline creation, and clear escalation/handoff
• Hands-on ability to query and analyze telemetry and turn findings into actionable outcomes
• Practical knowledge of attacker techniques and common enterprise attack paths (identity compromise, lateral movement, persistence, exfiltration)
• Experience applying threat intelligence (IOCs/TTPs) to investigations and to improve detection content
• Strong written and verbal communication skills, including producing incident documentation appropriate for technical and leadership audiences
• Ability to influence and collaborate across teams (IT, cloud, infrastructure, engineering) and mentor junior members

Required Skills:

• Detection and hunting experience
• Cloud security operations experience in Google Cloud Platform, including investigation of cloud control plane and SaaS audit logs
• Hands-on incident response experience (on-call/rotations), including coordination, containment support, and recovery validation
• Scripting/automation skills to enrich investigations and improve SOC efficiency