Hands-On Security Operations Analyst – Incident Response

Office Ally; Vancouver (WA); On-site; USD 90,000 - 100,000; Full time

Benefits offered by this job

Medical benefits

Dental & Vision

401(k) match

Paid time off

Job summary

Office Ally is seeking a Security Operations Analyst to serve as the first line of defense in our security program. You will monitor incidents, triage alerts across SIEM, EDR, identity, email security, and data protection, and own runbooks and detection logic to speed up responses.

You will work with security engineering, cloud infrastructure, and IT to investigate threats, coordinate responses, and maintain audit trails for compliance. This role offers hands-on ownership and impactful work.

Qualifications

• Bachelor's degree in CS, IT, Cybersecurity, or related field, or equivalent experience.
• 2+ years in a SOC or incident response role.
• Proficiency with Microsoft Sentinel and Defender suite.
• Ability to read/write KQL and build hunting queries.
• Understanding of AD/Entra ID fundamentals.
• Experience with email-based threat investigation.

Responsibilities

• Monitor and triage security incidents across the environment with clear, complete documentation.
• Investigate Endpoint alerts and run live response sessions when needed.
• Analyze internal alerts, risky apps, unusual activity, and policy violations.
• Manage security investigations and coordinate remediation across teams.
• Document all incidents for audit evidence and post-incident review.

Skills

SOC experience

KQL

AD/Entra ID

MDE/Defender

PowerShell

Education

Bachelor's in CS/IT/Cybersecurity

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

Jira

Job description

Office Ally is seeking a Security Operations Analyst to serve as the first line of defense in our security program. You will monitor incidents, triage alerts across SIEM, EDR, identity, email security, and data protection, and own runbooks and detection logic to speed up responses.

You will work with security engineering, cloud infrastructure, and IT to investigate threats, coordinate responses, and maintain audit trails for compliance. This role offers hands-on ownership and impactful work.