Information Security Operation Center Analyst

Brooksrunning; Seattle (WA); On-site; USD 110,571 - 165,857; Full time

Benefits offered by this job

Product discounts

Fitness discounts

Employee recognition

Job summary

Brooksrunning seeks an Information Security SOC Analyst in Seattle to oversee security risks and manage day-to-day defense of enterprise technologies.

Ideal candidates will have 5 years of IT experience and 1 year in a SOC role. The position offers a competitive salary range of $110,571 - $165,857 annually, along with robust benefits including medical, 401(k), and generous paid time off.

Qualifications

• 5 years of information technology experience.
• Minimum 1 year in a SOC analyst or incident response role.
• Knowledge of the MITRE ATT&CK framework.

Responsibilities

• Conduct ongoing threat detection using logs and signals.
• Investigate and respond to suspicious email threats.
• Perform incident response to identify, contain, and mitigate attacks.

Skills

Analytical skills

Written communication skills

Technical communication

Problem-solving

Self-motivation

Education

Bachelor’s degree or equivalent experience

Tools

Palo Alto Security tools

Job description

Who We Are:

At Brooks, we believe movement is the key to feeling more alive. That’s why we’re driven to create gear and experiences that take people to the place that makes them feel more alive — whether it’s a headspace, a feeling, or a finish line.

Everyone who works at Brooks is propelled by a company culture that sparks excitement, fuels collaboration, inspires creativity, and ignites innovation.

Our brand values help bond us together and drive our success:

• Runner First – We act in the best interest of the runner
• Word is Bond – We do what we say we’ll do
• Champion Heart – We give our all in everything we do
• There is no “I” in Run – We stay generous with our humanity
• Keep Moving – We find ways to move every day, because joy is kinetic!

We welcome everyone from every walk of life looking to inspire others through the power of movement – because we’re all moving towards something. Let’s run there.

Your Job:

The mission of the Information Security Team is to manage Information Security risk at Brooks, including availability of systems, confidentiality and integrity of data, privacy, and compliance with relevant laws and regulations. We are seeking a security professional to detect and respond to security threats. As a Brooks Information Security Operations Center (SOC) Analyst, you will primarily be responsible for day-to-day defense of enterprise technologies, computing assets and network infrastructure. You will conduct ongoing threat detection using logs and signals from multiple sources, ensuring the confidentiality, integrity and availability of critical information systems and resources.

You will correlate activity across assets and environments to identify patterns of anomalous activity and prevent abuse. This role requires understanding of core infrastructure concepts such as common operating systems, networking, storage and how systems interact, as well as learning how the business operates in order to triage threats based on potential impact. You will perform incident response to identify, contain, and mitigate attacks.

Keys to success in this role include a sense of curiosity and a strong desire for continuous improvement of our security program and your own professional skills.

Incident Handling and Response

• Investigate and respond to suspicious email threats while continuously improving detection rules, user reporting workflows, and phishing defense capabilities based on observed attack patterns and trends.
• Thoroughly investigate and respond to cyber events and incidents, applying advanced analytical techniques to determine root cause, scope impact, and coordinate containment, eradication, and recovery efforts.
• Learn, refine, maintain, and operationalize incident response playbooks while exercising advanced technical knowledge and judgement appropriate to each situation, ensuring consistent execution during incidents and incorporating lessons learned to improve response effectiveness.
• Document, refine, and automate security processes using SOAR capabilities to improve response efficiency, consistency, and scalability across incident handling workflows.

Gap Analysis and Remediation

• Work within purple team to test detection of attacker TTPs and tune out false positive results, validating that controls prevent, detect, or alert to activity without generating excessive false positives.
• Recommend security solutions and practices that protect company services and assets and assist engineers in implementation.

Maintain Situational Awareness

• Ensure logs from all appropriate systems are ingested to support continuous monitoring, anomaly detection, and forensic investigations.
• Work with business stakeholders to ensure accounts and privileges are properly maintained throughout their lifecycle, following the principles of least privilege.
• Maintain awareness of information security issues and trends relevant to the Brooks ecosystem to understand emerging threats and technologies.
• Maintain professional security certifications and accreditations.

Qualifications

• Bachelor’s degree or equivalent education and experience.
• 5 years information technology experience.
• Minimum 1 year in a SOC analyst or incident response role.
• Excellent analytical skills and keen attention to detail.
• Knowledge of the MITRE ATT&CK framework and common cyber threat attack paths.
• Use of business knowledge, innovative thinking, and sound judgment to resolve problems and challenges.
• Strong written communication skills – able to clearly document incident investigation work.
• Practical knowledge of corporate computing environments.
• Ability to communicate technical subject matter to non-technical individuals for security awareness training.
• Ability to prioritize and organize tasks in a dynamic business environment.
• Self‑motivation and teamwork.
• Knowledge of security best practices.

Preferred Qualifications

• Professional certification such as CySA+, Security+, or GSEC.
• Hands‑on experience with Palo Alto Security tools.
• Knowledge of ITIL standards and processes.
• Experience configuring infrastructure systems and knowledge of network protocols.

Compensation

The pay range for this position, based out of the Brooks Seattle HQ, is $110,571 - $165,857 per year. Base pay offered will vary depending on job‑related knowledge, skills, and experience.

Other

Brooks is proud to offer a robust benefits package to employees and their families.

Benefits

• Medical, dental, vision, life and AD&D insurance, disability insurance, HSA and employer contribution, FSA.
• Family & fertility assistance.
• 401(k) Savings Plan and match.
• Employee assistance program.
• Transportation assistance.

Paid Time Off

• Five weeks of paid time off.
• Eleven paid holidays.
• Paid sick and parental leave.

Bonus

In addition to base pay, employees may also be offered an annual bonus based on company performance.

Perks

• Product discounts.
• Employee recognition.
• Fitness discounts.
• Volunteer and donation benefits.

Location

You will spend 4 days per week in our Seattle offices.

Equal Employment Opportunity

At Brooks, we celebrate diversity & equity. We are committed to creating an inclusive environment, and encourage people of all backgrounds, perspectives, experiences, and skills to apply. Brooks is proud to be an equal employment opportunity employer. All employment decisions are made without regard to race, religion, creed, color, national origin, age, sex, gender, gender identity or expression, two‑spirit identity, sexual orientation, genetic information, the presence of a physical, mental, or sensory disability, marital status, pregnancy, caste, citizenship or immigration status, honorably discharged veteran or military status, actual or perceived victims of domestic violence, harassment, sexual assault or stalking, HIV or Hepatitis C infection, political ideology, use of a trained service animal by a person with a disability, or any other basis protected by federal, state, or local law, or any other non‑merit based factors.