Remote Security Operations Analyst – Data-Driven Defender

Greenhouse Software, Inc.; United States; Remote; USD 65,000 - 90,000; Full time

Benefits offered by this job

20 paid vacation days per year

10 paid sick leave days per year

Public holidays as per company policy

Medical budget

Opportunity to work remotely

Professional education budget

Language learning budget

Wellness budget

Job summary

JustMarkets, a fast-growing fintech company in the United States, is seeking a Security Operations Analyst to join as a full-time team member. You will monitor alert queues, triage incidents, and document findings to support rapid response.

Candidates should have hands-on SIEM experience, knowledge of EDR/XDR, and the ability to correlate data across endpoints, networks, and cloud services. The role offers remote work options and budget for professional education.

Qualifications

• Hands-on experience with security alert triage using at least one SIEM and EDR/XDR.
• Ability to build basic searches and correlate events across data sources (KQL/EQL).
• Interpret telemetry from endpoints, identity, network, cloud audits and services.
• Fundamentals of Windows, Linux, TCP/IP, DNS, HTTP, and authentication.
• Distinguish true vs. false positives; assign preliminary severity.
• Awareness of MITRE ATT&CK framework and threat intel relevance.
• Document evidence, actions and handover notes in a case-management system.

Responsibilities

• Monitor prioritized alert queues and validate whether alerts indicate real risk.
• Enrich cases and correlate relevant endpoint, identity, authentication, network, service, asset, user, timeline, and business context.
• Perform initial investigations, classify alerts, assess preliminary severity and scope, and document the evidence and reasoning in the case-management system.
• Close false positives and execute approved low-risk actions only through defined runbooks.
• Escalate suspected incidents, privileged-account issues, and high-impact or production-impact cases to L2, the manager, or Incident Response.
• Maintain clear handover notes and support improvements to case quality and runbooks.

Skills

Security alert triage

SIEM experience

KQL/EQL queries

Endpoint & network telemetry

Windows & Linux basics

Threat intel awareness

Investigation timelines

Runbooks adherence

Tools

Case-management system

Job description

JustMarkets, a fast-growing fintech company in the United States, is seeking a Security Operations Analyst to join as a full-time team member. You will monitor alert queues, triage incidents, and document findings to support rapid response.

Candidates should have hands-on SIEM experience, knowledge of EDR/XDR, and the ability to correlate data across endpoints, networks, and cloud services. The role offers remote work options and budget for professional education.