Remote Security Operations Analyst II (SOC)

Remote; San Francisco (CA); Remote; USD 64,000 - 85,000; Full time

Job summary

AlphaSense is seeking a Security Operations Analyst II to join our Security Operations team in a fully remote capacity from Canada. This role sits at Tier 1–2, focusing on triage, structured investigations, and contributing to detection quality.

You will manage the day-to-day alert queue, investigate escalated cases, and work with senior analysts to close coverage gaps. Ideal candidates bring analytical thinking, thorough documentation, and growing independence.

Qualifications

• 2–4+ years of hands-on experience in a SOC or security operations role with alert triage responsibility.
• Solid understanding of MITRE ATT&CK framework and how to label attacker behavior.
• Working knowledge of EDR tooling for process tree analysis and detection review.
• Familiarity with SIEM-based investigation, log querying, and cross-source correlation.
• Exposure to cloud security monitoring (AWS or GCP) including IAM and audit logs.
• Experience investigating identity-based alerts in an enterprise IdP (e.g., Okta, Entra ID).
• Strong written communication and ability to document investigations clearly.

Responsibilities

• Monitor and triage alerts across endpoint, network, cloud, and identity sources with accuracy.
• Perform structured investigations on escalated alerts, build timelines, and correlate events.
• Classify alerts with rationale (true positive, false positive, benign) and document findings.
• Identify scope and blast radius for incidents and escalate with complete packages.
• Participate in active incident response with evidence collection and timeline reconstruction.
• Maintain timely case notes and shift handoff summaries.
• Contribute to runbooks and collaborate with detections engineers to improve detections.

Skills

MITRE ATT&CK

EDR tooling

SIEM investigation

Network protocols

Cloud security

Identity alerts

Tools

CrowdStrike Falcon

SentinelOne

Google Chronicle

Microsoft Sentinel

Okta

Entra ID

Job description

AlphaSense is seeking a Security Operations Analyst II to join our Security Operations team in a fully remote capacity from Canada. This role sits at Tier 1–2, focusing on triage, structured investigations, and contributing to detection quality.

You will manage the day-to-day alert queue, investigate escalated cases, and work with senior analysts to close coverage gaps. Ideal candidates bring analytical thinking, thorough documentation, and growing independence.