Remote Security Operations Analyst (Tier 1-2)

justmarkets; United States; Remote; USD 65,000 - 90,000; Full time

Benefits offered by this job

Remote work

Annual leave 20 days

Sick leave 10 days

Public holidays

Education budget

Wellness budget

Job summary

justmarkets is seeking a security operations triage analyst to review alerts, enrich cases with endpoint, identity, network, and service data, and determine confirmed threats. You will document evidence, maintain an incident timeline, and escalate high-risk findings.

Remote work is available, with standard annual leave and holidays. The ideal candidate has 1+ year hands-on alert triage experience, familiarity with SIEMs (and EDR/XDR), and knowledge of common attack patterns and MITRE ATT&CK.

Qualifications

• At least 1 year of commercial alert triage experience using a SIEM.
• Ability to write basic SIEM searches and filter events.
• Ability to interpret endpoint, identity, network, and cloud audit data.
• Familiarity with MITRE ATT&CK framework and threat intel.

Responsibilities

• Review alerts and determine if they indicate a genuine security concern.
• Enrich cases by correlating endpoint, identity, network, and service data.
• Investigate scope, record evidence, and maintain an incident timeline.
• Close false positives and escalate high-risk cases.
• Write handover notes and contribute to runbooks.

Skills

SIEM triage

EDR familiarity

XDR familiarity

KQL

EQL

data correlation

incident handling

Tools

SIEM

EDR

XDR

KQL

EQL

Job description

justmarkets is seeking a security operations triage analyst to review alerts, enrich cases with endpoint, identity, network, and service data, and determine confirmed threats. You will document evidence, maintain an incident timeline, and escalate high-risk findings.

Remote work is available, with standard annual leave and holidays. The ideal candidate has 1+ year hands-on alert triage experience, familiarity with SIEMs (and EDR/XDR), and knowledge of common attack patterns and MITRE ATT&CK.