Remote Senior Cybersecurity SOC Analyst — AWS, Okta & Salesforce

Pivotal Consulting; Seattle (WA); Remote; USD 83,000 - 103,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401k

Certifications support

Diversity & inclusion

Job summary

Pivotal Consulting is seeking a Cybersecurity Specialist to support a major global technology client. You will monitor security events across AWS, Salesforce, and Okta, perform incident response, and fine-tune Splunk dashboards for threat visibility.

Ideal candidates have 7+ years in SOC or IR, strong SIEM/SOAR knowledge, and familiarity with MITRE ATT&CK and NIST frameworks. You will collaborate with client security teams and drive improvements in detection and response capabilities.

Qualifications

• 7+ years of experience working in a SOC or cyber incident response role.
• Advanced Splunk experience in monitoring and content development.
• Experience with AWS, Okta & Salesforce.
• Strong understanding of SIEM and SOAR, detection engineering, and log correlation.
• Knowledge of MITRE ATT&CK and NIST frameworks.
• Familiarity with firewalls, IDS/IPS, and endpoint protection tools.
• Ability to triage high-volume security data efficiently.

Responsibilities

• Monitor and analyze security events using AWS, Salesforce & Okta to identify threats.
• Investigate and respond to incidents with detailed root cause analysis.
• Develop and tune Splunk queries, dashboards, alerts, and correlation rules.
• Conduct proactive threat hunting and anomaly detection on large data sets.
• Document incident findings and prepare post-incident reports for stakeholders.
• Collaborate with infrastructure and application teams for log ingestion and data normalization.
• Suggest automation or workflow improvements to security processes.

Skills

SOC experience

Threat hunting

Incident response

SIEM

SOAR

MITRE ATT&CK

NIST

Tools

Splunk

AWS

Okta

Salesforce

Job description

Pivotal Consulting is seeking a Cybersecurity Specialist to support a major global technology client. You will monitor security events across AWS, Salesforce, and Okta, perform incident response, and fine-tune Splunk dashboards for threat visibility.

Ideal candidates have 7+ years in SOC or IR, strong SIEM/SOAR knowledge, and familiarity with MITRE ATT&CK and NIST frameworks. You will collaborate with client security teams and drive improvements in detection and response capabilities.