Remote SOC Analyst II: Triage & Incident Response

BetterCloud; United States; À distance; USD 46 000 - 64 000; Plein temps

Avantages offerts par ce poste

Bonus eligible

Equity

Generous benefits program

Résumé du poste

AlphaSense is hiring a Security Operations Analyst II to join the Security Operations team in a fully remote capacity from Canada. You will handle day-to-day alert triage, perform structured investigations, and contribute to detection quality while collaborating with senior analysts and the Security Operations Manager to close coverage gaps.

We expect analytical thinking, thorough documentation, and growing independence.

Qualifications

• 2–4+ years in a SOC or security operations role with alert triage responsibility.
• Solid understanding of the MITRE ATT&CK framework and how to label attacker behavior.
• Working knowledge of EDR tooling: process tree analysis and behavioral detection review.
• Familiarity with SIEM-based investigation: querying logs, correlating events, and building timelines.
• Exposure to cloud security monitoring (AWS or GCP) including audit log review and IAM alert investigation.
• Experience investigating identity-based alerts in enterprise identity providers (Okta, Entra ID, etc).
• Strong written communication and structured case notes.

Responsabilités

• Triage alerts across endpoint, network, cloud, and identity sources with accuracy.
• Investigate escalated alerts and build coherent timelines.
• Perform structured investigations and document rationale beyond verdicts.
• Identify blast radius and affected assets during incidents.
• Maintain thorough case documentation and handoff summaries.

Connaissances

SOC experience

MITRE ATT&CK

EDR tooling

SIEM analytics

Cloud security

Identity alerts

Network protocols

Cloud platforms

Outils

CrowdStrike Falcon

Microsoft Sentinel

Google Chronicle

Okta/Entra ID

Description du poste

AlphaSense is hiring a Security Operations Analyst II to join the Security Operations team in a fully remote capacity from Canada. You will handle day-to-day alert triage, perform structured investigations, and contribute to detection quality while collaborating with senior analysts and the Security Operations Manager to close coverage gaps.

We expect analytical thinking, thorough documentation, and growing independence.