Security Analyst I (SOC)

GranularTek LLC; Madison (WI); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Flexible hybrid work model

Professional development stipend

Certification reimbursements

Job summary

Granular Tek, LLC is a fast-growing cybersecurity firm delivering threat detection, incident response, and SOC services to enterprise clients across the United States. We seek a security operations professional to monitor SIEMs, analyze threats, and drive containment and remediation efforts within a hybrid work model.

The role collaborates with IT and engineering teams to harden systems, deploy patches, and refine detection playbooks while producing regular threat briefings and performance

Qualifications

• Experience with Splunk, SIEM and incident response workflows.
• Experience with Windows and Linux environments.
• Knowledge of threat frameworks and attack techniques including MITRE ATT&CK.

Responsibilities

• Monitor security alerts and SIEM dashboards to detect, triage, and elevate potential threats across enterprise environments.
• Conduct root cause analysis and document findings for security incidents, ensuring timely resolution and reporting to stakeholders.
• Respond to active threats by executing containment, eradication, and recovery actions in alignment with company incident response playbooks.
• Collaborate with IT and engineering teams to harden systems, deploy security patches, and validate configuration compliance.
• Produce daily/weekly security reports, threat briefings, and after-action reviews to improve detection coverage and team readiness.
• Stay current on emerging threats, TTPs, and adversary behaviors; contribute to refining detection rules and automation playbooks.

Skills

Splunk

SIEM

Incident Response

Endpoint Detection and Response

MITRE ATT&CK

Windows/Linux

Scripting (Python/Bash)

IDS/IPS

Tools

QRadar

SOAR

Job description

About The Opportunity

Granular Tek, LLC is a fast-growing cybersecurity firm serving enterprise clients across the United States. We specialize in threat detection, incident response, and security operations center (SOC) services, helping organizations defend against evolving cyber threats with real-time visibility and automated response. Our team combines deep technical expertise with agile workflows to deliver proactive, scalable security solutions in dynamic environments.

Role & Responsibilities

• Monitor security alerts and SIEM dashboards to detect, triage, and elevate potential threats across enterprise environments.
• Conduct root cause analysis and document findings for security incidents, ensuring timely resolution and reporting to stakeholders.
• Respond to active threats by executing containment, eradication, and recovery actions in alignment with company incident response playbooks.
• Collaborate with IT and engineering teams to harden systems, deploy security patches, and validate configuration compliance.
• Produce daily/weekly security reports, threat briefings, and after-action reviews to improve detection coverage and team readiness.
• Stay current on emerging threats, TTPs, and adversary behaviors; contribute to refining detection rules and automation playbooks.

Skills & Qualifications

• Must-Have
• Splunk
• SIEM
• Incident Response
• Endpoint Detection and Response
• MITRE ATT&CK
• Windows/Linux
• Scripting (Python/Bash)
• IDS/IPS
• Preferred
• QRadar
• SOAR
• CISA or SANS certifications

Benefits & Culture Highlights

• Flexible hybrid work model with core office days and remote flexibility.
• Professional development stipend + certification reimbursements.
• Fast-paced, mission-driven team with direct impact on customer security posture.

Skills: splunk,bism/security operations,siem,ids/ips,incident response