Security Analyst Tier 2 — AI-Driven SOC Investigator

sevenai; Boston (MA); On-site; USD 85,000 - 120,000; Full time

Job summary

7AI is seeking a Security Analyst to validate and extend the work of AI agents, investigate malicious activity, and hunt for threats within customer environments. You’ll work directly with customers—from SOC analysts to CISOs—to triage alerts and resolve incidents, shaping how this team operates as we grow.

Two or more years in security operations are required, with strong skills in SIEM/XDR, MITRE ATT&CK, and incident response.

Qualifications

• 2+ years in security operations or SOC roles.
• Comfortable with on-call weekend shifts when needed.
• Hands-on experience investigating alerts across endpoint, network, identity, email and cloud.
• Strong understanding of monitoring tools: XDR, SIEM, IDS/IPS, IDP.
• Familiarity with log and telemetry concepts.
• Knowledge of MITRE ATT&CK and incident triage methodologies.
• Experience querying SIEM data with SPL, KQL, FQL, or SQL.
• Familiarity with malware analysis methods.

Responsibilities

• Analyze and validate AI agent investigations for accuracy and risk.
• Correlate data across cloud, endpoint, identity, and network sources.
• Investigate malicious activity detected by 7AI agents and assess risk prevented.
• Use 7AI agents to hunt for emerging threats in customer environments.
• Assist customers with threat monitoring, triage, and alert prioritization during incidents.
• Review logs to proactively spot threats and anomalies in customer environments.
• Communicate findings to customers with varying technical backgrounds.
• Help build repeatable processes as the team scales.
• Coordinate with Engineering and Product to feed customer feedback into the platform.

Skills

Security operations

On-call readiness

Alerts investigation

XDR/SIEM knowledge

Log telemetry

MITRE ATT&CK

SQL/SIEM queries

Malware analysis

Collaboration

Customer communication

Tools

SPL

KQL

SQL

SIEM

Job description

7AI is seeking a Security Analyst to validate and extend the work of AI agents, investigate malicious activity, and hunt for threats within customer environments. You’ll work directly with customers—from SOC analysts to CISOs—to triage alerts and resolve incidents, shaping how this team operates as we grow.

Two or more years in security operations are required, with strong skills in SIEM/XDR, MITRE ATT&CK, and incident response.