Security Analyst - Tier 3 (West Coast)

sevenai; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

sevenai is seeking a senior analyst to validate investigations produced by AI-driven security agents in customer environments. This Tier 3 role acts as the technical lead, mentoring junior analysts while hunting for emerging threats and shaping scalable processes.

The position is based on the West Coast and blends hands-on incident work with cross-functional collaboration across sales, engineering, and product.

Qualifications

• 5+ years of experience in security operations.
• Hands-on with alerts across endpoints, networks, identities, emails, and cloud.
• Familiar with MITRE ATT&CK framework.
• Proficient in SIEM query languages (e.g., SPL, KQL, SQL).
• Ability to mentor junior analysts and lead incident reviews.

Responsibilities

• Review and validate AI-generated investigations for accuracy, completeness, and risk posture
• Serve as the top-tier escalation point and mentor for junior analysts
• Correlate telemetry across cloud, endpoint, identity, and network sources to reconstruct attack chains
• Investigate malicious activity the automated system has responded to and articulate the risk prevented to customers
• Run proactive threat hunts against customer environments and feed new detections back into the platform
• Support ongoing monitoring, triage, and prioritization, especially during active incidents
• Communicate findings clearly to stakeholders ranging from SOC analysts to executive leadership
• Help design scalable workflows that preserve quality as the team grows

Skills

Security operations

Threat hunting

Mentoring

Tools

XDR

SIEM

IDS/IPS

IDP

Job description

Role overview

Join a senior analyst team responsible for validating investigations produced by AI-driven security agents in customer environments. This Tier 3 role acts as the technical lead and escalation point, mentoring junior analysts while hunting for emerging threats and shaping the processes that allow the team to scale without losing quality. The position is based on the West Coast and blends hands-on incident work with cross-functional collaboration across sales, engineering, and product.

Responsibilities

• Review and validate AI-generated investigations for accuracy, completeness, and risk posture
• Serve as the top-tier escalation point and mentor for junior analysts
• Correlate telemetry across cloud, endpoint, identity, and network sources to reconstruct attack chains
• Investigate malicious activity the automated system has responded to and articulate the risk prevented to customers
• Run proactive threat hunts against customer environments and feed new detections back into the platform
• Support ongoing monitoring, triage, and prioritization, especially during active incidents
• Communicate findings clearly to stakeholders ranging from SOC analysts to executive leadership
• Help design scalable workflows that preserve quality as the team grows

Requirements

• 5+ years of experience in security operations
• Hands-on background investigating alerts across endpoint, network, identity, email, and cloud sources
• Working knowledge of monitoring tools such as XDR, SIEM, IDS/IPS, and IDP
• Familiarity with log and telemetry concepts and frameworks like MITRE ATT&CK
• Querying experience with SIEM languages such as SPL, KQL, FQL, or SQL
• Strong grasp of malware analysis methods and incident triage practices
• Ability to independently verify automated analysis and make sound security decisions
• Service-oriented mindset with strong interpersonal and mentoring skills

Nice to have

• Experience in a managed services environment
• Incident handling background
• Relevant certifications such as Security+, GSEC, or GCIH