Security Operations Analyst

Intrinsicamerica; Northern (KY); Hybrid; USD 70,000 - 90,000; Full time

Job summary

Intrinsicamerica in Northern Kentucky is seeking a Security Operations Analyst to monitor client environments, investigate alerts, and drive incidents to resolution.

You will work on rotating on-call shifts, triage with SIEM/EDR like Sentinel and CrowdStrike, and produce incident reports, while collaborating with engineering on hardening playbooks.

This role emphasizes clear communication with clients and maintaining calm under pressure.

Qualifications

• 2–3 years in a SOC, incident response, or security analyst role.
• Hands-on experience with SIEM/EDR platforms (e.g. Sentinel, CrowdStrike).
• Solid understanding of MITRE ATT&CK and attack patterns.
• Ability to work rotating on-call shifts.
• Security certifications (Security+, GCIH, GCIA) preferred.

Responsibilities

• Monitor SIEM and EDR tooling for threats across client environments 24/7.
• Triage, investigate, and escalate security alerts within SLA.
• Lead containment and remediation during active incidents.
• Tune detection rules to reduce noise and improve signal.
• Document findings and produce clear incident reports for clients.
• Collaborate with engineering teams on hardening and response playbooks.

Skills

SOC experience 2-3 years

SIEM/EDR proficiency

Incident response

Education

Security certifications (preferred)

Tools

Sentinel

CrowdStrike

MITRE ATT&CK

Job description

We're looking for a Security Operations Analyst to join our SOC team. You'll monitor client environments in real time, investigate alerts, and drive incidents to resolution while keeping communication clear and calm.

What you'll do

• Monitor SIEM and EDR tooling for threats across client environments 24/7
• Triage, investigate, and escalate security alerts within SLA
• Lead containment and remediation during active incidents
• Tune detection rules to reduce noise and improve signal
• Document findings and produce clear incident reports for clients
• Collaborate with engineering teams on hardening and response playbooks

Who you are

• 2-3 years in a SOC, incident response, or security analyst role
• Hands-on experience with SIEM/EDR platforms (e.g. Sentinel, CrowdStrike)
• Solid understanding of MITRE ATT&CK and common attack patterns
• Ability to work rotating on-call shifts

Preferred qualifications

• Security certifications (Security+, GCIH, GCIA)