Security Operations Analyst

Sequester; United States; Remote; USD 75,000 - 105,000; Full time

Benefits offered by this job

Remote-friendly role

Job summary

Sequester is seeking a security operations analyst for a privacy-first encrypted vault for personal photos and videos. The role focuses on monitoring production environments for anomalies, triaging alerts, and investigating suspicious activity to keep the platform defensible as usage grows.

You will work in a remote-friendly setup with async collaboration across time zones, monitor SIEM and cloud logs, document incidents with timelines, and help improve detection rules and runbooks.

Qualifications

• Experience in security operations and incident response.
• Familiarity with cloud provider logging and attack patterns.
• Calm communication during live incidents and ticket hygiene.
• Willingness to participate in an on-call rotation.

Responsibilities

• Monitor SIEM alerts, cloud audit logs, and endpoint signals during assigned shifts
• Triage and document incidents with timelines, impact assessment, and containment steps
• Tune detection rules to reduce noise while preserving coverage for credential abuse and exfiltration attempts
• Coordinate with infrastructure teams on patching windows, exposed services, and hardening tasks
• Contribute to runbooks for common alert types and after-hours escalation paths

Skills

SOC experience

Log analysis

Incident triage

On-call rotation readiness

Tools

SIEM

AWS logging

GCP logging

Azure logging

Job description

Role overview

A security operations role on a privacy-first encrypted vault for personal photos and videos. The analyst will monitor the production environment for anomalies, triage alerts, investigate suspicious activity, and help keep the platform defensible as usage grows.

Responsibilities

• Monitor SIEM alerts, cloud audit logs, and endpoint signals during assigned shifts
• Triage and document incidents with timelines, impact assessment, and containment steps
• Tune detection rules to reduce noise while preserving coverage for credential abuse and exfiltration attempts
• Coordinate with infrastructure teams on patching windows, exposed services, and hardening tasks
• Contribute to runbooks for common alert types and after-hours escalation paths

Requirements

• SOC or security operations experience with log analysis and incident triage
• Familiarity with cloud provider logging (AWS, GCP, or Azure) and common attack patterns
• Calm communication during live incidents and disciplined ticket hygiene
• Willingness to participate in an on-call rotation

Benefits and work setup

• Remote-friendly role with global hiring and async-first collaboration across time zones