Security Operations Analyst

Jobgether; United States; Remote; USD 70,000 - 100,000; Full time

Benefits offered by this job

Remote-first

Unlimited PTO

Medical, dental, vision

401(k) with matching

Stock options potential

Work-from-home stipend

Parental leave

Job summary

Jobgether seeks a Security Operations Analyst based in the United States. This remote-first role focuses on protecting critical enterprise systems through monitoring, threat detection, incident response, threat intel, and security automation.

You will work with IT, Engineering, Product, and other teams to embed security, strengthen architecture, and improve compliance readiness across SOC 2 and ISO 27001.

Qualifications

• 3+ years in Security Operations with SOC/IR experience.
• Hands-on Python development for security operations and automation.
• Experience with SIEM, EDR/XDR, and security monitoring platforms.
• Knowledge of NIST and MITRE ATT&CK frameworks.

Responsibilities

• Monitor SIEM, EDR/XDR, and other security platforms and triage alerts.
• Use SOAR to automate security operations and reduce manual work.
• Engineer SIEM integrations and log ingestion, data normalization, and rules.
• Apply threat intel to strengthen detection and response capabilities.
• Support threat hunting, vulnerability management, and incident response.

Skills

Python for security

Threat detection

Incident response

Security operations

Analytical thinking

Communication

Education

Bachelor's degree in Computer Science

Tools

SIEM

EDR/XDR

SOAR

IAM

Threat intel

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Operations Analyst based in the United States.

This is a remote-first opportunity for a security professional focused on protecting critical enterprise systems against an evolving threat landscape. You will contribute across security monitoring, threat detection, incident response, threat intelligence, and security automation. The role combines hands-on technical work with opportunities to improve SOC processes, detection capabilities, and operational resilience. You will work closely with IT, Engineering, Product, and other technical teams to embed security into systems and workflows. You will also help strengthen security architecture, asset protection, and compliance readiness. This role is well suited to an analytical, technically strong professional who enjoys solving complex security challenges and turning intelligence into practical defensive action.

Accountabilities:

• Monitor SIEM, EDR/XDR, and other security platforms, investigate alerts, and perform accurate and timely initial triage and response using established playbooks.
• Leverage SOAR capabilities to improve alert handling and automate repetitive security operations, identifying opportunities to increase efficiency and reduce manual effort.
• Engineer and maintain SIEM integrations and log ingestion, including data normalization, detection rules, monitoring solutions, and log lifecycle management.
• Use current threat intelligence, security advisories, and indicators of compromise to identify emerging threats and strengthen detection and defensive strategies.
• Support threat hunting, incident response, vulnerability management, and broader security operations activities across the environment.
• Partner with IT Operations to maintain accurate hardware and software inventories and support the deployment, troubleshooting, and maintenance of endpoint security controls.
• Collaborate with Engineering, Product, IT, and other teams to incorporate operational security requirements, improve system detectability, and influence technical and architectural decisions.
• Serve as a technical security partner across the organization, communicating risks, incidents, and recommended actions to both technical and non-technical stakeholders.
• Support security metrics, operational reporting, and the collection of technical evidence for security policies and compliance frameworks, including SOC 2 and ISO 27001.
• Contribute to the continuous improvement of security processes, controls, playbooks, and automation capabilities.

Requirements:

• 3+ years of progressive experience in Security Operations, including at least 2 years contributing to a SOC, Managed Detection and Response service, or Incident Response team.
• Demonstrated engineering experience designing, implementing, and managing mature SOC processes, security workflows, and automation.
• Strong hands-on Python development experience for security operations, automation, or related use cases.
• Practical expertise in threat detection, incident response, vulnerability management, SIEM, EDR/XDR, security monitoring platforms, and IAM solutions and processes.
• Strong understanding of modern cyber threats, attack techniques, vulnerabilities, and defensive strategies.
• Practical knowledge of security frameworks such as NIST and MITRE ATT&CK and their application to threat detection, investigation, and incident response.
• Excellent analytical, problem-solving, communication, and interpersonal skills, with the ability to collaborate effectively across technical and executive audiences.
• Ability to translate complex security incidents and risks into clear, actionable recommendations and communicate them effectively to diverse stakeholders.
• Bachelor's degree in Computer Science, Information Security, or a related technical discipline; a Master's degree is a plus.
• Industry certifications such as CISSP, CISM, GCIH, GCIA, or OSCP are highly preferred.

Benefits:

• Salary: $70,000-$90,000 annually for Tier 2 locations or $80,000-$100,000 for Tier 1 locations, with compensation determined by location, experience, skills, and other relevant factors.
• Potential eligibility for a target incentive and company equity in the form of stock options.
• Remote-first work environment with work-from-home flexibility.
• Unlimited paid time off, with an emphasis on taking meaningful time away from work.
• 100% employer-covered medical, dental, and vision options for employees and dependents.
• Flexible Spending Account (FSA).
• Monthly stipend supporting work-from-home setup, vacation, professional development, and other needs.
• Employer-sponsored 401(k) with contribution matching.
• Student loan repayment program.
• Subsidized ClassPass membership.
• Generous paid parental leave.
• Opportunities to develop expertise across threat detection, incident response, security engineering, automation, and compliance.
• A collaborative environment focused on security, privacy awareness, continuous improvement, and professional growth.

We appreciate your interest and wish you the best!