Security Operations Analyst: Hunt, Triage & Respond

NightDragon Acquisition Corp.; Austin (TX); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Time Off

401(k) Plan

Job summary

Saronic Technologies is seeking a hands-on Security Engineer to join our Security Operations team in Austin. You will triage security alerts, perform root-cause analysis, and own initial response for scoped incidents across endpoints, cloud, and identity.

You will tune detections to reduce noise, join the on-call rotation, and contribute to playbooks, post-incident reviews, and threat hunting initiatives as the team grows.

Qualifications

• 2–5 years of hands-on Security Operations, alert triage, or incident response experience.
• Experience triaging and investigating alerts across at least two of: endpoint, cloud, identity, network, or SaaS.
• Working proficiency with an enterprise SIEM platform and its query language; able to write investigative queries and tune detections.
• Hands-on experience with EDR tooling to triage, hunt, and respond.
• Solid understanding of attacker TTPs mapped to MITRE ATT&CK, applied during investigations.
• Scripting proficiency in Python, PowerShell, or Bash for enrichment, automation, or triage.
• Strong network fundamentals: TCP/IP, DNS, HTTP/S, logs, and lateral movement patterns.
• Ability to obtain and maintain a U.S. security clearance.

Responsibilities

• Monitor and triage alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms.
• Investigate alerts and perform root-cause analysis, documenting clear timelines and impact assessments.
• Tune existing detections to reduce false positives, and surface gaps and tuning needs to Detection Engineering.
• Own initial response for well-scoped, mid-tier incidents across endpoint, cloud, and identity to contain, eradicate, recover.
• Participate in the on-call rotation and communicate status and findings to security leadership and stakeholders.
• Contribute to post-incident reviews, surfacing gaps in detection, response, and containment.
• Coordinate with Security Engineering and IT during active incidents to accelerate response.
• Grow your depth across detection, investigation, and hunting as the team scales.

Skills

Security Operations

SIEM & XDR

Incident response

Python/PowerShell/Bash

MITRE ATT&CK

EDR tooling

Network fundamentals

Communication

Tools

SOAR platforms

Cloud security tooling (AWS/Azure)

Job description

Saronic Technologies is seeking a hands-on Security Engineer to join our Security Operations team in Austin. You will triage security alerts, perform root-cause analysis, and own initial response for scoped incidents across endpoints, cloud, and identity.

You will tune detections to reduce noise, join the on-call rotation, and contribute to playbooks, post-incident reviews, and threat hunting initiatives as the team grows.