Security Operations Analyst: Incident Response & Detection

Nscale; Seattle (WA); On-site; USD 100,000 - 130,000; Full time

Benefits offered by this job

Base + bonus + equity

Equity

Flexible paid time off

Parental leave

Retirement plan

Job summary

Nscale, a GPU cloud provider for AI, seeks a Security Analyst to join their operations team in Seattle. You will triage alerts across endpoints, identities, SaaS, cloud, and network, investigate suspicious activity, and escalate high‑risk events to the appropriate owners, ensuring timely actions and accurate handoffs.

You'll build incident timelines, collect evidence, and contribute to daily operational reporting, with opportunities to improve runbooks, automate repetitive tasks, and strengthen

Qualifications

• 3+ years in security operations, incident response, threat monitoring, SOC analysis, detection triage, or related roles.
• Experience investigating alerts from endpoint, identity, SaaS, cloud, email, network, or application telemetry.
• Familiarity with incident response basics: severity, containment, eradication, recovery, evidence handling, and post‑incident review.
• Ability to write clear investigation notes, timelines, case summaries, and escalation handoffs.
• Comfort using security analytics tools and dashboards.
• Experience MITRE ATT&CK is a plus.

Responsibilities

• Security alert triage and investigation: Triage daily security alerts across endpoint, identity, SaaS, cloud, network, email, and infrastructure telemetry.
• Incident response and escalation: Escalate confirmed or high‑risk events to stakeholders; execute documented response actions; build incident timelines and evidence.
• Operational reporting and continuous improvement: Produce daily/weekly reports; improve runbooks and alert tuning; identify false positives and improve handoffs.
• First 90 days: Learn workflows, build fluency across telemetry sources, triage alerts with clear findings, document actions, and support readiness exercises.
• KPIs: Alert triage quality, escalation speed, investigation documentation, and automation improvements.

Skills

Security operations

Incident response

Threat monitoring

SOC analysis

Detection triage

Cloud security operations

Tools

Query languages

Logs

Dashboards

Case management systems

Security analytics tools

Job description

Nscale, a GPU cloud provider for AI, seeks a Security Analyst to join their operations team in Seattle. You will triage alerts across endpoints, identities, SaaS, cloud, and network, investigate suspicious activity, and escalate high‑risk events to the appropriate owners, ensuring timely actions and accurate handoffs.

You'll build incident timelines, collect evidence, and contribute to daily operational reporting, with opportunities to improve runbooks, automate repetitive tasks, and strengthen