Security Operations Analyst – SIEM, IR & Threat Response

GranularTek LLC; Madison (WI); Hybrid; USD 70,000 - 100,000; Full time

Benefits offered by this job

Flexible hybrid work model

Professional development stipend

Certification reimbursements

Job summary

Granular Tek, LLC is a fast-growing cybersecurity firm delivering threat detection, incident response, and SOC services to enterprise clients across the United States. We seek a security operations professional to monitor SIEMs, analyze threats, and drive containment and remediation efforts within a hybrid work model.

The role collaborates with IT and engineering teams to harden systems, deploy patches, and refine detection playbooks while producing regular threat briefings and performance

Qualifications

• Experience with Splunk, SIEM and incident response workflows.
• Experience with Windows and Linux environments.
• Knowledge of threat frameworks and attack techniques including MITRE ATT&CK.

Responsibilities

• Monitor security alerts and SIEM dashboards to detect, triage, and elevate potential threats across enterprise environments.
• Conduct root cause analysis and document findings for security incidents, ensuring timely resolution and reporting to stakeholders.
• Respond to active threats by executing containment, eradication, and recovery actions in alignment with company incident response playbooks.
• Collaborate with IT and engineering teams to harden systems, deploy security patches, and validate configuration compliance.
• Produce daily/weekly security reports, threat briefings, and after-action reviews to improve detection coverage and team readiness.
• Stay current on emerging threats, TTPs, and adversary behaviors; contribute to refining detection rules and automation playbooks.

Skills

Splunk

SIEM

Incident Response

Endpoint Detection and Response

MITRE ATT&CK

Windows/Linux

Scripting (Python/Bash)

IDS/IPS

Tools

QRadar

SOAR

Job description

Granular Tek, LLC is a fast-growing cybersecurity firm delivering threat detection, incident response, and SOC services to enterprise clients across the United States. We seek a security operations professional to monitor SIEMs, analyze threats, and drive containment and remediation efforts within a hybrid work model.

The role collaborates with IT and engineering teams to harden systems, deploy patches, and refine detection playbooks while producing regular threat briefings and performance