Security Operations Engineer

Reserv; Atlanta (GA); Hybrid; USD 80,000 - 100,000; Full time

Benefits offered by this job

Generous health-insurance package

401(k) retirement plan with employer matching

Competitive PTO policy

Work from anywhere flexibility

Job summary

Reserv seeks a Cybersecurity Analyst to protect digital assets and respond to breaches. This hands-on role focuses on monitoring networks and identifying vulnerabilities.

Successful candidates will have over 3 years in cybersecurity, technical proficiency across various operating systems, and experience with security tools. The position offers generous benefits including health insurance and a 401(k) retirement plan.

Qualifications

• Minimum of 3 years in cybersecurity roles.
• Experience with penetration testing.
• Demonstrated ability to draft and maintain cybersecurity policies.

Responsibilities

• Continuously monitor security telemetry to identify threats.
• Investigate and contain breaches, providing detailed reports.
• Conduct vulnerability assessments and coordinate penetration tests.

Skills

Cybersecurity experience

Understanding of NIST Cybersecurity Framework

Technical proficiency with MacOS, Windows, Unix/Linux

Knowledge of threat actors and MITRE ATT&CK framework

SIEM and EDR/XDR proficiency

Risk assessment experience

Strong communication skills

Education

Bachelor's degree in Cybersecurity, IT, or related field

Security+, CySA+ or similar certifications

Tools

SIEM tools

Vulnerability scanners

Endpoint protection tools

Cloud platforms (Google Workspace, Microsoft 365)

Job description

Cybersecurity Analyst

As our Cybersecurity Analyst you won't just be watching a dashboard; you’ll be helping to build the shield that protects our digital assets and our customers. You’ll be responsible for executing tactical daily tasks and participating in broader planning efforts. If you thrive on novel problem-solving and adapt quickly to new technologies, you’ll fit right in!

This is a hands‑on technical role focused on protecting the organization’s digital assets from cyber threats by monitoring networks, identifying vulnerabilities, implementing security measures, threat hunting, responding to breaches, and developing security policies & procedures. No day will be the same and you will continuously learn & grow! Successful candidates will bring experience utilizing and configuring various security tools such as IDP, EDR/XDR, SIEM, SOAR, IDS/IPS and secure email gateways.

What To Expect

• Continuously monitor security telemetry to identify potential threats, malicious activity, or unauthorized access. Sniff out threats before they become a headline!
• Investigate, analyze, classify, prioritize and contain security breaches in real‑time, providing detailed reporting and post‑incident analysis. Build a secure plan, not a workaround, so it never happens again!
• Conduct vulnerability assessments to identify system weaknesses before they are exploited
• Coordinate and assist with penetration testing activities
• Install, configure and maintain security software and systems such as endpoint security, intrusion detection, prevention systems and logging platforms
• Install and fine‑tune our arsenal—from EDR/XDR and SIEM to SOAR and IDS/IPS.
• Research, analyze and stay up to date on the latest security trends, hacking techniques, emerging cyber threats
• Educate employees and stakeholders on security protocols, phishing threats and data protection
• Develop SOPs, playbooks/runbooks to consistently respond to common incidents that allow our security posture to scale as fast as our business
• Hunt for unknown threats in the environment by analyzing logs based on current and emerging threat intelligence. Be the hero who identifies potential threats before they happen!

Does this sound like you?

• Minimum of 3 years of experience in the trenches of a dedicated cybersecurity role
• Working understanding of NIST Cybersecurity Framework
• Technical proficiency with MacOS, Windows, Unix/Linux
• Experience securing and monitoring mobile devices
• Knowledge of current threat actors, TTPs, and MITRE ATT&CK framework
• Fluent in SIEM, EDR/XDR, and Vulnerability Scanners
• Experience with cloud‑based productivity platforms such as Google Workspace and/or Microsoft 365
• Demonstrated experience working with SIEM tools, vulnerability scanners, endpoint protection, email security and threat intelligence platforms
• Experience with penetration testing
• Experience performing risk assessments, drafting/maintaining cybersecurity policies and procedures, and constructing after‑action reports with precise details
• Familiarity with SSO and identity and access management systems
• Security+, CySA+ or similar industry‑standard security certifications
• Strong written and verbal communication skills
• You possess a relentless technological curiosity where sniffing out anomalies is becoming second nature
• Experience working in a cloud‑first or startup environment

Icing on the cake

• Bachelor's degree in Cybersecurity, IT, or related field
• Automation experience with various scripting languages (e.g., Bash, Python, PowerShell)
• AWS and/or GCP certifications or demonstrated experience
• Deep understanding of at least two major operating systems
• Familiarity with the concepts of secure software development (SSDLC)

What We Offer

• Generous health‑insurance package with nationwide coverage, vision, and dental
• 401(k) retirement plan with employer matching
• Competitive PTO policy – we want our employees fresh, healthy, happy and energized
• Generous family leave policy
• Work from almost anywhere to facilitate your work life balance
• Cool, functional swag
• Apple laptop, large second monitor, and other quality‑of‑life equipment you may want

We welcome applicants from all backgrounds and encourage those from underrepresented groups to apply. We are actively seeking candidates who will bring unique perspectives and experiences to our team.