Security Ops Analyst - Privacy-First Cloud Defenses (Remote)

Sequester; United States; Remote; USD 75,000 - 105,000; Full time

Benefits offered by this job

Remote-friendly role

Job summary

Sequester is seeking a security operations analyst for a privacy-first encrypted vault for personal photos and videos. The role focuses on monitoring production environments for anomalies, triaging alerts, and investigating suspicious activity to keep the platform defensible as usage grows.

You will work in a remote-friendly setup with async collaboration across time zones, monitor SIEM and cloud logs, document incidents with timelines, and help improve detection rules and runbooks.

Qualifications

• Experience in security operations and incident response.
• Familiarity with cloud provider logging and attack patterns.
• Calm communication during live incidents and ticket hygiene.
• Willingness to participate in an on-call rotation.

Responsibilities

• Monitor SIEM alerts, cloud audit logs, and endpoint signals during assigned shifts
• Triage and document incidents with timelines, impact assessment, and containment steps
• Tune detection rules to reduce noise while preserving coverage for credential abuse and exfiltration attempts
• Coordinate with infrastructure teams on patching windows, exposed services, and hardening tasks
• Contribute to runbooks for common alert types and after-hours escalation paths

Skills

SOC experience

Log analysis

Incident triage

On-call rotation readiness

Tools

SIEM

AWS logging

GCP logging

Azure logging

Job description

Sequester is seeking a security operations analyst for a privacy-first encrypted vault for personal photos and videos. The role focuses on monitoring production environments for anomalies, triaging alerts, and investigating suspicious activity to keep the platform defensible as usage grows.

You will work in a remote-friendly setup with async collaboration across time zones, monitor SIEM and cloud logs, document incidents with timelines, and help improve detection rules and runbooks.