Senior Security Operations Analyst — Hybrid Role

Prometheus Real Estate Group; San Mateo, Northern (CA, KY); Hybrid; USD 105,000 - 135,000; Full time

Benefits offered by this job

Hybrid work schedule

401(k) with employer matching

Medical, Vision, Dental plans (company

Competitive compensation and benefits

Job summary

Prometheus Real Estate Group in San Mateo is seeking a Security Operations Analyst II to lead in-depth investigations and incident response across SIEM/XDR, identity/SSO, and cloud logs. You will correlate data, determine true blast radius, and coordinate containment with Infrastructure/IT, ensuring audit-ready case files.

The role requires 2–5 years in security operations, strong communication, and hands-on experience with SIEM/XDR, EDR, and MITRE ATT&CK. Hybrid work schedule offered.

Qualifications

• Bachelor’s Degree in CS or related field; Master’s preferred.
• 2–5 years in Security Operations or Infra/IT with a security focus.
• 2+ years core networking (IP, DNS, ports, VPN, firewalls).
• Hands-on experience with SIEM/XDR, EDR, identity/SSO, and cloud/SaaS logs.
• Able to read Windows event logs, perform basic endpoint triage, and apply MITRE ATT&CK.
• Strong written/verbal communication and incident leadership skills.
• CompTIA Security+ required; other security certifications preferred.

Responsibilities

• Security Operations: Lead investigations for escalated incidents and coordinate containment with Infrastructure/IT.
• Detection, Playbooks, Threat Intelligence, and Continuous Improvement Response: tune detections and drive incident response improvements.

Skills

Networking fundamentals

Windows Event Logs

Endpoint triage

MITRE ATT&CK

SIEM/XDR

EDR

Identity/SSO

Cloud/SaaS logs

Education

Bachelor’s Degree in Computer Science or related field

Master’s degree preferred

Tools

SIEM/XDR

EDR

Identity/SSO

Cloud logs

Job description

Prometheus Real Estate Group in San Mateo is seeking a Security Operations Analyst II to lead in-depth investigations and incident response across SIEM/XDR, identity/SSO, and cloud logs. You will correlate data, determine true blast radius, and coordinate containment with Infrastructure/IT, ensuring audit-ready case files.

The role requires 2–5 years in security operations, strong communication, and hands-on experience with SIEM/XDR, EDR, and MITRE ATT&CK. Hybrid work schedule offered.