SOC Detection & Incident Analyst – Remote-First

Workstreet; United States; Remote; USD 90,000 - 120,000; Full time

Benefits offered by this job

Remote-first culture

Job summary

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This hands-on role will triage alerts, lead deep investigations across EDR, firewall, IPS, WAF, and SIEM, and deliver actionable findings and remediation guidance to clients.

You will work a 24x7 rotating shift, partner with client stakeholders to maintain coverage, ramp quickly on our detection stack, and mentor junior analysts as part of a collaborative SOC.

Qualifications

• 3+ years of hands-on SOC monitoring, triage, and investigations.
• Experience correlating telemetry across EDR, network, and cloud sources.
• Ability to own investigations end to end and escalate when needed.
• Excellent written communication with clients.
• Willingness to work 24x7 shifts.
• Familiarity with MSSP environments and compliance considerations.

Responsibilities

• Execute real-time monitoring and triage of alerts across EDR, firewall, IPS, WAF, and SIEM.
• Maintain 24x7 shift coverage with nights, weekends, and holidays.
• Conduct deep incident investigations to determine root cause and scope.
• Deliver remediation guidance and containment recommendations.
• Tune SIEM rules and detection logic to reduce false positives.
• Document findings and timelines in case management systems.
• Drive cross-functional security alignment with GRC and vCISOs.
• Support shift handoffs and mentor junior analysts.

Skills

SOC experience

Incident ownership

Multi-platform telemetry

Clear communicator

Shift readiness

Team collaboration

Tools

CrowdStrike

SentinelOne

Defender

Splunk

Microsoft Sentinel

Sumo Logic

Wazuh

Job description

Workstreet is seeking a Security Operations Analyst to join our Security Services team. This hands-on role will triage alerts, lead deep investigations across EDR, firewall, IPS, WAF, and SIEM, and deliver actionable findings and remediation guidance to clients.

You will work a 24x7 rotating shift, partner with client stakeholders to maintain coverage, ramp quickly on our detection stack, and mentor junior analysts as part of a collaborative SOC.