Tier-3 Security Analyst & Lead Investigator

sevenai; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

sevenai is seeking a senior analyst to validate investigations produced by AI-driven security agents in customer environments. This Tier 3 role acts as the technical lead, mentoring junior analysts while hunting for emerging threats and shaping scalable processes.

The position is based on the West Coast and blends hands-on incident work with cross-functional collaboration across sales, engineering, and product.

Qualifications

• 5+ years of experience in security operations.
• Hands-on with alerts across endpoints, networks, identities, emails, and cloud.
• Familiar with MITRE ATT&CK framework.
• Proficient in SIEM query languages (e.g., SPL, KQL, SQL).
• Ability to mentor junior analysts and lead incident reviews.

Responsibilities

• Review and validate AI-generated investigations for accuracy, completeness, and risk posture
• Serve as the top-tier escalation point and mentor for junior analysts
• Correlate telemetry across cloud, endpoint, identity, and network sources to reconstruct attack chains
• Investigate malicious activity the automated system has responded to and articulate the risk prevented to customers
• Run proactive threat hunts against customer environments and feed new detections back into the platform
• Support ongoing monitoring, triage, and prioritization, especially during active incidents
• Communicate findings clearly to stakeholders ranging from SOC analysts to executive leadership
• Help design scalable workflows that preserve quality as the team grows

Skills

Security operations

Threat hunting

Mentoring

Tools

XDR

SIEM

IDS/IPS

IDP

Job description

sevenai is seeking a senior analyst to validate investigations produced by AI-driven security agents in customer environments. This Tier 3 role acts as the technical lead, mentoring junior analysts while hunting for emerging threats and shaping scalable processes.

The position is based on the West Coast and blends hands-on incident work with cross-functional collaboration across sales, engineering, and product.