About the Role
Our client is seeking a highly skilled Senior Security Operations Analyst to join their globally distributed Security Operations Center (SOC) team. This role is critical for monitoring, detecting, and responding to cyber threats across the organization's infrastructure. As a remote-first position, you will work from your home office, collaborating with a dedicated team of security professionals worldwide. You will play a vital role in safeguarding our client's digital assets by analyzing security alerts, conducting threat hunting, and contributing to the continuous improvement of SOC processes and tools. This is an exceptional opportunity for an experienced analyst to leverage their expertise in a fully remote environment and make a significant impact on the organization's security posture.
Key Responsibilities
- Monitor and analyze security alerts from various sources, including SIEM, IDS/IPS, EDR, and cloud security platforms.
- Perform in-depth investigations of security incidents, identifying root causes and recommending containment and eradication strategies.
- Conduct proactive threat hunting to identify and neutralize advanced threats that may evade automated detection.
- Develop and refine security detection rules and use cases to improve the effectiveness of the SOC.
- Contribute to the development and execution of the incident response plan.
- Analyze threat intelligence feeds and incorporate relevant findings into security operations.
- Document incident details, investigation steps, and remediation actions accurately.
- Collaborate with other security teams (e.g., incident response, vulnerability management) to ensure comprehensive security coverage.
- Mentor junior analysts and share knowledge within the SOC team.
- Stay up-to-date with the latest cyber threats, attack vectors, and defensive techniques.
Requirements
- Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent work experience.
- Minimum of 5 years of experience in Security Operations (SecOps), incident response, or a similar cybersecurity role.
- Strong understanding of security technologies, including SIEM (e.g., Splunk, QRadar), IDS/IPS, firewalls, EDR, and network protocols.
- Proven experience in threat analysis, incident investigation, and malware analysis.
- Familiarity with threat intelligence platforms and methodologies.
- Experience with scripting languages (e.g., Python, PowerShell) for automation is a plus.
- Excellent analytical and problem-solving skills, with meticulous attention to detail.
- Strong communication and collaboration skills, essential for a remote team environment.
- Ability to work effectively under pressure and manage multiple priorities.
- Relevant certifications such as GCIH, GCIA, OSCP, or CISSP are highly regarded.
Benefits
- Our client offers a competitive salary, comprehensive health and wellness benefits, and a performance-based bonus structure.
- This fully remote position provides exceptional work-life balance and the flexibility to work from anywhere.
- You will have access to continuous learning opportunities, including advanced training and certifications, and the chance to work with a world-class security team on challenging problems.