Security Analyst - Indefinite US Work Authorization Required

Job Posting External

Primary Responsibilities:

• Lead the design and implementation of SIEM correlation rules and alert logic to detect advanced threats and suspicious behaviors.
• Build and optimize SOAR playbooks to automate multi-step incident response actions.
• Continuously tune alert thresholds and logic to reduce false positives and improve detection accuracy.
• Integrate threat intelligence feeds into SIEM and SOAR platforms to enhance alert context and prioritization.
• Investigate and respond to alerts, coordinating with IT, MDR, and security teams to validate and remediate incidents.
• Maintain documentation for alert logic, playbook workflows, and incident handling procedures.
• Mentor junior analysts on alert development, tuning, and automation best practices.
• Participate in an on-call rotation to support timely response to critical alerts and incidents.

Minimum Qualifications:

• High school diploma or equivalent is required.
• Familiarity with SIEM platforms and basic alert logic.
• Experience with scripting languages such as PowerShell or Python.
• Understanding of cybersecurity fundamentals, including threat types and detection techniques.
• 1+ years of experience in cybersecurity or a related field.
• Strong analytical and problem-solving skills.
• Willingness to participate in an on-call rotation.

Preferred Qualifications:

• Bachelor’s degree in cybersecurity, computer science, information technology, or a related field.
• Exposure to SOAR platforms and basic playbook development.
• Experience working with third-party MDR or managed security service providers.
• Certification such as Security+, GSEC, or CEH.
• Familiarity with threat intelligence sources and enrichment techniques.
• Understanding of compliance frameworks such as NIST CSF or ISO 27001.