Security Analyst
Core
Triage and investigate security alerts, manage incident response, and monitor security operations across endpoint, identity, cloud, and SaaS platforms.
Role type
Security Analyst (SOC/Incident Response)
Builds
Operational security visibility, incident response outcomes, and detection coverage improvements
Domain
Cybersecurity / Security Operations
Required skills
Security alert triage, incident response, SIEM log analysis, MITRE ATT&CK frameworks, EDR platform usage, cloud logging analysis, phishing simulation management, security workflow automation, threat hunting, vulnerability management triage
Preferred skills
Security+ or CySA+ certification, experience with AI-enabled security tools, scripting for automation
Technologies
SIEM, EDR, cloud logging platforms, phishing simulation tools
Responsibilities
Investigate security alerts from internal tooling and external partners; manage security operations ticket queues; support incident response including containment and post-incident analysis; respond to digital risk alerts regarding brand abuse or exposed credentials; assist with threat hunting using SIEM data; support vulnerability management workflows; operate phishing simulation campaigns; identify gaps in logging and telemetry; maintain incident response documentation; participate in on-call rotation
Seniority
Mid-level, hands-on IC
