Security Operations Analyst – Weekend 4×10 Shift

About This Opportunity

Our talent team is representing a confidential cybersecurity organization seeking a Security Operations Analyst for a weekend 4x10 shift. This is a fully remote position based in the United States.

The initial training period will be Monday through Friday. Following training, you'll transition to a 4x10 schedule working either Wednesday through Saturday or Sunday through Wednesday, with weekend shifts running 7am-5pm PST.

In this role, you'll triage, investigate, respond to, and remediate a variety of security intrusions on a daily basis. You'll be part of an elite Security Operations Center team working at the forefront of threat detection and response.

Responsibilities

• Triage, investigate, and respond to security alerts from multiple detection platforms
• Perform tactical review of EDR telemetry, log sources, and forensic artifacts to determine root cause of attacks and provide remediation guidance
• Conduct tactical malware analysis as part of alert investigation and triage
• Investigate suspicious Microsoft M365 activity and provide remediation recommendations
• Assist with escalations from Product Support teams for threat-related questions
• Contribute to detection engineering creation and tuning efforts
• Participate in projects focused on improving analyst effectiveness and partner outcomes
• Collaborate with team members in a mentorship-focused environment

What We're Looking For

Required Qualifications:

• 2+ years of experience in a SOC or Digital Forensics (DFIR) role
• Demonstrated experience with Windows, Linux, and MacOS as attack surfaces
• Strong understanding of threat actor tools and techniques including the MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, Windows enumeration techniques, lateral movement, persistence mechanisms, and defense evasion
• Experience with static and dynamic malware analysis concepts
• Working knowledge of Windows Administration or Enterprise Domain Administration (Active Directory, Group Policy, Domain Trusts)
• Understanding of core networking concepts including common ports/protocols, NAT, Public/Private IPs, and VLANs
• Knowledge of web technologies and concepts including web servers/applications and OWASP top 10
• Excellent communication skills with ability to explain complex technical events to non-technical audiences
• Customer-focused mindset with dedication to addressing partner needs
• Strong curiosity and enthusiasm for continuous learning

Preferred Qualifications:

• Previous experience in an MSP/MSSP/MDR environment
• Linux and MacOS investigative experience
• Scripting experience (PowerShell, Python, Bash, PHP, JavaScript, or Ruby)
• Experience with platforms such as HackTheBox, TryHackMe, or Blue Team Labs Online
• Cloud investigation experience (M365, Azure, AWS, GCP)
• Participation in cybersecurity competitions such as Capture the Flag or Collegiate Cyber Defense Competition
• Familiarity with MSP tools and RMMs

How We Work With You

When you apply through Get A Job.ai, one of our specialized recruiters will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please note that all applications must go through Get A Job.ai—direct contact with the client is not part of this process.

Our team will keep you informed throughout each stage and provide guidance to help you present your best candidacy.

Pay

Pay via Get A Job.ai: $100,000-$125,000 base plus bonus and equity. This role may be eligible for on-call/call-in pay in addition to base compensation.

Equal Opportunity

Get A Job.ai is committed to inclusive hiring practices and does not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, age, disability, veteran status, genetic information, marital status, or any other legally protected status.