Security Operations Analyst

About This Opportunity

We are representing a confidential cybersecurity organization seeking a Security Operations Analyst to join their fully remote team. Our client protects businesses worldwide with managed security solutions, and their Security Operations Center is at the forefront of combating emerging threats daily.

This is a hands-on role where you'll triage, investigate, and remediate real-world intrusions while continuously developing your analyst skillset. The initial training period runs Monday-Friday, with shifts potentially moving to weekends or 4x10 schedules based on operational needs.

Location: Remote, anywhere in the world
Employment Type: Full-time

Responsibilities

• Triage, investigate, and respond to security alerts from endpoint detection and response platforms
• Perform tactical analysis of EDR telemetry, log sources, and forensic artifacts to determine root cause and provide remediation guidance
• Conduct tactical malware analysis as part of alert investigation workflows
• Investigate suspicious Microsoft M365 activity and recommend appropriate responses
• Support escalations from product support teams on threat-related questions
• Contribute to detection engineering creation and tuning efforts
• Participate in projects focused on improving analyst effectiveness and customer outcomes
• Collaborate in a mentorship-driven team environment

What We're Looking For

Required:

• 4+ years of experience in a SOC or Digital Forensics (DFIR) role
• Demonstrated experience with Windows, Linux, and MacOS security and attack surfaces
• Hands-on knowledge of threat actor tools and techniques (MITRE ATT&CK Framework, PowerShell, Command Prompt, WMIC, Scheduled Tasks, lateral movement, persistence mechanisms, defense evasion)
• Experience with static and dynamic malware analysis concepts
• Working knowledge of Windows Administration or Enterprise Domain Administration (Active Directory, Group Policy, Domain Trusts)
• Understanding of core networking concepts (common ports/protocols, NAT, Public/Private IPs, VLANs)
• Familiarity with web technologies (web servers/applications, OWASP top 10)
• Strong communication skills with ability to explain complex technical events to non-technical audiences
• Customer-focused mindset with dedication to addressing user needs
• Curiosity and genuine excitement for continuous learning

Preferred:

• Previous MSP/MSSP/MDR experience
• Linux and MacOS investigative experience
• Scripting skills (PowerShell, Python, Bash, PHP, JavaScript, Ruby)
• Experience with security training platforms (HackTheBox, TryHackMe, Blue Team Labs Online)
• Cloud investigation experience (M365, Azure, AWS, GCP)
• Participation in cybersecurity competitions (CTFs, CCDC)
• Familiarity with MSP tools including RMMs

How We Work With You

Our talent team at Get A Job.ai partners with leading security organizations to connect skilled professionals with mission-critical roles. When you apply through our platform, a recruiter will screen your background and qualifications. If there's a strong match, we'll submit your profile to our client for consideration and guide you through their interview process.

Please apply exclusively through Get A Job.ai—do not contact the client directly, as we are managing this search on their behalf.

Pay

Pay via Get A Job.ai: $100,000-$125,000 base plus bonus and equity. This role may be eligible for on-call/call-in pay in addition to base compensation.

Benefits include: 100% remote work, generous PTO, 12 weeks paid parental leave, comprehensive medical/dental/vision, 401(k) with employer contribution, life and disability insurance, stock options, home office reimbursement, professional development allowance, and coaching platform access.

Get A Job.ai is an equal opportunity recruiter. We do not discriminate based on race, ethnicity, color, ancestry, national origin, religion, sex, sexual orientation, gender identity, disability, veteran status, genetic information, marital status, or any other legally protected status.