Security Operations Analyst

Responsibilities

• Monitor and triage security alerts across endpoint, cloud, identity, network, and SaaS telemetry using enterprise SIEM and XDR platforms
• Perform in-depth alert investigation and root cause analysis
• Tune detections to reduce false positive noise and improve signal fidelity
• Lead initial incident response for mid-tier events including containment, eradication, and recovery
• Participate in the on-call incident rotation
• Conduct post-incident reviews to identify gaps in detection and response
• Support the development of response playbooks, runbooks, and analyst workflow documentation
• Conduct targeted threat hunting operations to identify attacker activity

Requirements

• 3+ years of experience in Security Operations, detection engineering, or incident response
• Experience triaging alerts across endpoint, cloud, identity, network, or SaaS environments
• Proficiency with enterprise SIEM platforms and query languages
• Experience with EDR tooling in an operational context
• Solid understanding of attacker TTPs mapped to MITRE ATT&CK
• Scripting proficiency in Python, PowerShell, or Bash
• Strong understanding of network fundamentals (TCP/IP, DNS, HTTP/S)
• Security Clearance eligible

Preferred Qualifications

• Experience with XDR platforms and cross-domain correlated detection
• Familiarity with cloud-native security in AWS or Azure
• Experience with SOAR platforms or response automation
• Exposure to supply chain and CI/CD pipeline security monitoring
• Familiarity with compliance frameworks like NIST SP 800-171, NIST SP 800-53, or CMMC
• Relevant certifications such as GCIH, GCIA, GCFE, BTL, CySA+, or OSCP
• Active security clearance

About the Company

Saronic Technologies is a leader in revolutionizing autonomy at sea, dedicated to developing state-of-the-art solutions that enhance maritime operations through autonomous and intelligent platforms.