Information Security Analyst

About Quarryhall Threat Labs

Most engagements start with a vulnerability scan and a tabletop exercise with the client's leadership.

What this job is

Looking for an Information Security Analyst who wants to stay somewhere for a while. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. Hybrid, with three days a week in our San Antonio office.

In your first few months you will

• Analyze reported phishing emails, check headers and URLs, and purge malicious messages.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint.
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM.
• Check threat intelligence feeds and IOCs against our environment.

What we're looking for

• Familiarity with the MITRE ATT&CK framework.
• Basic scripting in PowerShell or Python.
• CompTIA Security+ or equivalent (or ability to obtain within six months)
• Clear written communication for incident tickets and reports.

Preferred qualifications

• Malware analysis in a sandbox.
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.

Compensation and benefits

The salary range for this role is $91,000 - $112,000 annually. This range reflects base salary only.

• Health insurance.
• 401(k) with company match.
• Paid sick leave.
• Referral program.
• 11 paid holidays.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Quarryhall Threat Labs LLC.