Junior Security Analyst

Certifications across the team include OSCP, GPEN and CISSP. We are 2 people, all hands-on, and the founders still run engagements themselves.

Looking for a Junior Security Analyst who wants to stay somewhere for a while. We need someone who writes up incidents clearly enough that the next shift can pick them up without asking. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Remote within the US. The team meets in Oakland once a quarter, travel covered.

What you'll do

• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Write and update SOC runbooks and playbooks
• Report on security awareness training and phishing simulation results
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests
• Check threat intelligence feeds and IOCs against our environment
• Help with user access reviews and offboarding audits
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM

About you

• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Must be able to pass a background check
• Familiarity with the MITRE ATT&CK framework
• Experience reading Windows Event Logs, Sysmon and Linux logs
• Ability to work shifts, including some nights, weekends or holidays as scheduled
• CompTIA Security+ or equivalent (or ability to obtain within six months)

Bonus points

• Prior help desk or network administration experience
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines

Schedule: Day shift with one week of on-call every six weeks

Perks and benefits

Salary: $89,000 - $100,000 a year

• Health insurance
• 401(k) with 4% match
• Three weeks of PTO to start
• Professional development budget
• Flexible schedule
• 11 paid holidays
• Dental insurance

We read every application and reply within about a week.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Pendle Risk Partners.