Security Operations Manager

We are 27 people, all hands-on, and the founders still run engagements themselves.

Poplarport is hiring for the Security Operations Manager role to monitor, investigate and respond to security alerts across our environment. Fully remote. You can work from anywhere in the US. You will write a lot of updates, so clear written English is important.

Responsibilities

• Hand off open cases at shift change with clear notes
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests
• Review firewall, proxy, VPN and authentication logs for suspicious activity

What you'll need

• 7+ years in an SOC, security analyst or IT security role
• Must be able to pass a background check
• Clear written communication for incident tickets and reports
• Working knowledge of SIEM and EDR tools
• Familiarity with the MITRE ATT&CK framework
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols

Nice to have

• KQL or SPL query writing
• Malware analysis in a sandbox
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Benefits

• Health insurance
• 401(k) with company match
• Three weeks of PTO to start
• Vision insurance
• Professional development budget

Interview process: a phone call, a meeting with the hiring manager, and a final conversation with the team.

We are unable to sponsor visas for this position.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Poplarport LLC.