Senior Cyber Security Analyst

Our practices cover strategy, operations, technology implementation, risk and human capital.

The role:

This is a backfill for a team member who moved to another team. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. This is a full-time remote role. We use an employer of record in Sri Lanka, so you get a proper employment contract, not a freelance agreement. You will need at least 4 hours of overlap with US Central time. You will write a lot of updates, so clear written English is important.

Day to day:

• Review firewall, proxy, VPN and authentication logs for suspicious activity.
• Escalate confirmed incidents and follow the incident response plan.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.
• Hand off open cases at shift change with clear notes.
• Check threat intelligence feeds and IOCs against our environment.

Minimum qualifications:

• 5-7 years in an SOC, security analyst or IT security role.
• Must be able to pass a background check.
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols.
• Ability to work shifts, including some nights, weekends or holidays as scheduled.

Preferred:

• CySA+, GCIH, GCIA or BTL1 certification.
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.
• Prior help desk or network administration experience.

Schedule: Monday to Friday, 8:00 AM to 5:00 PM, with occasional after-hours escalations

What we offer:

• Home office setup budget.
• 20 days paid time off.
• Performance bonus.
• Annual learning budget.
• Co-working space stipend.

Candidates must be eligible to work in Sri Lanka.

Please submit your CV in English.

Start: Flexible.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Racine Advisory.