Senior Security Analyst

About us:

From the Charlotte office, we cover clients within about a two-hour drive and support remote sites through RMM tools. Our technicians handle onsite and remote support for medical offices, accounting firms and manufacturers on fixed monthly contracts. Lunch is usually whatever is closest to the client site.

The role:

Looking for a Senior Security Analyst who wants to stay somewhere for a while. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. Remote within the US. The team meets in Charlotte once a quarter, travel covered. Communication happens mostly in Slack and short video calls.

Day to day:

• Report on security awareness training and phishing simulation results.
• Pull evidence for SOC 2, PCI DSS or HIPAA audit requests.
• Write and update SOC runbooks and playbooks.
• Help with user access reviews and offboarding audits.
• Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners.

Requirements:

• 5+ years in an SOC, security analyst or IT security role.
• Experience reading Windows Event Logs, Sysmon and Linux logs.
• Basic scripting in PowerShell or Python.

Desirable:

• SOAR platforms such as Splunk SOAR, Cortex XSOAR or Tines.
• CySA+, GCIH, GCIA or BTL1 certification.
• KQL or SPL query writing.

Compensation and benefits:

• Health, dental and vision coverage starting on day one.
• 401(k) with 4% match.
• Three weeks of PTO to start.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Charlotte IT.