Senior SOC Analyst

Since 1964, the firm has grown through mergers with regional CPA practices. Remote work is fine outside busy season, and most people come in two or three days a week.

Position summary

We are adding a Senior SOC Analyst to our Security Operations team. This role handles alert triage, phishing investigations and vulnerability tracking for about 3,000 endpoints. The company is based in Oklahoma City, the US. Our team works from several countries. We engage team members in Spain as full-time contractors. Most of our contractors have been with us for more than two years. You will need at least 4 hours of overlap with US Central time.

Your responsibilities

• Check threat intelligence feeds and IOCs against our environment
• Hand off open cases at shift change with clear notes
• Analyse reported phishing emails, check headers and URLs, and purge malicious messages
• Escalate confirmed incidents and follow the incident response plan
• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Tune noisy detection rules with the security engineering team
• Report on security awareness training and phishing simulation results

Required qualifications

• 5+ years in an SOC, security analyst or IT security role
• Understanding of TCP/IP, DNS, HTTP and common ports and protocols
• Familiarity with the MITRE ATT&CK framework
• Ability to work shifts, including some nights, weekends or holidays as scheduled

Preferred qualifications

• CySA+, GCIH, GCIA or BTL1 certification
• Malware analysis in a sandbox

Schedule: Day shift with one week of on-call every six weeks

Salary: $4,800 - $6,100/month

Perks and benefits

• Paid time off
• Monthly payments via wire transfer or Wise

Please submit your CV in English.

If you are shortlisted, we will reach out to set up a first call.

Duration: 9 months. Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Foundrybound.