About the job

Kilntower is a managed services provider with 320 employees, supporting more than 1,500 client organizations across the US. Certifications include ISO 27001 and SOC 2 Type II, and we hold partner status with Microsoft, Cisco and VMware. Tickets live in ConnectWise and everyone logs time to the quarter hour.

The position

This is a backfill for a team member who moved to another team. The operations team runs a 24/7 SOC. We need someone who can work through an alert queue and tell which ones matter. You can work from home anywhere in the US. We have no office requirement. You need a reliable internet connection and somewhere quiet to work.

What you'll be doing

Write and update SOC runbooks and playbooks
Run vulnerability scans with Tenable Nessus, Qualys or Rapid7 and track remediation with system owners
Pull evidence for SOC 2, PCI DSS or HIPAA audit requests
Review firewall, proxy, VPN and authentication logs for suspicious activity
Document incidents with timeline, impact and root cause
Check threat intelligence feeds and IOCs against our environment
Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
Tune noisy detection rules with the security engineering team

Qualifications

2-4 years in an SOC, security analyst or IT security role
Basic scripting in PowerShell or Python
Experience reading Windows Event Logs, Sysmon and Linux logs
Familiarity with the MITRE ATT&CK framework
Clear written communication for incident tickets and reports

Preferred

Malware analysis in a sandbox
KQL or SPL query writing
CySA+, GCIH, GCIA or BTL1 certification

Schedule: Rotating 12-hour shifts on a 2-2-3 schedule, including nights

Starting pay: $102,000 to $126,000 per year, depending on experience and certifications.

Compensation and benefits

Health, dental and vision coverage starting on day one
401(k) with 4% match
11 paid holidays
Employee discount

Send us your resume. No cover letter needed.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Kilntower LLC.