SOC Analyst

About us

Based in San Antonio, Plinth Security also trains client staff and runs simulated phishing campaigns. Clients come to us for SOC 2, HIPAA and PCI DSS readiness, policy writing and audit support.

About the role

The previous person in this role moved to another team. Security analyst role covering detection, incident response and some compliance work. Good fit for someone two or three years into security. Our team is spread across 17 countries. Headquarters is in San Antonio. This is a full-time remote role. We use an employer of record in Sri Lanka, so you get a proper employment contract, not a freelance agreement. You will need at least 4 hours of overlap with US Central time. Clear written English is a must, as the team works across time zones.

What you'll work on

• Investigate endpoint alerts in CrowdStrike Falcon, SentinelOne or Defender for Endpoint
• Monitor and triage alerts in Splunk, Microsoft Sentinel, QRadar or Elastic SIEM
• Hand off open cases at shift change with clear notes
• Report on security awareness training and phishing simulation results
• Help with user access reviews and offboarding audits

What we're looking for

• 3+ years in an SOC, security analyst or IT security role
• Experience reading Windows Event Logs, Sysmon and Linux logs
• Familiarity with the MITRE ATT&CK framework
• Clear written communication for incident tickets and reports

Pluses

• KQL or SPL query writing
• Cloud log analysis (CloudTrail, Entra ID sign-in logs)
• Prior help desk or network administration experience

Why work with us

Pay: LKR 470,000-LKR 540,000 per month

• Stock options
• Public holidays observed per your country
• Health insurance through our employer-of-record partner
• Flexible hours
• Co-working space stipend
• Performance bonus

Please submit your CV in English.

Start: Immediately.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Plinth Security.