Senior SOC Analyst

🔥 5 minutes ago

🌐 United States, Canada – Remote

🇺🇸 United States – Remote 🇨🇦 Canada – Remote

⏰ Full Time

🟠 Senior

🛡️ Security Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

BeyondTrust

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1985

🔒 Cybersecurity

💰 Private Equity Round on 2021-05

Cybersecurity

BeyondTrust is a company that specializes in providing cybersecurity solutions. They focus on offering products and services that protect organizations from internal and external threats, and their solutions often involve privileged access management to secure and manage the identities and credentials of users accessing critical systems and data.

📋 Description

• Monitor and triage security alerts across SIEM, EDR, and CSPM platforms • Investigate alerts to determine scope, severity, and escalation requirements • Use AI-assisted tools for triage, enrichment, and investigation • Classify, document, and track alerts through their lifecycle • Participate in or lead incident response from detection through remediation • Collect evidence, conduct forensic analysis, determine root causes, and communicate with stakeholders • Investigate identity provider logs, cloud audit trails, network flow data, and other cloud-native sources • Execute incident-response runbooks across identity, endpoint, cloud, and email workflows • Produce incident summaries and post-incident reports • Design, implement, tune, and validate SIEM and EDR detection rules • Translate threat intelligence into actionable detection content and maintain MITRE ATT&CK coverage • Contribute to AI and automation integration, including prompts, agent workflows, and LLM-based pipelines • Partner with engineering teams to improve log ingestion, data quality, and tool integrations • Maintain operational notes and shift handoff documentation • Refine IR runbooks, playbooks, and standard operating procedures • Participate in an after-hours on-call rotation • Track MTTD, MTTR, MTTC, and false-positive metrics • Participate in tabletop exercises, purple team activities, and post-incident reviews

🎯 Requirements

• 2+ years of experience in a SOC, security operations, or incident response role • Understanding of MITRE ATT&CK, network protocols, and endpoint behavior • Experience with at least one SIEM platform and familiarity with writing search or detection queries • Familiarity with EDR platforms and cloud environments; IaaS preferred • Comfort using AI systems such as LLM-based assistants, copilots, or AI-driven analysis tools in security workflows • Strong written communication skills and ability to document findings clearly for technical and non-technical audiences

🏖️ Benefits

• Flexibility, trust, and continual learning culture • Recognition for employee growth and impact • Diversity and inclusion-focused workplace culture • Employee care and support