Security Analyst II

🔥 0 minutes ago

🌪️ Kansas – Remote

🌪️ Kansas – Remote

⏰ Full Time

🟢 Junior

🟡 Mid-level

🔐 Security Analyst

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Foresite Cybersecurity

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2013

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

💰 Venture Round - Foresite on 2019-01

Cybersecurity • SaaS • B2B

Foresite Cybersecurity is a managed security services and SecOps company founded in 2013 that helps organizations of all sizes defend against modern cyber threats. It combines human cybersecurity expertise, a proprietary security and compliance management platform (ProVision), and partnerships with cloud providers (notably Google Cloud) and AI technologies to deliver monitoring, incident response, compliance, and security automation as a service. Foresite positions itself as a B2B partner and extension of clients' security teams, serving thousands of customers with managed detection and response, SOC services, and security engineering.

📋 Description

• You will work inside our 24/7 Cyber Fusion Center, handling escalated security alerts, leading complex investigations for our managed customers across Google Security Operations (Chronicle) and our SOAR platform, and serving as a subject matter expert for the broader team. • Act as the primary point of escalation for our Tier 1 Analysts. • Investigate incidents end-to-end: Review complex alert context, gather evidence from Chronicle UDM and supporting tools, reach a final disposition, and either close the ticket with a documented rationale or escalate to Tier 3/Incident Response with a clear handoff. • Optimize investigation playbooks: Follow established playbooks for the detection stack, but actively identify gaps, propose workflow improvements. • Communicate clearly in tickets: Ensure all tickets are understandable by the next analyst, the customer, or an auditor reading it six months from now. • Lead communications through the ticketing system on routine and complex investigations, requests for information, and exclusion/suppression requests.

🎯 Requirements

• 2–4 years of prior experience in a SOC, incident response, or dedicated cybersecurity role. • Advanced knowledge of core security concepts: Deep understanding of the cyber kill chain and MITRE ATT&CK framework, common attack vectors (phishing, credential abuse, malware delivery, lateral movement), and hands-on experience with detection, prevention, and response tactics. • Proficiency with a SIEM: You have hands-on experience navigating SIEM platforms. • Strong written communication: You will be writing in tickets that customers read. Clear, concise, accurate writing is non-negotiable. • Attention to detail: False positives and true positives often look nearly identical. • CompTIA Sec+, CompTIA CySA+, BTL1, or equivalent certification is required within 90 days of hire if not already held.

🏖️ Benefits

• Robust medical insurance options to keep you and your family healthy. • We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD). • You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays to ensure you have time to recharge. • Access to world-class training and mentorship. • Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.