Unqork

Security Operations Analyst

Unqork$70K — $100K *
US-AnywhereRemote in United States
Information Technology
Less than 5 years of experience
Job Overview by Ladders

Qualifications

  • 3+ years of experience in Security Operations and 2+ years contributing to a Security Operations Center (SOC) or Incident Response team.
  • Proven track record in designing, implementing, and managing SOC processes and automations.
  • Hands-on experience with Python and various security monitoring platforms like SIEM and EDR/XDR.
  • Strong knowledge of modern security threats and attack vectors.
  • Expertise in applying security frameworks like NIST and MITRE ATT&CK for threat detection.
  • Exceptional communication skills for collaboration across technical and non-technical teams, including executive leaders.
  • Relevant industry certifications (CISSP, CISM, GCIH) highly preferred.

Responsibilities

  • Monitor SIEM, EDR/XDR, and other security tools for alerts and respond according to established playbooks.
  • Utilize SOAR platforms to optimize alert handling and implement automations for manual tasks.
  • Integrate log sources into a SIEM tool and normalize data for effective monitoring solutions.
  • Consume threat intelligence feeds to safeguard against known Indicators of Compromise (IoCs).
  • Collaborate with IT Operations to maintain hardware and software asset security and deploy endpoint security.
  • Engage with Engineering and Product to influence security architecture decisions and promote a security culture.
  • Assist in generating security metrics and evidence for compliance audits related to security policies.

Benefits

  • Work from home with a remote-first community.
  • Unlimited PTO with encouragement to take time off.
  • Student loan payback program available.
  • 100% employer-covered medical, dental, and vision plans.
  • Flexible Spending Account (FSA) options.
  • Monthly stipend for work-from-home setup and personal development.
  • Employer-sponsored 401(k) with matching contributions.
  • Subsidized ClassPass Membership and generous paid parental leave.
Full Job Description
The Impact U will make:

As a Security Operations Analyst, you will be an analytical and thorough individual contributor reporting to the Director of Security Operations. You will play a role in Threat Detection & Response, Threat Intelligence and Hunting, Technical Security Architecture, IT Operations, and SIEM and SOAR engineering. Your primary focus will be to proactively and reactively protect and defend our critical assets against an evolving threat landscape.
  • Security Monitoring & Alert Triage Actively monitor SIEM, EDR/XDR, and other security tools to detect, analyze, and triage security alerts. Follow established playbooks to ensure timely and accurate initial response to potential threats.
  • Process Efficiency & Automation Utilize existing Security Orchestration, Automation, and Response (SOAR) platforms to handle alerts efficiently. Identify repetitive manual tasks and implement automations.
  • SIEM & Detection Engineering Integrate and set up the ingestion of log sources to a SIEM tool, including the normalization of fields and data. Create timely monitoring solutions for relevant threats based on active threat intelligence. Share responsibility for detection and log lifecycle / maintenance.
  • Threat Intelligence Consume and review daily threat intelligence feeds, security advisories, and industry alerts to ensure the company is protected against known Indicators of Compromise (IoCs) and emerging threat trends.
  • IT Operations & Asset Security Work closely with IT Operations to maintain accurate hardware and software asset inventories. Assist in deploying and troubleshooting endpoint security agents to ensure a secure baseline for all employee devices.
  • Cross-Functional Technical Partnership: Collaborate extensively with resources in Engineering, Product, IT, and other departments to embed operational security requirements, influence architectural decisions for detectability, and foster a strong security culture. Serve as the primary security technical expert for these partnerships.
  • Compliance & Operational Reporting: Assist in generating routine security metrics and operational reports. Help gather technical evidence to support adherence to security policies and compliance audits (e.g., SOC 2, ISO 27001).

What U bring:
  • 3+ years of progressive experience in Security Operations, with at least 2 years in a role contributing to a Security Operations Center (SOC), Managed Detection Response Service, or Incident Response team.
  • Proven track record as an engineer, having designed, implemented, and managed mature SOC processes and automations.
  • Proven hands-on Python experience.
  • Proven hands-on technical expertise in threat detection, incident response, vulnerability management, and the use of SIEM, EDR/XDR, other security monitoring platforms, IAM solutions and processes.
  • Strong understanding of modern security threats, attack vectors, and defensive strategies.
  • Expertise in security frameworks (e.g., NIST, MITRE ATT&CK) and their practical application in threat detection, analysis, and incident response.
  • Exceptional communication and interpersonal skills, with the ability to influence and effectively collaborate with technical and non-technical stakeholders at all levels, including executive leadership.
  • Demonstrated ability to translate complex operational security incidents and risks into clear, actionable strategies and communicate effectively to diverse audiences.
  • Relevant industry certifications highly preferred (e.g., CISSP, CISM, GCIH, GCIA, or OSCP).
  • Bachelor's degree in Computer Science, Information Security, or a related technical field; Master's degree a plus.

Compensation, Benefits, & Perks

Work from home with a remote-first community

Unlimited PTO (and the encouragement to use it)

Student loan payback program

100% employer-covered medical, dental, and vision options available to you and your dependents

Flexible Spending Account (FSA)

Monthly stipend toward your WFH setup, vacation, development and more

Employer-sponsored 401(k) with contribution match

Subsidized ClassPass Membership

Generous Paid Parental Leave

Hiring Ranges:
  • Tier 1: $80,000 - $100,000
  • Tier 2: $70,000 - $90,000

Unqork employs a market-driven approach to establish compensation ranges. In addition to a base salary, employees may also be eligible to receive a target incentive and company equity in the form of stock options.

An employee's compensation within the range provided above depends on a variety of factors including, but not limited to, their location, role, skillset, level of experience, and similar peer salaries. As a remote-first company, Unqork incorporates a geographic differential into our compensation structure, depending on the candidate's location. We utilize a tiered system-Tier 1 and Tier 2-to accurately reflect local market rates and ensure our compensation packages are both fair and competitive.

Our geographic tiers are defined as follows:
  • Tier 1: New York Metro, Seattle Metro, San Francisco Bay Area
  • Tier 2: All other US and US territory locations

Unqork embraces a culture of security and privacy awareness by consistently safeguarding sensitive information, adhering to company policies, and actively participating in training and initiatives to protect our data and the privacy of our stakeholders.

About Unqork

Unqork is a no-code enterprise application platform that helps large companies build complex custom software faster, with higher quality, and lower costs than conventional approaches. The platform is used by insurance, financial services, and healthcare companies to build everything from customer-facing websites to back-office operations. Unqork was founded in 2017 by Gary Hoberman, a former CIO at MetLife, and is headquartered in New York City.
Learn more about Unqork
Size
500 employees
Industry
Founded
2017

Similar Jobs

More Jobs at Unqork

More Information Technology Jobs

Find similar Security Operations Analyst jobs: