Note: The job is a remote job and is open to candidates in USA. Blumira is a security operations platform dedicated to providing support for growing teams and partners. The Security Operations Analyst will work closely with customers to ensure their security needs are met through SIEM duties, security analysis, and technical support.
Responsibilities
- Deliver exceptional support experiences for our customers through advanced security expertise and thoughtful, empathetic communication
- Serve as a technical leader and mentor, helping guide other team members through positive influence and knowledge sharing
- Work closely with our customers to provide expert-level advisory services on complex security questions and product issues
- Lead troubleshooting efforts with customers and perform advanced log analysis to provide comprehensive context around security incidents
- Be on-call for rare critical security incidents and help lead response efforts
- Actively contribute to incident responses and help propose technical solutions
- Share your deep technical expertise across all levels of the Security Operations team, our customers, and colleagues throughout the organization
- Work closely with the Incident Detection Engineering team to triage critical and high priority security incidents
- Provide leadership and mentorship during security events
- Drive Security Operations team efficiency through process creation, optimization, and innovative feature ideas
- Work on special projects and initiatives to expand team skillsets and capabilities
- Regularly contribute to team content creation including how-to articles, documentation, and blogs
- Serve as a sought-after resource among team members for complex technical challenges
- Actively advocate for customers throughout the organization
Skills
- 3–5 years of professional experience in a cybersecurity-focused role (SOC, Incident Response, or Security Engineering)
- Strong technical proficiency in Windows endpoint security, including a deep understanding of registry keys, file systems, and OS hardening
- Demonstrated experience with SQL, specifically the ability to write complex queries to extract and analyze security data
- Working knowledge of industry frameworks, such as MITRE ATT&CK, NIST, or CIS, and how to apply them to real-world threat scenarios
- Experience with SIEM platforms (e.g., Blumira, ELK, Splunk) for log correlation and event triaging
- Proficiency with modern support tooling, specifically Zendesk (or similar ticketing platforms) and productivity suites like Google Workspace and Slack
- Technical Versatility: The ability to quickly master new, specialized software platforms and security tools as the product landscape evolves
- Outcome-Oriented: A track record of consistently meeting or exceeding KPIs and maintaining high quality while working under SLA pressure
- Analytical Mindset: Proven ability to synthesize complex technical information into clear, concise summaries for both technical and non-technical stakeholders
- Relevant Industry Certifications: Possession of advanced security certifications such as CISSP, GCIH (GIAC Certified Incident Handler), GCFA, or Sec+
- Networking Background: Previous experience in Network Administration or a deep understanding of TCP/IP, DNS, and firewall configuration to assist in troubleshooting connectivity-related security issues
- Cloud Security Expertise: Familiarity with AWS, Azure, or GCP environments and their respective security logging and monitoring tools
- Scripting Capabilities: Basic proficiency in Python or PowerShell to automate repetitive tasks or parse large datasets during incident investigations
- Malware Analysis: Foundational knowledge of static and dynamic malware analysis or sandbox execution
Benefits
- Competitive compensation and stock equity plan
- Unlimited PTO
- A flexible work environment that supports working from home
- Comprehensive benefits package that includes medical, dental, vision, and life insurance, as well as a company sponsored pre-tax retirement savings program
Company Overview