About the role
BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity. In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well-documented findings. Found on 1752vc Careers, the job board for startup and VC roles.
What they're looking for
- Monitor, triage, and investigate security alerts and tickets from multiple sources, including SIEM logs, endpoint logs, and EDR telemetry
- Own assigned tickets through to resolution, working within defined SLAs and prioritizing by severity and client impact
- Research indicators and activities to determine reputation and suspicious attributes
- Perform analysis of suspicious files, emails, URLs, and attacker infrastructure to support investigations
- Determine whether activity is malicious, benign, or a false positive, and escalate confirmed or complex incidents to L3 analysts with clear supporting evidence
- Document investigation steps, findings, and recommended actions accurately within the ticketing and case management system
More about this role
Position: SOC Security Analyst L2
Shift Schedule: Sunday–Wednesday or Wednesday–Saturday, 7:00am–5:00pm
Work Authorization: Philippine Citizenship Required
BlueVoyant is seeking a SOC Security Analyst L2 to join our Security Operations Center, defending our global customers against constant and evolving adversary activity. In this role you will own and work through a queue of security alerts and tickets, carrying out thorough investigations, resolving cases accurately and efficiently, and escalating confirmed or complex incidents to L3 analysts with clear, well-documented findings. You will work closely with senior analysts and clients to reduce the impact and dwell time of security incidents. This role reports into BlueVoyant SOC leadership and operates under BlueVoyant processes, tooling, and supervision at all times, including when working within client environments.
- Monitor, triage, and investigate security alerts and tickets from multiple sources, including SIEM logs, endpoint logs, and EDR telemetry.
- Own assigned tickets through to resolution, working within defined SLAs and prioritizing by severity and client impact.
- Research indicators and activities to determine...
Browse similar: Startup jobs · Remote jobs