Security Operation Analyst

The role

About Flexspring

What you'll do

• Monitor SIEM/EDR alerts, investigate and triage activity, and escalate confirmed incidents.
• Track vulnerability findings from scans and penetration tests through remediation, working with IT Ops, Cloud Engineering, and SRE owners.
• Tune detection rules and alert logic to reduce false positives and close monitoring gaps.
• Support incident response as secondary owner and follow the established Jira-based escalation process.
• Gather operational and technical evidence for SOC 2 and ISO 27001 audits.
• Coordinate with Cloud Engineering and Integration Support/SRE during incidents to determine root cause and scope.
• Track relevant threats and security practices for cloud infrastructure and SaaS/iPaaS platforms.
• Apply the AI & R&D Safe Sandbox Policy to AI-assisted tools, including read-only accounts, sandbox environments, and restrictions on customer data.

Must-have qualifications

• Bachelor's degree or college diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.
• Practical SIEM, EDR, or equivalent monitoring experience and incident triage/investigation skills.
• Working knowledge of vulnerability scanning, prioritization, and remediation tracking.
• Familiarity with cloud security fundamentals, including networking, IAM, and logging; AWS is preferred.
• Understanding of SOC 2 and/or ISO 27001.
• Strong analytical and documentation skills; comfortable with Jira-based ticketing and escalation.

Nice-to-have qualifications

• Security+; GSEC, GCIH, or equivalent security certifications.
• AWS-native security tools such as GuardDuty, Security Hub, or CloudTrail.
• SaaS/iPaaS or HR technology exposure.
• Python or similar scripting and automation experience.
• Experience supporting external audits or penetration-test coordination.

Work arrangement

• Work from home with flexible hours.

Benefits

• Four weeks of paid vacation annually and a health benefits package for the employee and family.
• Team events and opportunities to connect with colleagues.

Compensation

• The posting mentions a competitive base salary but gives no amount or pay cadence.