Independently manage day-to-day security operations (SecOps/SOC), including threat monitoring and incident triage with intense urgency.
Conduct systematic reviews of system logs and alerts using Wiz and Datadog to uncover root causes and solve for underlying vulnerabilities.
Use LLMs (like Claude) to interrogate the health of services and automate security-based data analytics at scale.
Navigate hundreds of Kubernetes clusters and disparate data sources to find the "signal in the noise" using SQL and Boolean logic.
Build and implement security controls and automated responses within the AWS ecosystem using Python, Go, or TypeScript.
Convey technical findings and forensic research concisely to engineering and product teams with clear, actionable remediation steps.
Own the execution of recurring compliance tasks and documentation, ensuring all security deliverables are error-free and meet regulatory standards.
Identify opportunities to automate manual security checks, moving the team toward a more proactive security engineering model over time.

2+ years of experience in Security Operations, SOC, or a related field, preferably within a scaling startup
Proven experience in incident response, including triage, investigation, and resolution in high-pressure environments
Hands-on experience with security and observability tools such as Wiz and Datadog, particularly from a forensic or MTDR perspective
Strong SQL skills and demonstrated ability to analyze large, complex datasets across distributed systems
Experience identifying patterns and extracting meaningful insights from high-volume data (“signal vs. noise”)
Familiarity with on-call rotations and a willingness to participate as needed
Experience or demonstrated interest in leveraging AI/LLMs (e.g., Claude) for data analysis, troubleshooting, or system interrogation

Security Analyst II

Key skills