Role Description We are looking for a SNOC Analyst Tier 2 or 3 to support overnight security and network operations monitoring for a managed services environment. This role is ideal for someone with hands-on IT, NOC, SOC, or managed services experience who is comfortable working independently during evening hours and following structured operational procedures. This is a remote role with preference for candidates based in Hawaii due to schedule alignment. The analyst will support a 2:00 PM to 1:00 AM HST schedule, which aligns with 8:00 PM to 7:00 AM Eastern Time coverage. The position follows a 4-day workweek with 3 days off. Key Responsibilities - Review security and network alerts and validate event details. - Create, update, and maintain accurate tickets with clear documentation. - Document findings and escalate suspicious activity or service-impacting issues when required. - Follow established runbooks and escalation procedures. - Complete clear shift handoff notes for ongoing visibility and continuity. - Work with SIEM platforms, EDR/XDR tools, Microsoft security tools, ticketing systems, remote monitoring tools, and basic network monitoring platforms. Qualifications - Previous experience in IT support, NOC operations, cybersecurity monitoring, managed services, or SOC alert triage. - Experience with Microsoft 365, Microsoft Sentinel, Splunk, SentinelOne, CrowdStrike, firewall logs, phishing triage, endpoint alerts, VPN alerts, device availability monitoring, or network connectivity troubleshooting. Requirements - Strong attention to detail and accurate documentation habits. - Clear written communication and reliable shift handoff practices. - Ability to follow escalation procedures and structured operational workflows. - Comfort working independently during evening hours. - Ability to identify potential issues, communicate clearly, and take ownership of assigned shift responsibilities. Preferred Qualifications - Security+, Network+, CySA+, SC-200, AZ-500, or equivalent hands-on experience. - Basic understanding of networking, Windows systems, Microsoft 365, endpoint security, common cyber threats, alert triage, network troubleshooting, and ticket documentation. Benefits - 401(k) - 401(k) matching - Dental insurance - Employee discounts - Flexible schedule - Health insurance - Training & development - Tuition assistance - Vision insurance

• Lead end-to-end implementation and maintenance of SOC 2 , ISO 27001 , and related compliance programs through our key partner (Drata). • Build fully automated vulnerability scanning pipelines integrated with AWS , EKS/Kubernetes , and CI/CD workflows. • Manage security tooling for cloud-native environments (e.g., IaC security, container runtime protection). • Conduct risk assessments and audits, aligning with NIST CSF or MITRE ATT&CK frameworks. • Collaborate with engineering teams to remediate vulnerabilities and implement security controls.

• Monitor, investigate, and respond to security detections across the SIEM, driving alerts to resolution. • Develop, tune, and maintain SIEM use cases and correlation rules to improve detection coverage. • Build and deliver operational reports and dashboards from available SIEM log source data. • Identify, assess, and escalate high-impact events from multiple data sources to senior staff and stakeholders following established procedures. • Intake, triage, and respond to security reports (phishing, suspicious activity, etc.), escalating as necessary. • Own the lifecycle of security tickets in the case management system, ensuring accurate documentation, timely updates, and proper closure. • Support proactive investigations and threat hunting as directed. • Provide day-to-day SOC operational support and coverage, communicating findings and relevant event details clearly to team members and stakeholders. • Draft and update SOC and Authentic8 documentation, runbooks, standards, and procedures. • Work with system and application owners to remediate discovered security vulnerabilities. • Ability to collaborate effectively in a dynamic team environment.

• Teach remotely for the Cyber Dev Operations program. • Engage students through frequent interaction that motivates them to succeed. • Guide students in active collaboration and the application of their learning in problem- and project-based learning demonstrations. • Provide rich and regular constructive feedback, utilizing rubrics effectively for the assessment of student work, acknowledging student accomplishments. • Demonstrate relevant and current subject-matter expertise, helping students connect concepts across their academic program.