Role Description The Analyst, Security Operations is responsible for reviewing and responding to security events, and investigating to root cause with multiple internal organizations and subsidiary companies as Tier 2 in a traditional tiered SOC. This role serves as the escalation point for Tier 1 analysts, ensures timely response to security detections and reports, and maintains high quality monitoring, investigation, and incident-handling processes across the team. You will build relationships with the subsidiary companies, and act as their voice to the corporate security team, while helping them improve their security posture. This role combines leadership, deep technical work, and the freedom to influence how our security operations evolve - right from the start. As part of a large and well-established security organization, this role offers significant growth opportunities for top performers, including advancement into areas such as Incident Response, Cyber Engineering, and other cybersecurity disciplines. This position is within the Threat Management Center, reporting to the Manager, Security Operations. In this role, you will have the opportunity to: - Respond and investigate security events such as phishing, malware detections, brand monitoring and others across a complex organization. - Mentor junior analysts and support onboarding of new team members. - Work with internal stakeholders to document existing processes and procedures for handling security escalations and investigations, and write new procedures as required. - Support Incident Response containment and eradication activities for multiple teams, and lead remediation activities after containment. - Develop relationships with multiple Security and IT teams across a multinational corporation and represent their interests. Qualifications - 4+ years of experience in a security operations center or similar, responding to security alerts and phishing reports. - Hands-on experience with security tools, such as SIEM, EDR, IDS/IPS, WAF, SOAR, etc. - Strong knowledge of security principles and best practices. - Demonstrable analytical and problem-solving skills. Requirements - Excellent interpersonal skills. - Previous experience in large global complex environments. - Prior experience working with a Security Operations Center or Managed Security Services Provider (MSSP) to implement and enhance threat detection and response capability. Benefits - Comprehensive, competitive benefit programs including paid time off, medical/dental/vision insurance, and 401(k) to eligible employees. - Remote work arrangement eligibility for this position. - Annual salary range for this role is $125,000 - $145,000, with eligibility for bonus/incentive pay.

Role Description CertifyOS is looking for a versatile IT Systems & Security Operations Specialist to bridge the gap between technical infrastructure management and security compliance. This mid-senior role is designed for a technical "all-rounder" who can manage L1 helpdesk escalations, lead complex system configurations, and ensure our organization remains audit-ready. As a critical member of our global infrastructure team, you will move beyond standard ticket resolution to focus on system improvement, automation, and advanced security governance. Work Timing: Rotational shifts (Including Night Shifts) Key Responsibilities - Advanced Systems Configuration & Improvement - Lead senior-level configuration and optimization of core SaaS platforms, including Google Workspace, JumpCloud (Identity Management), and Slack. - Architect and maintain Single Sign-On (SSO) integrations and Identity and Access Management (IAM) policies across all enterprise tooling. - Proactively identify bottlenecks in our current IT stack and implement technical solutions to enhance performance and user experience. - Security Operations & Compliance Audits - Proactively improving IT, Cloud, and Data security frameworks to mitigate risks. - Conduct regular, comprehensive audits of user permissions and system logs to ensure compliance with the principle of least privilege. - Conducting regular user access audits and monitoring security dashboards to lead technical vulnerability remediation. - Monitor security dashboards (EDR/MDM) and lead the technical remediation of identified vulnerabilities across the endpoint fleet. - IT Operations, Lifecycle Management & Support - Serve as the primary senior technical resource for L1 Helpdesk analysts, resolving complex escalations that require deeper system access. - Manage the full employee lifecycle, including ownership of end-to-end onboarding, offboarding, and asset retrieval processes, coordinating seamlessly with stakeholders. - Security, Compliance & Client Due Diligence - Lead responses to customer security questionnaires, RFPs, and TPRA/vendor security reviews, ensuring consistency and accuracy. - Serve as a key point of contact for client-facing security and compliance inquiries during due diligence processes. - Support the Security team in collecting and organizing evidence for SOC 2, HIPAA, and HITRUST audit readiness. - Process Automation - Design and implement automation scripts (Python/Bash) or low-code workflows to streamline repetitive IT tasks. - Continuously improve the automated provisioning process to ensure new hires are fully productive within their first 24 hours. - Performance, Reporting & OKRs - Own and maintain weekly and monthly IT/Security OKRs, including tracking progress, reporting metrics, and taking full initiative ownership. Qualifications - 5–8 years of progressive experience in IT Operations and Security. - Advanced knowledge of Google Workspace administration, JumpCloud (or similar IDP/MDM), and GCP IAM. - Deep experience in security frameworks (HIPAA/HITRUST/SOC 2), including hands-on experience supporting and maintaining SOC 2 audits. - Deep hands-on experience supporting and maintaining SOC 2 compliance/audit readiness. - Practical experience with scripting languages (Python) or automation tools to drive operational efficiency. - Must be comfortable working in a rotational shift environment, including night shifts, to support our global 24/7 operations. Preferred Qualifications - Relevant certifications (e.g., CompTIA Security+, Google Professional Workspace Administrator). - Previous experience in a high-growth startup or the healthcare technology industry. - Strong communication skills with the ability to report technical progress directly to executive leadership. Benefits - 100% coverage of health, dental, and vision insurance premiums for employees. - Unlimited PTO, with at least two weeks off each year to recharge for US-based team members. - Health insurance, statutory leave benefits, and additional wellness (menstrual) leave for women in India. - Commitment to building an inclusive environment where everyone feels valued and empowered. - Reasonable accommodations during the application process available upon request. - Commitment to pay transparency and fostering an open culture where compensation conversations are encouraged and respected.

• Lead day-to-day SOC operations across cloud and on-prem environments • Serve as Incident Commander for major security incidents • Drive AI-powered security operations, automation, and threat detection initiatives • Lead detection engineering, threat hunting, and response improvements • Own and optimize SIEM, SOAR, EDR/XDR, and threat intelligence platforms • Develop incident response plans, playbooks, and automation workflows • Partner with IT, Cloud, Risk, and Compliance teams to strengthen security posture • Mentor and develop SOC analysts and security engineers

• Your mission is to ensure the secure operation of IT and OT systems and protect them against cyber-attacks. • You monitor security-relevant events, assess vulnerabilities and derive technical and organizational measures. • You bring external service provider expertise in-house. • You work closely with IT, OT, QA and Compliance and translate regulatory requirements (e.g., NIS2, GxP) into operational security processes. • You assist management in preparing and implementing measures to strengthen security awareness across business units. • You are the primary contact for innovation, further development and optimization of central security technologies (network, IAM, endpoint, PAM). • You support colleagues in detecting, prioritizing, documenting and escalating cyber security incidents. • You contribute to the continuous improvement of security operations processes and playbooks.