• Lead day-to-day SOC operations across cloud and on-prem environments • Serve as Incident Commander for major security incidents • Drive AI-powered security operations, automation, and threat detection initiatives • Lead detection engineering, threat hunting, and response improvements • Own and optimize SIEM, SOAR, EDR/XDR, and threat intelligence platforms • Develop incident response plans, playbooks, and automation workflows • Partner with IT, Cloud, Risk, and Compliance teams to strengthen security posture • Mentor and develop SOC analysts and security engineers

• Your mission is to ensure the secure operation of IT and OT systems and protect them against cyber-attacks. • You monitor security-relevant events, assess vulnerabilities and derive technical and organizational measures. • You bring external service provider expertise in-house. • You work closely with IT, OT, QA and Compliance and translate regulatory requirements (e.g., NIS2, GxP) into operational security processes. • You assist management in preparing and implementing measures to strengthen security awareness across business units. • You are the primary contact for innovation, further development and optimization of central security technologies (network, IAM, endpoint, PAM). • You support colleagues in detecting, prioritizing, documenting and escalating cyber security incidents. • You contribute to the continuous improvement of security operations processes and playbooks.

Role Description We are looking for a SNOC Analyst Tier 2 or 3 to support overnight security and network operations monitoring for a managed services environment. This role is ideal for someone with hands-on IT, NOC, SOC, or managed services experience who is comfortable working independently during evening hours and following structured operational procedures. This is a remote role with preference for candidates based in Hawaii due to schedule alignment. The analyst will support a 2:00 PM to 1:00 AM HST schedule, which aligns with 8:00 PM to 7:00 AM Eastern Time coverage. The position follows a 4-day workweek with 3 days off. Key Responsibilities - Review security and network alerts and validate event details. - Create, update, and maintain accurate tickets with clear documentation. - Document findings and escalate suspicious activity or service-impacting issues when required. - Follow established runbooks and escalation procedures. - Complete clear shift handoff notes for ongoing visibility and continuity. - Work with SIEM platforms, EDR/XDR tools, Microsoft security tools, ticketing systems, remote monitoring tools, and basic network monitoring platforms. Qualifications - Previous experience in IT support, NOC operations, cybersecurity monitoring, managed services, or SOC alert triage. - Experience with Microsoft 365, Microsoft Sentinel, Splunk, SentinelOne, CrowdStrike, firewall logs, phishing triage, endpoint alerts, VPN alerts, device availability monitoring, or network connectivity troubleshooting. Requirements - Strong attention to detail and accurate documentation habits. - Clear written communication and reliable shift handoff practices. - Ability to follow escalation procedures and structured operational workflows. - Comfort working independently during evening hours. - Ability to identify potential issues, communicate clearly, and take ownership of assigned shift responsibilities. Preferred Qualifications - Security+, Network+, CySA+, SC-200, AZ-500, or equivalent hands-on experience. - Basic understanding of networking, Windows systems, Microsoft 365, endpoint security, common cyber threats, alert triage, network troubleshooting, and ticket documentation. Benefits - 401(k) - 401(k) matching - Dental insurance - Employee discounts - Flexible schedule - Health insurance - Training & development - Tuition assistance - Vision insurance

• Lead end-to-end implementation and maintenance of SOC 2 , ISO 27001 , and related compliance programs through our key partner (Drata). • Build fully automated vulnerability scanning pipelines integrated with AWS , EKS/Kubernetes , and CI/CD workflows. • Manage security tooling for cloud-native environments (e.g., IaC security, container runtime protection). • Conduct risk assessments and audits, aligning with NIST CSF or MITRE ATT&CK frameworks. • Collaborate with engineering teams to remediate vulnerabilities and implement security controls.