Data Analyst (Analytics Leader)

𝗧𝗶𝗲𝗿 1 𝗦𝗢𝗖 𝗦𝗽𝗲𝗰𝗶𝗮𝗹𝗶𝘀𝘁𝘀Location: Training fully onsite(2-3 months), opportunity is Remote (Must reside in the Seattle, WA area)𝑷𝒂𝒚 𝑹𝒂𝒕𝒆 𝒆𝒙𝒑𝒆𝒄𝒕𝒂𝒕𝒊𝒐𝒏𝒔: 𝒂𝒇𝒕𝒆𝒓 𝒔𝒖𝒄𝒄𝒆𝒔𝒔𝒇𝒖𝒍 𝒄𝒐𝒎𝒑𝒍𝒆𝒕𝒊𝒐𝒏 𝒐𝒇 𝑺𝒌𝒊𝒍𝒍𝑩𝒓𝒊𝒅𝒈𝒆 𝒖𝒑 𝒕𝒐 $40/𝒉𝒓About the RoleWe are building a new Security Operations Center (SOC) team consisting of 6–7 Tier 1 SOC Specialists. These specialists will serve as the first line of defense—monitoring alerts, triaging incidents, and escalating threats in real time. Candidates must be located in the Seattle metro area, but the role is remote.

What You’ll Do• Monitor security alerts and events across SIEM, EDR, and logging platforms• Perform initial triage and classification of security incidents• Escalate high severity or suspicious activity to Tier 2 analysts• Analyze logs from Windows, Linux, networking devices, and cloud systems• Investigate common security threats such as phishing, malware, brute force attempts, and unauthorized access• Document findings, create incident summaries, and support SOC runbook improvements• Participate in shift based operations including nights and weekends Required Skills & Must HavesSOC Experience• Prior Tier 1 SOC, incident response, or security monitoring experience Networking Basics• Understanding of:o TCP/IPo DNSo HTTP/HTTPSo IP addressingo Ports and traffic flow fundamentals Operating Systems Knowledge• Windows: familiarity with Event IDs (e.g., 4624/4625, logon/logoff events)• Linux: reading auth logs, systemd journal, process monitoring Security Concepts• Understanding of:o Common threat types (phishing, malware, brute force attacks)o Authentication and authorization basicso General security best practices Tool ProficiencyHands on experience with:• SIEM: Splunk, Microsoft Sentinel• EDR: Microsoft Defender for Endpoint, SentinelOne• Logging, alerting, and monitoring tools Scripting & Automation• Basic PowerShell or Python for log parsing, automation, and alert enrichment Education• Degree is acceptable but not required if experience is strong. Nice to Haves (Not Required)• Security+ or similar foundational security certifications• Experience in 24/7 SOC environments• Hands on with cloud security tooling (Azure, AWS, GCP)• Familiarity with SOAR or simple automation workflows Work Environment & Expectations• Remote, but must reside in the Seattle area for rare onsite needs• Ability to work overnight shifts and weekends• Team-oriented, strong communication skills, reliable escalation discipline• Adherence to SOC runbooks, incident handling procedures, and service-level expectations