SonicJobs Logo
Left arrow iconBack to search

IT Security Operations Analyst

Cary Oil Co Inc
Posted 23 days ago, valid for 21 days
Location

Cary, NC 27513, US

Salary

Competitive

Contract type

Full Time

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Sonic Summary

info
  • The Security Operations Analyst role requires 2-4 years of experience in Information Security or IT Security.
  • The position involves managing security operations across platforms like Arctic Wolf, Huntress, and SentinelOne, ensuring effective endpoint protection and incident response.
  • Key responsibilities include triaging security events, optimizing deployments, and coordinating with internal and external stakeholders.
  • The role also encompasses cloud security architecture, compliance with security frameworks, and identity protection efforts.
  • Salary for this position is competitive and commensurate with experience.

Position Overview

This role serves as the internal bridge between the business and its managed security partners, owning day-to-day security operations across Arctic Wolf (SOC-as-a-Service), Huntress, SentinelOne endpoint platforms.


The Security Operations Analyst is responsible for ensuring the effectiveness, coverage, and continuous improvement of endpoint protection, detection, and response capabilities. This individual plays a critical role in triaging security events, reducing alert noise, and coordinating timely response actions across internal stakeholders and external partners. 


 
Security Operations & Incident Response | MDR Partnership, endpoint security, and operational response

  • Serve as the primarily liaison to Arctic Wolf, managing escalations, turning alert fidelity, and ensuring SLA adherence.
  • Administer and optimize Huntress and SentinelOne deployments – including agent health, coverage gaps, policy configurations, and exclusion management.
  • Triage and response to incidents surfaced by the third-party SOC, coordinating containment and remediation with internal stakeholders.
  • Refine detection rules, dashboards and reporting to reduce noise and surface high-signal alerts.
  • Review and action Arctic Wolf tickets and Huntress/SentinelOne findings daily.
  • Maintain endpoint scanner coverage across the environment, tracking and resolving unmanaged or unhealthy agents.
  • Partner with IT and business teams to ensure security tooling does not disrupt operations.
  • Document incidents, response actions, and lessons learned.


Cloud Security Architecture & Modernization | Secure AWS design, cloud governance, and modernization

  • Gain exposure to secure AWS architectures, including governance guardrails and scalable security patterns.
  • Support secure standards for cloud modernization, application migrations, and cloud-native development.
  • Participate in security reviews and continuous posture improvement efforts.


Security Governance, Risk & Compliance | Control frameworks, risk management, and audit readiness

  • Support enterprise security policies, stands, and control frameworks aligned to NIST and CIS benchmarks.
  • Assist with control assessments, evidence collection, and audit readiness activities.
  • Partner in remediation tracking and risk communication efforts.
     

Identity, Access & Zero Trust Security | Enterprise identity protection and Zero Trust support

  • Assist in maintaining Microsoft 365 and Entra security baselines, including MFA and Conditional Access.
  • Support identity governance and least privilege enforcement.
  • Gain exposure to identity integrations and access control models.
     

Enterprise Data & Platform Security | Protection of data platforms and enterprise integrations

  • Manage security for enterprise data platforms and SaaS integrations.
  • Assist in monitoring and protection of data access and usage patterns.
     

Stakeholder & Executive Engagement | Cross-functional partnership and communication

  • Partner with technology and business teams to support secure operations.
  • Communicate security issues in clear, business-relevant terms.
  • Contribute to documentation, reporting, and continuous improvement efforts.
     

Requirements

Education and Experience

  • 2-4 years of experience in Information Security, Security Operations, or IT Security
  • Direct experience with EDR platforms (SentinelOne and/or Huntress preferred)
  • Experience working with or alongside managed SOC/MDR providers
  • Strong ability to triage and prioritize security alerts


Technical & Professional Expertise

  • Familiarity with endpoint security tools and alert management workflows
  • Understanding of incident response fundamentals 
  • Ability to translate technical security issues to non-technical stakeholders
  • Strong organizational and critical thinking skills
     

Preferred Experience

  • Working knowledge of Arctic Wolf, Microsoft 365, Entra, or similar platforms
  • Exposure to AWS environments and cloud security concepts
  • Familiarity with security frameworks (NIST, CIS)
  • Experience in environments with third-party SOC or MDR providers


Key Competencies

  • Strong attention to detail and operational ownership
  • Analytical mindset with sound judgment
  • Ability to manage multiple priorities
  • Collaborative and team orientated
  • Clear written and verbal communication



Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.