SonicJobs Logo
Left arrow iconBack to search

IT Security Operations Analyst

Cary Oil Co Inc
Posted a month ago, valid for 14 days
Location

Cary, NC 27513, US

Salary

Competitive

Contract type

Full Time

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.

Sonic Summary

info
  • The Security Operations Analyst role requires 2-4 years of experience in Information Security or IT Security.
  • The position involves managing security operations across platforms like Arctic Wolf, Huntress, and SentinelOne, ensuring effective endpoint protection and incident response.
  • Key responsibilities include triaging security events, optimizing deployments, and coordinating with internal and external stakeholders.
  • The role also encompasses cloud security architecture, compliance with security frameworks, and identity protection efforts.
  • Salary for this position is competitive and commensurate with experience.

Position Overview

This role serves as the internal bridge between the business and its managed security partners, owning day-to-day security operations across Arctic Wolf (SOC-as-a-Service), Huntress, SentinelOne endpoint platforms.


The Security Operations Analyst is responsible for ensuring the effectiveness, coverage, and continuous improvement of endpoint protection, detection, and response capabilities. This individual plays a critical role in triaging security events, reducing alert noise, and coordinating timely response actions across internal stakeholders and external partners. 


 
Security Operations & Incident Response | MDR Partnership, endpoint security, and operational response

  • Serve as the primarily liaison to Arctic Wolf, managing escalations, turning alert fidelity, and ensuring SLA adherence.
  • Administer and optimize Huntress and SentinelOne deployments – including agent health, coverage gaps, policy configurations, and exclusion management.
  • Triage and response to incidents surfaced by the third-party SOC, coordinating containment and remediation with internal stakeholders.
  • Refine detection rules, dashboards and reporting to reduce noise and surface high-signal alerts.
  • Review and action Arctic Wolf tickets and Huntress/SentinelOne findings daily.
  • Maintain endpoint scanner coverage across the environment, tracking and resolving unmanaged or unhealthy agents.
  • Partner with IT and business teams to ensure security tooling does not disrupt operations.
  • Document incidents, response actions, and lessons learned.


Cloud Security Architecture & Modernization | Secure AWS design, cloud governance, and modernization

  • Gain exposure to secure AWS architectures, including governance guardrails and scalable security patterns.
  • Support secure standards for cloud modernization, application migrations, and cloud-native development.
  • Participate in security reviews and continuous posture improvement efforts.


Security Governance, Risk & Compliance | Control frameworks, risk management, and audit readiness

  • Support enterprise security policies, stands, and control frameworks aligned to NIST and CIS benchmarks.
  • Assist with control assessments, evidence collection, and audit readiness activities.
  • Partner in remediation tracking and risk communication efforts.
     

Identity, Access & Zero Trust Security | Enterprise identity protection and Zero Trust support

  • Assist in maintaining Microsoft 365 and Entra security baselines, including MFA and Conditional Access.
  • Support identity governance and least privilege enforcement.
  • Gain exposure to identity integrations and access control models.
     

Enterprise Data & Platform Security | Protection of data platforms and enterprise integrations

  • Manage security for enterprise data platforms and SaaS integrations.
  • Assist in monitoring and protection of data access and usage patterns.
     

Stakeholder & Executive Engagement | Cross-functional partnership and communication

  • Partner with technology and business teams to support secure operations.
  • Communicate security issues in clear, business-relevant terms.
  • Contribute to documentation, reporting, and continuous improvement efforts.
     

Requirements

Education and Experience

  • 2-4 years of experience in Information Security, Security Operations, or IT Security
  • Direct experience with EDR platforms (SentinelOne and/or Huntress preferred)
  • Experience working with or alongside managed SOC/MDR providers
  • Strong ability to triage and prioritize security alerts


Technical & Professional Expertise

  • Familiarity with endpoint security tools and alert management workflows
  • Understanding of incident response fundamentals 
  • Ability to translate technical security issues to non-technical stakeholders
  • Strong organizational and critical thinking skills
     

Preferred Experience

  • Working knowledge of Arctic Wolf, Microsoft 365, Entra, or similar platforms
  • Exposure to AWS environments and cloud security concepts
  • Familiarity with security frameworks (NIST, CIS)
  • Experience in environments with third-party SOC or MDR providers


Key Competencies

  • Strong attention to detail and operational ownership
  • Analytical mindset with sound judgment
  • Ability to manage multiple priorities
  • Collaborative and team orientated
  • Clear written and verbal communication



Learn more about this Employer on their Career Site

Apply now in a few quick clicks

By applying, a Sonicjobs account will be created for you. Sonicjobs's Privacy Policy and Terms & Conditions will apply.

SonicJobs' Terms & Conditions and Privacy Policy also apply.