{"id":1085875,"url":"https://alion.io/job/nasuni-senior-security-operations-analyst","title":"Senior Security Operations Analyst","company":{"id":3836,"name":"Nasuni","domain":"nasuni.com","url":"https://alion.io/company/nasuni","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":78,"open_postings":16,"ghost_share":0,"stale_share":0.875,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":119000,"max_usd":212000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":340},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Darktrace","optional":false},{"name":"SIEM","optional":false},{"name":"SLI/SLO/SLA","optional":false},{"name":"Sumo Logic","optional":false},{"name":"Wiz","optional":false},{"name":"PowerShell","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-09-11T14:16:56Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-17T11:01:56Z","board_verified":true,"closed_at":null,"days_open":35,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":35},"description":"United States - Remote\nRole Overview\nNasuni is seeking a Senior Security Operations Analyst to strengthen enterprise security operations across cloud, identity, endpoint, email, and collaboration environments. You will independently lead complex investigations, improve detection quality, mature SOC processes, and turn operational data into measurable gains in detection, containment, and response.\nThis role is for an experienced, hands-on SOC practitioner who has owned incidents and operational improvements in a distributed enterprise or SaaS environment. It is not an entry-level, GRC-only, or advisory-only position.\nLevel & Scope Definition\nYou will operate as a senior individual contributor with authority to make incident triage, severity, and escalation decisions within Nasuni’s response framework. You will own cases from signal through containment, remediation coordination, documentation, and post-incident learning; improve detections, playbooks, dashboards, and procedures; and mentor other analysts. You will influence Security, IT, Cloud, Identity, Engineering, and external providers, while enterprise strategy, company-wide policy, and people management remain outside this role.\nResponsibilities\nLead advanced investigations across endpoint, identity, cloud, email, SaaS, and network telemetry; determine scope, impact, root cause, containment, and follow-up actions.\nOperate and improve an enterprise security stack that includes Sumo Logic Cloud SIEM, Wiz, Rapid7 InsightIDR and InsightVM/Exposure Command, and Darktrace / EMAIL, or comparable platforms.\nBuild and tune queries, correlation rules, detections, enrichments, threat hunts, dashboards, case workflows, and SOAR playbooks; improve MITRE ATT&CK coverage and reduce false positives.\nOwn the accuracy, reporting, and continuous improvement of SOC measures such as MTTD, MTTC, and MTTR, along with alert fidelity, aged backlog, escalation quality, and SLA attainment.\nImprove SOC runbooks, incident procedures, severity criteria, escalation paths, analyst handoffs, case documentation, and post-incident review practices.\nPartner with system owners to prioritize vulnerability and cloud-risk remediation using business context, exploitability, asset criticality, and compensating controls.\nUse Nasuni-approved AI capabilities to accelerate log analysis, alert enrichment, case summarization, query development, and playbook drafting while validating outputs and protecting sensitive data.\nParticipate in the global on-call rotation and mentor analysts through case reviews, threat scenarios, and practical feedback.\nExpected Outcomes\nReliable SOC metrics with documented, measurable improvement actions.\nConsistent high-severity response, including timely escalation, containment, remediation follow-through, and post-incident learning.\nStronger detection coverage, alert fidelity, telemetry health, and reusable analyst playbooks.\nMust-Have Qualifications\n5+ years of security experience, including 3+ years in an enterprise SOC, incident response, or detection-and-response function.\nDemonstrated ownership of complex or high-severity investigations from triage through containment and remediation coordination.\nStrong hands-on SIEM experience, including search, correlation, rule tuning, log onboarding, dashboards, and investigation workflows.\nExperience improving SOC processes and using operational metrics to identify bottlenecks and validate improvement.\nWorking knowledge across cloud security, EDR, identity, vulnerability management, and email security.\nClear written and verbal communication with technical and business stakeholders.\nPreferred Qualifications\nDirect hands-on experience with two or more of Sumo Logic, Wiz, Rapid7 InsightIDR/InsightVM, and Darktrace / EMAIL.\nDetection engineering, SOAR, threat hunting, PowerShell or Python, multi-cloud monitoring, or MDR coordination experience.\nResponsible use of AI-assisted security or observability workflows with clear validation and data-handling controls.\nIdeal Qualifications\nMeasurably improved MTTD, MTTC, MTTR, false-positive rates, backlog health, or response SLA performance.\nLed post-incident reviews, established reusable SOC operating practices, or coached other analysts.\nExperience Guidelines\nTypically 5-9 years of relevant experience, with evidence of enterprise-scale ownership weighted more heavily than tenure alone.\nWhy work at Nasuni? \nAs part of our commitment to your well-being, we are pleased to offer comprehensive benefits packages to employees across the US. Benefits packages generally include: \nBest in class employee onboarding and training\n\"Take What You Need” paid time off policy\nComprehensive health, dental and vision plans\nCompany-paid life and disability insurance\n401(k) and Roth IRA retirement plan\nGenerous employee referral bonuses\nFlexible remote work policy\n10 Paid Holidays\nWide array of wellbeing offerings\nPre-tax savings accounts with company contributions\nGreat team culture and social activities\nCollaborative workspaces\nFree on-site fitness centers and stocked kitchens in select office locations\nProfessional development resources\nCompensation Transparency: \nIn accordance with U.S. pay transparency laws, Nasuni is committed to providing visibility into compensation for all U.S.-based roles. Click HERE to view our compensation ranges by job grade. Actual compensation will be based on a variety of factors, including a candidate’s experience, skills, education, and work location.\nTo all recruitment agencies: Nasuni does not accept agency resumes. Please do not forward resumes to our job boards, Nasuni employees or any other company location. Nasuni is not responsible for any fees related to unsolicited resumes.\nNasuni is an equal opportunity employer. The equal employment opportunity policy at Nasuni protects employees and job applicants from discrimination on the bases of race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors. These protections extend to all management practices and decisions, including recruitment and hiring practices, appraisal systems, promotions, and training and career development programs. \n\nThis privacy notice relates to information collected (whether online or offline) by Nasuni Corporation and our corporate affiliates (collectively, “Nasuni”) from or about you in your capacity as a Nasuni employee, independent contractor/service provider or as an applicant for an employment or contractor relationship with Nasuni.","description_format":"text","description_chars":6673,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cloud Storage & File Sharing","Backup & Disaster Recovery"],"lifecycle":[{"event":"open","at":"2026-09-21T08:58:01Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 1","filings_12m":1,"filings_prev_12m":10,"green_card_filings_12m":0,"median_offered_wage_usd":177500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":19,"band":"cold","label":"Long shot","p_open":1,"p_active":0.255,"p_room":0.75,"age_days":35,"expected_fill_days":40,"reasons":["conf:1","stale_co","velocity","win:late"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/nasuni-senior-security-operations-analyst","json_url":"https://alion.io/job/nasuni-senior-security-operations-analyst.json","meta":{"generated_at":"2026-10-17T11:21:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14736,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3836},"rest":"https://alion.io/mcp/rest/get_company?id=3836"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnasuni-senior-security-operations-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnasuni-senior-security-operations-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnasuni-senior-security-operations-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/nasuni-senior-security-operations-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnasuni-senior-security-operations-analyst"}]}