← all jobs

SOC Analyst- Remote

Work from home Full-time role Hiring

Position Overview Looking for one to three SOC Analysts to provide additional "eyes on glass" for its Security Operations team. The resources will focus on incident response, alert triage and investigation at Tier 1-2, escalating to internal security team as appropriate. Alerts flow from the Panther SIEM into a Jira queue, and an AI SOC capability performs first-level triage before alerts reach the analysts. The role is fully remote and works closely with internal teams, which is why standard business hours are preferred.

Key Responsibilities

Monitor and work security alerts routed from the Panther SIEM into the Jira queue. Perform Tier 1-2 triage and investigation of alerts, including those that have passed through AI SOC first-level triage. Support incident response activities and provide additional monitoring capacity for the Security Operations team. Escalate confirmed or suspicious incidents to OnePay's internal security team with clear investigation notes. Collaborate with other OnePay teams during core business hours, and support offset or weekend coverage when requested. Technology Environment SIEM and ticketing Panther SIEM, Jira (alert queue) Cloud and identity AWS, Okta Security tooling Wiz, CrowdStrike, Daylight, Sockit Automation AI SOC platform handling first-level triage

Qualifications

Required Hands-on experience as a SOC Analyst performing Tier 1-2 alert triage, investigation and escalation. Working knowledge of incident response processes in a cloud-native environment. Experience with a SIEM platform and ticket-driven alert workflows (Panther and Jira preferred). Familiarity with AWS security concepts and Okta identity events. Ability to work independently in a fully remote setting and communicate findings clearly to an internal security team. Preferred Experience with Wiz, CrowdStrike, Daylight or Socket-type tooling. Prior work in FinTech, payments or other regulated financial services environments. Experience working alongside AI-assisted or automated SOC triage. Ability to work Pacific/West Coast hours.

More open positions