Security Operations Analyst L2 – SOC

• Independently execute and support day-to-day security operations
• Monitor and triage security alerts and investigate suspected security events
• Assess scope, impact, priority, and appropriate next steps
• Document alert dispositions, findings, decisions, and actions
• Escalate confirmed or suspected security events with relevant context
• Coordinate approved containment, recovery, and follow-up activities during defined working hours
• Execute recurring security and compliance reviews across assigned controls and frameworks
• Collect, review, organize, and maintain compliance evidence
• Identify control gaps, missing evidence, control drift, and potential findings
• Track findings and remediation commitments through completion or escalation
• Maintain security plans, compliance records, assessment artifacts, and documentation
• Perform vulnerability, endpoint, configuration, backup, access, and security-tool reviews
• Review vulnerability findings and verify remediation status
• Evaluate access, authentication, permissions, shared accounts, service accounts, and least-privilege controls
• Conduct or support security risk assessments for systems, applications, vendors, projects, integrations, and material changes
• Maintain risk and remediation records and follow up on open items
• Create and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance
• Keep security documentation aligned with current systems and processes
• Design, configure, execute, and evaluate phishing simulations and related security testing
• Identify gaps and recommend improvements to monitoring, processes, documentation, and controls
• Collaborate with IT, Engineering, and internal teams on security activities, findings, remediation, and user-facing security needs
• Contribute practical operational input as security tools, processes, and workflows mature

• 3+ years of relevant experience in security operations, information security, cybersecurity, or a closely related role
• Hands-on experience with security monitoring and SIEM tools, including alert triage, investigation, search or query capabilities, and documenting alert dispositions
• Hands-on experience with provisioning devices
• Hands-on experience with Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls is strongly preferred
• Strong understanding of vulnerability management, access control, endpoint security, logging, and incident response
• Experience performing recurring security or compliance control activities and producing clear, review-ready evidence and documentation
• CMMC, NIST SP 800-171, PCI DSS, or comparable framework experience and relevant security certifications are preferred
• Strong organization, prioritization, written communication, and follow-through
• Ability to manage recurring responsibilities and competing deadlines independently
• Demonstrated problem-solving and sound judgment with incomplete information or unclear conditions
• Professional proficiency in English, written and spoken
• Ability to work during core business hours of 7:00 AM to 4:00 PM PST
• Excitement about remote work and collaborating across a distributed team
• Application and resume must be submitted in English

• 15 paid vacation days per year
• Paid sick leave with medical certification
• Other applicable statutory paid leaves
• US Paid Holidays
• Colombian statutory benefits
• Social security contributions
• Prima de Servicios (13th month pay)
• Cesantías
• Holiday Pay Rate and Overtime Pay
• Surprise treats, including coffee
• Company shout-outs and celebrations
• Virtual parties and team moments throughout the year