At some point in any digital investigation, an analyst needs to step beyond the perimeter and engage threats at the source.  Authentic8 Silo places any type of digital analyst in region-specific, multi-application workspaces, securely and anonymously, anywhere across the globe.  Target content can be captured, analyzed, and transformed in order to derive intelligence and support investigation requirements.  All delivered in a cloud-native, multi-tenant platform.

Compliance officers, mission managers, and administrators have their own specific audit and oversight requirements; to meet these needs, Silo also ensures compliance and appropriate use through class-leading policy enforcement and audit logging.  

Silo transforms how more than 750 of the world's most sophisticated organizations, from domestic and foreign government agencies to commercial entities across all sectors conduct their digital investigations.

Key Responsibilities:

• Monitor, investigate, and respond to security detections across the SIEM, driving alerts to resolution.
• Develop, tune, and maintain SIEM use cases and correlation rules to improve detection coverage.
• Build and deliver operational reports and dashboards from available SIEM log source data.
• Identify, assess, and escalate high-impact events from multiple data sources to senior staff and stakeholders following established procedures.
• Intake, triage, and respond to security reports (phishing, suspicious activity, etc.), escalating as necessary.
• Own the lifecycle of security tickets in the case management system, ensuring accurate documentation, timely updates, and proper closure.
• Support proactive investigations and threat hunting as directed.
• Provide day-to-day SOC operational support and coverage, communicating findings and relevant event details clearly to team members and stakeholders.
• Draft and update SOC and Authentic8 documentation, runbooks, standards, and procedures.
• Work with system and application owners to remediate discovered security vulnerabilities.
• Ability to collaborate effectively in a dynamic team environment.

Requirements:

• 2+ years of experience in security operations, incident response, or a related security discipline (SOC analyst experience strongly preferred).
• Hands-on SIEM experience - investigating alerts, building and tuning use cases and correlation rules, and generating reports (e.g., Splunk, Microsoft Sentinel, Elastic, QRadar, or similar).
• Demonstrated experience with phishing analysis and email security response.
• Proven ability to triage and escalate security incidents independently using documented playbooks.
• Solid understanding of networking concepts (TCP/IP, DNS, HTTP/S) and operating systems (Windows and Linux).
• Experience with case/ticket management and clear, audit-ready documentation.
• Strong written and verbal communication skills, with the ability to convey findings to both technical and non-technical audiences.
• Ability to work independently with minimal oversight in a structured operations environment.
• Must be able to pass a background investigation in accordance with company policy.
• Must be a US Citizen

Strongly Desired:

• Security certifications such as CySA+, GCIH, GCIA, Security+, or Blue Team Level 1 (BTL1).
• Experience with EDR platforms, IDS/IPS, and vulnerability scanners.
• Scripting ability for automation and enrichment (Python, PowerShell, Bash).
• Experience with SOAR platforms or automated response workflows.
• Exposure to threat intelligence and IOC-driven threat hunting methodologies.

Salary:

Hourly rate: $65.00-$75.00/hr 
Part time 25 hours a week
Individual pay will be determined by location and additional factors, including job related skills, experience, and relevant education or training.