Supply Chimp

Security Operations

• Independently execute and support day-to-day security operations
• Monitor and triage security alerts and investigate suspected security events
• Assess scope, impact, priority, and appropriate next steps
• Document alert dispositions, findings, decisions, and actions
• Escalate confirmed or suspected security events with relevant context
• Coordinate approved containment, recovery, and follow-up activities during defined working hours
• Execute recurring security and compliance reviews across assigned controls and frameworks
• Collect, review, organize, and maintain supporting evidence
• Identify control gaps, missing evidence, control drift, or potential findings
• Track findings and remediation commitments through completion or escalation
• Maintain security plans, compliance records, assessment artifacts, and documentation
• Perform vulnerability, endpoint, configuration, backup, access, and security-tool reviews
• Review vulnerability findings and verify remediation status
• Evaluate access, authentication, permissions, shared/service accounts, and least-privilege controls
• Conduct or support security risk assessments for systems, applications, vendors, projects, integrations, and material changes
• Maintain risk and remediation records and follow up on open items
• Create and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance
• Keep documentation aligned with current systems and processes
• Design, configure, execute, and evaluate approved phishing simulations and security testing
• Identify gaps and recommend practical improvements
• Collaborate with IT, Engineering, and other internal teams on security activities, findings, remediation, and user-facing security needs

SOC Analyst Level 2