Security Operations Analyst L2 – SOC

Supply Chimp

. Independently execute and support day-to-day security operations .

Posted 10/21/2026full-timeRemote • ColombiaMid-LevelSenior💰 COP 6,500,000 - COP 8,500,000 per monthWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations, including vulnerability management, incident response, and compliance activities. Proficient in using security monitoring tools and frameworks such as CMMC and NIST SP 800-171 to ensure effective security practices and documentation.

Highest-signal resume keywords

Security Operations ExperienceVulnerability ManagementSIEM Tools ProficiencyMicrosoft Entra IDCMMC Framework Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security MonitoringIncident ResponseVulnerability AssessmentAccess ControlDocumentation ManagementSecurity Compliance ReviewsPhishing SimulationConfiguration ReviewAlert TriageEndpoint Security

Soft Skills

Strong OrganizationPrioritizationWritten CommunicationProblem-SolvingJudgment

Tools & Technologies

SIEM ToolsMicrosoft IntuneConditional Access PoliciesSecurity ToolsAssessment Tools

Certifications & Qualifications

CMMC CertificationNIST SP 800-171 CertificationPCI DSS Certification

Industry Keywords

CybersecurityInformation SecuritySecurity OperationsCompliance EvidenceSecurity Frameworks

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Independently execute and support day-to-day security operations
Monitor and triage security alerts and investigate suspected security events
Assess scope, impact, priority, and appropriate next steps
Document alert dispositions, findings, decisions, and actions
Escalate confirmed or suspected security events with relevant context
Coordinate approved containment, recovery, and follow-up activities during defined working hours
Execute recurring security and compliance reviews across assigned controls and frameworks
Collect, review, organize, and maintain compliance evidence
Identify control gaps, missing evidence, control drift, and potential findings
Track findings and remediation commitments through completion or escalation
Maintain security plans, compliance records, assessment artifacts, and documentation
Perform vulnerability, endpoint, configuration, backup, access, and security-tool reviews
Review vulnerability findings and verify remediation status
Evaluate access, authentication, permissions, shared accounts, service accounts, and least-privilege controls
Conduct or support security risk assessments for systems, applications, vendors, projects, integrations, and material changes
Maintain risk and remediation records and follow up on open items
Create and maintain security procedures, runbooks, checklists, assessment tools, and triage guidance
Keep security documentation aligned with current systems and processes
Design, configure, execute, and evaluate phishing simulations and related security testing
Identify gaps and recommend improvements to monitoring, processes, documentation, and controls
Collaborate with IT, Engineering, and internal teams on security activities, findings, remediation, and user-facing security needs
Contribute practical operational input as security tools, processes, and workflows mature

Requirements

What you’ll need

3+ years of relevant experience in security operations, information security, cybersecurity, or a closely related role
Hands-on experience with security monitoring and SIEM tools, including alert triage, investigation, search or query capabilities, and documenting alert dispositions
Hands-on experience with provisioning devices
Hands-on experience with Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls is strongly preferred
Strong understanding of vulnerability management, access control, endpoint security, logging, and incident response
Experience performing recurring security or compliance control activities and producing clear, review-ready evidence and documentation
CMMC, NIST SP 800-171, PCI DSS, or comparable framework experience and relevant security certifications are preferred
Strong organization, prioritization, written communication, and follow-through
Ability to manage recurring responsibilities and competing deadlines independently
Demonstrated problem-solving and sound judgment with incomplete information or unclear conditions
Professional proficiency in English, written and spoken
Ability to work during core business hours of 7:00 AM to 4:00 PM PST
Excitement about remote work and collaborating across a distributed team
Application and resume must be submitted in English

Benefits

Comp & perks

15 paid vacation days per year
Paid sick leave with medical certification
Other applicable statutory paid leaves
US Paid Holidays
Colombian statutory benefits
Social security contributions
Prima de Servicios (13th month pay)
Cesantías
Holiday Pay Rate and Overtime Pay
Surprise treats, including coffee
Company shout-outs and celebrations
Virtual parties and team moments throughout the year