Security Analyst - Tier 2

Overview

7AI's AI agents take on a lot of the SOC's non-human work, but every agent investigation still needs a human who can verify it, prove the threat was real, and answer for it when a customer asks. As a Security Analyst, you'll be that person: validating and extending the work of 7AI's AI agents, investigating the malicious activity they catch, and hunting for emerging threats in customer environments. You'll work directly with customers, from SOC analysts to CISOs, to triage alerts and resolve incidents, and you'll help shape how this team operates as we grow it.

What You'll Do

• Analyze and validate AI Agent investigations for accuracy, completeness, and risk
• Correlate data across cloud, endpoint, identity, and network sources to build the full picture of an attack
• Investigate the malicious activity 7AI's Agents responded to, and assess the risk it prevented for customers
• Use 7AI's Agents to hunt for emerging threats in customer environments, feeding what you find back into product detections
• Help customers with threat monitoring, triage, and alert prioritization, especially during active incidents
• Review logs and findings to proactively spot threats and anomalies in customer environments
• Communicate with customers across a range of technical backgrounds, from SOC analysts to CISOs
• Help build repeatable processes as we scale this team, without sacrificing quality
• Work with Engineering and Product, sharing customer feedback and helping tune the AI platform
• Stay current on emerging threats, vulnerabilities, and attack techniques, including AI-driven attacks

What We're Looking for

• 2+ years of experience in security operations
• Comfortable with on-call weekend shifts as needed
• Hands-on experience investigating alerts across endpoint, network, identity, email, and cloud sources, including intrusion detection systems and endpoint protection platforms
• Strong understanding of security monitoring tools such as XDR, SIEM, IDS/IPS, and IDP
• Familiarity with log and telemetry concepts
• Working knowledge of common attack techniques and frameworks like MITRE ATT&CK, and incident triage methodologies
• Strong analytical and problem-solving skills, with the ability to verify AI-driven analysis and make independent security decisions
• Experience querying SIEM data with SPL, KQL, FQL, or SQL
• Familiarity with malware analysis methods
• Strong interpersonal skills with a service-oriented mindset
• A track record of collaborating well in a team

Nice to Have

• Prior experience in a managed services environment
• Incident handling experience
• Relevant certifications: Security+, GSEC, or GCIH