Security Analyst II

Working hours

6:00 AM to 6:00 PM (12-hour shift) every other Wednesday with a set Thursday through Saturday.

Location requirements

100% remote, USA – work from home

Who you are:

The ideal candidate will be comfortable working in a fast-paced, multi-tenant MSP environment, with strong threat detection, incident response, and client-facing communication skills.

What you will be doing:

• Monitor and analyze security events across multiple customer environments using Rapid7 InsightIDR and SIEM/SOAR platforms.
• Investigate security incidents including phishing, malware, lateral movement, and privilege escalation attempts.
• Respond to alerts and escalations in real-time, and execute playbooks for containment, eradication, and recovery.
• Tune detection rules, correlation logic, and dashboards in Rapid7 to reduce false positives and improve visibility.
• Use InsightVM to correlate vulnerabilities with threat intelligence and risk posture.
• Document incident reports and ensure clear, professional communication with client stakeholders.
• Collaborate with NOC, Infrastructure, and Application Support teams to ensure secure operations.
• Provide recommendations for remediation and threat mitigation.
• Support compliance reporting and evidence collection for customer audits (e.g., HIPAA, PCI, ISO).
• Contribute to continuous improvement of SOC processes and runbooks

Skills and experience you have:

• 2–4+ years of experience in cybersecurity, preferably in a SOC or MSP environment.
• Strong experience with Rapid7 InsightIDR, InsightVM, and understanding of the full Rapid7 ecosystem.
• Familiarity with SIEM, SOAR, EDR, vulnerability scanners, and firewalls.
• Deep knowledge of common attack techniques (MITRE ATT&CK, phishing, ransomware, etc.).
• Strong working knowledge of Windows, Linux, and cloud environments (AWS, Azure).
• Scripting or automation experience (PowerShell, Python, or bash) is a plus.
• Excellent analytical thinking, documentation, and incident handling skills.
• Experience with ticketing systems (e.g., ConnectWise, ServiceNow) and collaboration tools (e.g., Slack, Teams).
• Client-facing experience (status updates, RCA calls, etc.).
• Experience with multi-tenant SIEM/SOC environments.
• Understanding of regulatory compliance frameworks (NIST, SOC 2, ISO 27001, etc.).
• Interest in growing into a Threat Hunter or Security Engineer role.

Certifications (preferred but not required):

• Rapid7 InsightIDR Certified Specialist
• Security+, CySA+, GCIA, GCIH, or CEH
• AWS Certified Security or Azure Security Engineer

Pay and Benefits 

This is a full-time position located in the United States and performed remotely with no travel.   

Estimated Starting Salary/Wage Range: $31.00 to $36.00 hourly, less applicable withholdings and deductions, paid on a semi-monthly basis (The actual salary offered may vary based on relevant factors as determined in the Company’s discretion, which may include experience, qualifications, tenure [for existing employees] skill set, availability of qualified candidates, geographic location, certifications held, and other criteria deemed pertinent to the particular role.  Note that the majority of individuals in the position will fall in the low to mid-level of this scale; the upper end of this pay scale is offered only in exceptional circumstances and/or for unusually qualified candidates.)      

In addition to legally-required benefits, NexusTek offers a generous benefit package to eligible full-time employees, which currently includes the following:  

• Four weeks of annual accrued PTO   
• Seven paid national holidays  
• Medical, dental, vision options   
• Company-paid life insurance, short and long-term disability   
• Voluntary benefits such as critical illness and accident   
• Voluntary Legal Shield and identity theft protection    
• Discretionary annual 401k match plan  
• Generous employee referral bonus plan  
• Employee Assistance Program  
• Access to over 90,000+ courses in ADP My Learning    
• StandOut employee engagement tools  
• Eligible to apply fo