Security Analyst II

• Monitor and analyze security events across multiple customer environments using Rapid7 InsightIDR and SIEM/SOAR platforms.
• Investigate security incidents including phishing, malware, lateral movement, and privilege escalation attempts.
• Respond to alerts and escalations in real-time, and execute playbooks for containment, eradication, and recovery.
• Tune detection rules, correlation logic, and dashboards in Rapid7 to reduce false positives and improve visibility.
• Use InsightVM to correlate vulnerabilities with threat intelligence and risk posture.
• Document incident reports and ensure clear, professional communication with client stakeholders.
• Collaborate with NOC, Infrastructure, and Application Support teams to ensure secure operations.
• Provide recommendations for remediation and threat mitigation.
• Support compliance reporting and evidence collection for customer audits (e.g., HIPAA, PCI, ISO).
• Contribute to continuous improvement of SOC processes and runbooks

The ideal candidate will be comfortable working in a fast-paced, multi-tenant MSP environment, with strong threat detection, incident response, and client-facing communication skills., * 2-4+ years of experience in cybersecurity, preferably in a SOC or MSP environment.

• Strong experience with Rapid7 InsightIDR, InsightVM, and understanding of the full Rapid7 ecosystem.
• Familiarity with SIEM, SOAR, EDR, vulnerability scanners, and firewalls.
• Deep knowledge of common attack techniques (MITRE ATT&CK, phishing, ransomware, etc.).
• Strong working knowledge of Windows, Linux, and cloud environments (AWS, Azure).
• Scripting or automation experience (PowerShell, Python, or bash) is a plus.
• Excellent analytical thinking, documentation, and incident handling skills.
• Experience with ticketing systems (e.g., ConnectWise, ServiceNow) and collaboration tools (e.g., Slack, Teams).
• Client-facing experience (status updates, RCA calls, etc.).
• Experience with multi-tenant SIEM/SOC environments.
• Understanding of regulatory compliance frameworks (NIST, SOC 2, ISO 27001, etc.).
• Interest in growing into a Threat Hunter or Security Engineer role.

Certifications (preferred but not required):

• Rapid7 InsightIDR Certified Specialist
• Security+, CySA+, GCIA, GCIH, or CEH
• AWS Certified Security or Azure Security Engineer

Pay and Benefits

This is a full-time position located in the United States and performed remotely with no travel.

3.5 Remote $31 - $36 an hour - Full-time, Pulled from the full job description Referral program Health insurance 401(k) matching Paid time off Dental insurance Life insurance Employee assistance program, Estimated Starting Salary/Wage Range: $31.00 to $36.00 hourly, less applicable withholdings and deductions, paid on a semi-monthly basis (The actual salary offered may vary based on relevant factors as determined in the Company’s discretion, which may include experience, qualifications, tenure [for existing employees] skill set, availability of qualified candidates, geographic location, certifications held, and other criteria deemed pertinent to the particular role. Note that the majority of individuals in the position will fall in the low to mid-level of this scale; the upper end of this pay scale is offered only in exceptional circumstances and/or for unusually qualified candidates.)

In addition to legally-required benefits, NexusTek offers a generous benefit package to eligible full-time employees, which currently includes the following:

• Four weeks of annual accrued PTO
• Seven paid national holidays
• Medical, dental, vision options
• Company-paid life insurance, short and long-term disability
• Voluntary benefits such as critical illness and accident
• Voluntary Legal Shield and identity theft protection
• Discretionary annual 401k match plan
• Generous employee referral bonus plan
• Employee Assistance Program
• Access to over 90,000+ courses in ADP My Learning
• StandOut employee engagement tools
• Eligible to apply for a Pluralsight license
• Eligible to apply for NexusTek Technical Academy or Leadership Academy
• We’re happy to provide our full benefits guide at any point in the process!

We’re happy to provide our comprehensive benefits guide. Each benefit is subject to eligibility requirements as specified in plan documents, and the Company reserves the right to modify the benefits it offers from time to time.