> Markdown version of [/jobs/ext/2385645-security-analyst-ii](https://www.wearedevelopers.com/jobs/ext/2385645-security-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst II

- **Company:** Nexus
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Salary:** $64,480.0 - $74,880.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Bash Shell, Collaborative Software, Cyber Security, Linux, Issue Tracking Systems, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Phishing, Runbook, Security Information and Event Management, Scripting, Cloud Platform System, Mitre Att&ck, Malware, Firewalls (Computer Science), Security Orchestration, Automation & Response, Servicenow, Vulnerability Analysis
- **Published:** August 5, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=ece86446e5fc39aa

## About the Role

The ideal candidate will be comfortable working in a fast-paced, multi-tenant MSP environment, with strong threat detection, incident response, and client-facing communication skills., * 2-4+ years of experience in cybersecurity, preferably in a SOC or MSP environment.

 * Strong experience with Rapid7 InsightIDR, InsightVM, and understanding of the full Rapid7 ecosystem.
 * Familiarity with SIEM, SOAR, EDR, vulnerability scanners, and firewalls.
 * Deep knowledge of common attack techniques (MITRE ATT&CK, phishing, ransomware, etc.).
 * Strong working knowledge of Windows, Linux, and cloud environments (AWS, Azure).
 * Scripting or automation experience (PowerShell, Python, or bash) is a plus.
 * Excellent analytical thinking, documentation, and incident handling skills.
 * Experience with ticketing systems (e.g., ConnectWise, ServiceNow) and collaboration tools (e.g., Slack, Teams).
 * Client-facing experience (status updates, RCA calls, etc.).
 * Experience with multi-tenant SIEM/SOC environments.
 * Understanding of regulatory compliance frameworks (NIST, SOC 2, ISO 27001, etc.).
 * Interest in growing into a Threat Hunter or Security Engineer role.

Certifications (preferred but not required):

 * Rapid7 InsightIDR Certified Specialist
 * Security+, CySA+, GCIA, GCIH, or CEH
 * AWS Certified Security or Azure Security Engineer

Pay and Benefits

This is a full-time position located in the United States and performed remotely with no travel.

## Description

* Monitor and analyze security events across multiple customer environments using Rapid7 InsightIDR and SIEM/SOAR platforms.
 * Investigate security incidents including phishing, malware, lateral movement, and privilege escalation attempts.
 * Respond to alerts and escalations in real-time, and execute playbooks for containment, eradication, and recovery.
 * Tune detection rules, correlation logic, and dashboards in Rapid7 to reduce false positives and improve visibility.
 * Use InsightVM to correlate vulnerabilities with threat intelligence and risk posture.
 * Document incident reports and ensure clear, professional communication with client stakeholders.
 * Collaborate with NOC, Infrastructure, and Application Support teams to ensure secure operations.
 * Provide recommendations for remediation and threat mitigation.
 * Support compliance reporting and evidence collection for customer audits (e.g., HIPAA, PCI, ISO).
 * Contribute to continuous improvement of SOC processes and runbooks


## Related Videos

- [The Developer Workstation Blind Spot: Why Your Security Stack Can't See What Matters Most](https://www.wearedevelopers.com/videos/100254-the-developer-workstation-blind-spot-why-your-security-stack-can-t-see-what-matters-most)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)
- [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [The Best Job Search Websites of 2025](https://www.wearedevelopers.com/magazine/368-the-best-job-search-websites-of-2025)