SOC Analyst - Vehicle & API Security

Upstream Security Inc.
United States
19 days ago
Apply on www.builtincolorado.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
3 years minimum
Compensation
$136,000.0 - $245,000.0
Working hours
Regular working hours
Languages
English

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence User Authentication Big Data Burp Suite Cloud Computing Security Cyber Security Data Infrastructure Data Visualization Intrusion Detection and Prevention Mobile Application Software Python (Programming Language)
+18 more
Machine Learning Microsoft Office OAuth Open Source Intelligence Security Information and Event Management SQL Databases TypeScript Scripting ReactJS Large Language Models Software Security Cyber Threat Analysis Backend Agentic-AI Cybercrime Front End Software Development Api Gateway Security Orchestration, Automation & Response

Job description

Be an Early Applicant Remote or Hybrid Hiring Remotely in USA Senior level Remote or Hybrid Hiring Remotely in USA Senior level Investigate and respond to connected-vehicle and API security incidents, lead complex investigations, conduct threat hunting, and improve detection capabilities. Deploy and maintain agentic AI workflows for SOC operations, tune detection logic and machine-learning models, develop playbooks, prepare reports, advise customers, mentor analysts, and track SOC performance against SLAs and KPIs. The summary above was generated by AI, As a senior analyst, you will serve as a security focal point for customers, lead complex investigations, improve detection capabilities, and help deploy and maintain agentic AI workflows used across SOC operations., * Monitor, investigate, and respond to vehicle and API security alerts.

  • Lead complex investigations, assess impact, identify root causes, and provide actionable mitigation recommendations.
  • Analyze suspicious vehicle behavior, API activity, authentication events, and mobility-related telemetry.
  • Investigate API threats including authorization abuse, credential attacks, injection, data exposure, automation, and business-logic abuse.
  • Deploy, configure, test, and maintain agentic AI workflows supporting alert triage, investigations, threat hunting, reporting, and response.
  • Monitor the accuracy, reliability, and operational performance of AI-driven workflows and continuously improve their prompts, tools, guardrails, and decision logic.
  • Conduct proactive threat hunting and OSINT investigations to identify emerging threats and attack patterns.
  • Develop and maintain investigation playbooks, operational procedures, and response processes.
  • Tune detection logic, behavioral profiles, and machine-learning models to improve detection quality and reduce false positives.
  • Produce clear investigation reports, incident updates, dashboards, and executive-level summaries.
  • Act as a trusted security advisor to customers during investigations, workshops, and business reviews.
  • Mentor analysts and promote consistent investigation quality across the SOC.
  • Track operational performance against SLAs, quality standards, and SOC KPIs.
  • Collaborate with threat intelligence, research, product, engineering, and customer-facing teams to improve Upstream’s security capabilities., Build a high-performance frontend data platform for exploring and analyzing hardware telemetry. Develop React and TypeScript applications, interactive time-series visualizations, data visualization plugins, complex application state management, and LLM-assisted analysis workflows. Collaborate directly with hardware engineers and customers to define interfaces, prototype workflows, demonstrate features, and incorporate feedback into product development.

Requirements

  • 3+ years of experience in SOC operations, incident response, threat hunting, or security investigations.
  • Previous customer-facing analyst role, preferably within an MSSP, consulting, or professional services context, preferably in English
  • Strong practical understanding of APIs, including REST, authentication, authorization, OAuth, and JWT.
  • Hands-on API security experience with technologies such as WAFs, API gateways, API security platforms, SIEM, Burp Suite, or similar tools.
  • Experience investigating common API threats, including account abuse, authorization flaws, injection, data exposure, and business-logic attacks.
  • Experience with SIEM, SOAR, XDR, security automation, and large-scale data analysis.
  • Experience deploying or maintaining automation, AI-assisted, or agentic AI workflows.
  • Scripting experience, preferably with Python or SQL.
  • Ability to lead complex investigations and operate effectively in high-pressure environments.
  • Experience in automotive, mobility, IoT, cloud security, mobile application security, or managed security services is preferred.

Benefits & conditions

136K-245K Annually Senior level 136K-245K Annually Senior level Blockchain * eCommerce * Fintech * Payments * Software * Financial Services * Cryptocurrency Develop and manage Square’s always-on B2B content engine across social, thought leadership, customer stories, partner content, and industry narratives. Build content calendars, formats, briefs, campaigns, and AI-assisted workflows; collaborate with marketing, sales, creative, communications, and external partners; manage production through launch; and use performance insights to optimize content and distribution. Top Skills: Ai ToolsLinkedInSocial Media Platforms Block, 185K-327K Annually Senior level 185K-327K Annually Senior level Blockchain * eCommerce * Fintech * Payments * Software * Financial Services * Cryptocurrency Build and maintain network edge security systems that improve API security posture, detect and mitigate abusive traffic, and respond to emerging threats. Responsibilities include developing streaming analytics pipelines, integrating CDN and security vendors, managing production systems, contributing to machine learning models, and implementing AI-driven traffic classification. The role requires software or security engineering experience, expertise in Java, Kotlin, TypeScript, Python, SQL, Spark, CDN platforms, and AWS. Top Skills: AWSCdnCloudflareDatabricksDatadogDynamoDBFastlyJavaKafkaKotlinMySQLPysparkPythonSnowflakeSparkSQLTerraformTypescriptWaf

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

  • Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
  • Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
  • Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
  • Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute

About the company

Upstream Security protects connected vehicles, mobility services, and their supporting digital ecosystems. Our AI-powered cybersecurity platform combines vehicle security, API security, threat intelligence, detection and response, and managed SOC services.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.builtincolorado.com
Prepare application

Good distractions

Loading talks and stories from around this role…