Security Operations Analyst

ABOUT THE ROLE”You’ll be the first line of defense, turning raw alerts into real threat intelligence for a platform that keeps thousands of trucking and logistics fleets moving.”As a Security Operations Analyst on Mastery’s Information Security team, you’ll monitor, triage, and investigate security alerts across our enterprise and Azure-native infrastructure. You’ll work alongside our Security Operations Engineer and Team Lead to protect MasterMind, our transportation management platform, and the infrastructure it runs on from threats and attackers-following established playbooks to contain and escalate real threats, and building the pattern-recognition instincts that come from doing this work every day.This role is ideal for a curious, detail-oriented analyst who’s already spent time in a SOC or similarly alert-driven environment and wants to keep sharpening their craft. You don’t need to walk in knowing everything - but you should already know what it feels like to work a queue under pressure.WHAT YOU’LL OWNAlert Triage & InvestigationMonitor and investigate: actively work security alerts across Microsoft Sentinel and Mastery’s Azure environment, distinguishing real threats from noise.Follow the playbook: execute documented triage and escalation procedures, taking containment or remediation action when appropriate.Document clearly: write investigation notes that are clear and defensible enough for anyone on the team, an auditor, or a customer to follow.Threat Awareness & EscalationRecognize patterns: apply Cyber Kill Chain and MITRE ATT&CK concepts to identify what an alert is actually telling you.Escalate what matters: know when and how to hand off to the Security Operations Engineer or Team Lead, with the context they need to act fast.Team ContributionSupport detection tuning: flag false positives, missed detections, and visibility gaps back to the team that builds and tunes the rules.Grow with the team: take on stretch assignments - basic scripting, log analysis, evidence collection - that build toward more senior SecOps work.WHAT YOU BRINGExperience2+ years of experience in security operations, IT, or a related alert-driven, shift-based role - not a recent graduate, but not necessarily a career SOC veteran either.Familiarity with SIEM platforms (Microsoft Sentinel or comparable) from hands-on work or coursework.Working knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.Skills & ApproachEager and coachable: genuinely wants to grow technically and takes feedback well.Clear communicator: can write and speak about technical findings in a way both teammates and non-technical stakeholders can follow.Even-keeled under pressure: stays methodical when the queue is full or an alert requires immediate action.Nice to HaveBasic scripting exposure (Python or PowerShell).Security+, SC-200, or a comparable entry-level certification.Exposure to Azure or another major cloud platform.Experience with case management or ticketing tools (Jira or similar).HOW YOU’LL KNOW YOU’RE SUCCEEDINGAlerts are triaged accurately and fast: real threats are never missed, and false positives don’t stand in the way of investigating what matters.Investigation notes stand on their own: any teammate, auditor, or the Team Lead can pick up exactly where you left off.You’re building toward more: each quarter you’re taking on more complex investigations and contributing real feedback to detection tuning.ABOUT MASTERYMost TMS platforms are tolerated. We’ve proven a better way - one platform built for every facet of transportation: shippers, carriers, private fleets, and brokers, all under one roof. Built to be loved. We’re still the only ones who mean that.Mastery Logistics Systems exists because the transportation industry deserves better. For too long, shippers and carriers have been forced to stitch together a patchwork of outdated, inadequate systems - one for dedicated fleet, another for brokerage, another for LTL, another for intermodal - none of them talking to each other, all of them slowing things down. Mastermind TMS changes that: one platform for every mode, every function, every stakeholder. Flexibility, visibility, and control - finally in one place.The timing matters. Global supply chains are under pressure like never before, and the transportation industry is at the center of it. We’re building the platform that helps this industry move faster, smarter, and more efficiently - tackling everything from AI-powered data ingestion to intelligent automation.We are a masterful mosaic of specialists, builders, and genuinely good people. Different backgrounds, different talents, one shared obsession: creating something the industry has never had. We believe in diversity of thought, deep respect for each other, and the relentless pursuit of getting it right. We’re small enough that every person makes a real impact - technically and culturally - and deliberate enough that we only add people who make the whole better.If you’re passionate about humanizing a complex industry, building for scale, and touching every corner of the global economy - welcome home. Let’s build a masterpiece.BENEFITS - BECAUSE YOU SHOULD LOVE WHERE YOU WORK AND HOW YOU’RE TAKEN CARE OFWe don’t do “bare minimum” here - not in the product, not in the culture, and definitely not in how we take care of our people. Mastery’s benefit package is built to give you real coverage, real flexibility, and real peace of mind. Medical, Dental & VisionComprehensive health coverage so you can focus on the work, not the what-ifs.️ Life & AD&D InsuranceCompany-paid life insurance at 1× your salary, plus AD&D and additional voluntary coverage options.️ Legal & Employee AssistanceLegal assistance and employee support programs - for life’s messier moments, big and small. 401(k) with 4% MatchWe invest in the platform and in your future. Save for retirement with a competitive company match.️ Flexible PTOManage your life and your schedule. We trust you to do great work and take the time you need to recharge.️ Giving Back - St. Jude Children’s Research HospitalOur philanthropic partner is St. Jude Children’s Research Hospital. Because doing good work and doing good in the world aren’t mutually exclusive. Robust benefits. Real flexibility. A team that has your back. That’s the Mastery standard.

• 2+ years of experience in security operations, IT, or a related alert-driven, shift-based role - not a recent graduate, but not necessarily a career SOC veteran either.
• Familiarity with SIEM platforms (Microsoft Sentinel or comparable) from hands-on work or coursework.
• Working knowledge of MITRE ATT&CK and Cyber Kill Chain frameworks.

Skills & Approach

• Eager and coachable: genuinely wants to grow technically and takes feedback well.
• Clear communicator: can write and speak about technical findings in a way both teammates and non-technical stakeholders can follow.
• Even-keeled under pressure: stays methodical when the queue is full or an alert requires immediate action.

Nice to Have

• Basic scripting exposure (Python or PowerShell).
• Security+, SC-200, or a comparable entry-level certification.
• Exposure to Azure or another major cloud platform.
• Experience with case management or ticketing tools (Jira or similar).

We don’t do “bare minimum” here - not in the product, not in the culture, and definitely not in how we take care of our people. Mastery’s benefit package is built to give you real coverage, real flexibility, and real peace of mind., Our philanthropic partner is St. Jude Children’s Research Hospital. Because doing good work and doing good in the world aren’t mutually exclusive.