[Hiring] Security Operations Analyst L2 @Supply Chimp

Role Description

We are looking for a Security Operations Analyst Level 2 to independently execute and support Supply Chimp’s day-to-day security operations. This role is responsible for:

• Security monitoring and alert triage
• Recurring security and compliance activities
• Evidence and documentation
• Security maintenance
• Incident response support
• Risk assessment
• Security testing

This is a hands-on role for someone who can work effectively within established processes while also recognizing where processes, documentation, or tooling need to improve.

Qualifications

• 3+ years of relevant experience in security operations, information security, cybersecurity, or a closely related role.
• Hands-on experience with security monitoring and SIEM tools, including alert triage, investigation, search or query capabilities, and documenting alert dispositions.
• Hands-on experience with Microsoft security and identity technologies, including Microsoft Entra ID, Microsoft Intune, Conditional Access policies, and related endpoint and access controls is strongly preferred.
• Strong understanding of common security operations disciplines such as vulnerability management, access control, endpoint security, logging, and incident response.
• Experience performing recurring security or compliance control activities and producing clear, review-ready evidence and documentation; CMMC, NIST SP 800-171, PCI DSS, or comparable framework experience and relevant security certifications are preferred.
• Strong organization, prioritization, written communication, and follow-through with the ability to manage recurring responsibilities and competing deadlines independently.
• Demonstrated problem-solving and sound judgment when working through security issues with incomplete information or unclear conditions.
• Ability to work during our core business hours of 7:00 AM to 4:00 PM PST.
• Excited about remote work and collaborating across a distributed team.

Requirements

• Independently manage recurring security operations work and meet established cadences without needing reminders.
• Investigate, document, and escalate security alerts and suspected events appropriately.
• Ensure security reviews, compliance evidence, and operational records are accurate, complete, organized, and ready for review.
• Demonstrate sound judgment when information is incomplete, know when to continue investigating, and know when escalation is needed.
• Identify practical improvements to security processes, documentation, monitoring, or controls and help move those improvements forward.

Benefits

• COP 6,500,000 – 8,500,000/month
• 15 paid working days of vacation per year
• Paid sick leave with medical certification
• Other applicable statutory paid leaves
• US Paid Holidays
• Mandatory Colombian statutory benefits
• Social security contributions
• Prima de Servicios (13th month pay)
• Cesantías
• Holiday Pay Rate and Overtime Pay
• Fun extras that make remote work feel human
• Surprise treats (yes, including coffee!)
• Gifts of appreciation and recognition
• Company shout-outs and celebrations
• Virtual parties and team moments throughout the year