Security Analyst - Tier 3
at Sevenai
West Coast, remote, senior, full time, USD 1,40,000–1,52,000 / year, 5+ years
posted 24 Sept 2026
- FQL
- IDP
- MITRE ATT&CK
- XDR
- KQL
- SIEM
- Malware analysis
- IDS/IPS
- SPL
- SQL
About the role
7AI's AI agents take on a lot of the SOC's non-human work, but scaling that trust requires senior analysts who can validate the hardest cases and mentor the team doing it. As a Tier 3 Security Analyst, you'll be the technical lead and escalation point for junior analysts reviewing 7AI's AI agent investigations. You'll validate the agents' work, prove out the threats they stopped, and help customers understand the risk that was prevented. You'll also hunt for malicious activity in customer environments using 7AI's agents, and help build the processes that let this team scale without losing quality.
What you would do
- Review and validate the AI agents' investigations for accuracy and completeness, assessing risk
- Serve as the technical escalation point for junior analysts and mentor them
- Correlate data across cloud, endpoint, identity, and network sources to build the full picture of an attack
- Investigate malicious activity the AI agents responded to, and assess the risk that was prevented for customers
- Use 7AI's AI agents to hunt for emerging threats in customer environments, feeding new detections back into the product
- Support customers with ongoing threat monitoring, triage, and alert prioritization, especially during active incidents
- Proactively review logs and findings to catch potential threats and anomalies early
- Communicate clearly with customers across technical levels, from SOC analysts to CISOs
- Help design processes that let the team scale while keeping quality consistent
- Work with Sales, Engineering, and Product to share customer feedback and help tune the platform
- Stay current on emerging attack techniques and trends, including AI-driven attacks
What they are looking for
- 5+ years of experience in security operations
- Hands-on experience investigating alerts across endpoint, network, identity, email, and cloud sources
- Strong understanding of security monitoring tools such as XDR, SIEM, IDS/IPS, and IDP
Read from jobs.ashbyhq.com, last seen 1d ago.