Sungrow Logo

Sungrow

Security Operations Analyst

Posted An Hour Ago
Be an Early Applicant
Remote
Hiring Remotely in United States
100K-120K Annually
Mid level
Remote
Hiring Remotely in United States
100K-120K Annually
Mid level
Own and operate cybersecurity platforms across enterprise, cloud, and hybrid environments. Lead security tool deployment, integration, alert tuning, incident triage and response, vulnerability remediation, cloud hardening, and control validation. Partner with an MSSP and cross-functional IT and engineering teams to improve detection, response, documentation, and security architecture.
The summary above was generated by AI

Security Operations Analyst

About Sungrow:

Sungrow Power Supply Co., Ltd. (“Sungrow”) is a global leading PV inverter and ESS provider with 515 GW of power electronic converters installed worldwide as of  December 2023. Founded in 1997 by University Professor Cao Renxian, Sungrow leaders in the research and development of solar inverters with the largest dedicated R&D team in the industry and a broad product portfolio offering PV inverter solutions and ESS for utility-scale, commercial & industrial, and residential applications, as well as internationally recognized floating PV plant solutions, NEV driving solutions, EV charging solutions, and renewable hydrogen production systems. With a strong 27-year track record in the PV space, Sungrow products power in 170 countries and regions worldwide. For more information about Sungrow, visit: www.sungrowpower.com.

 

The Position:

 

We are seeking a Security Operations Engineer to join Sungrow Americas’ cybersecurity team. This role is responsible for owning and operating security technologies, leading incident response activities, and strengthening detection and response capabilities across IT and cloud environments.


This position operates beyond traditional SOC analyst responsibilities, combining hands-on engineering, tool ownership, and full lifecycle incident response. The Security Operations Engineer will serve as a key technical resource supporting Sungrow’s defense-in-depth strategy and overall security maturity.

 

Security Tooling & Platform Ownership

  • Lead Initial deployment, configuration, and ongoing management of security platforms, including SIEM, EDR/XDR, IAM, vulnerability management, and related tooling 
  • Lead integration and optimization of security technologies across enterprise IT, AWS, and Azure environments 
  • Continuously improve detection capabilities through alert tuning, correlation rules, and automation


Detection & Incident Response

  • Execute end-to-end incident response, including triage, investigation, containment, remediation, and post-incident analysis 
  • Serve as a technical escalation point for security incidents and operational issues 
  • Partner with Sungrow’s MSSP to ensure effective monitoring, escalation, and response coordination 


Cloud & Infrastructure Security

  • Own and execute security hardening and configuration management
  • Identify and remediate security gaps, misconfigurations, and control deficiencies 
  • Collaborate with IT and engineering teams to implement and maintain secure configurations 

Vulnerability & Risk Management

  • Partner on vulnerability management processes, including scanning, prioritization, and remediation tracking 
  • Align remediation efforts with risk impact and operational priorities 
  • Support audit and compliance activities through technical control validation and evidence generation 


Cross-Functional Collaboration & Continuous Improvement

  • Work across IT, engineering, and external partners to drive security improvements 
  • Support and update playbooks, procedures, and operational documentation 
  • Contribute to security design decisions and architecture improvements across tooling and cloud environments

Requirements

  • 2-4 years of hands-on experience in cybersecurity operations or analyst roles 
  • Demonstrated experience supporting and working within security tools (SIEM, EDR/XDR, IAM, vulnerability management) 
  • Hands-on experience supporting cloud environments (AWS and/or Azure) 
  • Proven ability to investigate and respond to security incidents 
  • Understanding of security operations workflows, detection, and response processes 
  • Ability to work across technical domains, including endpoint, identity, cloud, and network security


Preferred

  • Familiarity with ISO 27001, NIST CSF, SOC 2, or NERC CIP frameworks 
  • Experience working in hybrid IT/OT or global enterprise environments 
  • Relevant certifications (Security+, CySA+, GCIH, or equivalent)

 

Competencies

  • Strong technical ownership mindset with the ability to operate independently 
  • Effective communicator across technical and non-technical stakeholders 
  • Proactive problem-solving with attention to detail 
  • Ability to manage multiple priorities in a fast-paced environment 
  • Commitment to continuous improvement and skill development

 

Travel

Up to 10%

 

Work Location and Status:

  • FTE, Hybrid, Costa Mesa, California / Houston, Texas
  • No visa sponsorship

 

Compensation:

Competitive compensation aligned with experience, scope of responsibility, and market benchmarks.

 

Sungrow is an equal opportunity employer. Due to strong interests in this position, Sungrow will only reach out to those candidates who best meet the requirements. Thank you for your interest in Sungrow.

Similar Jobs

4 Hours Ago
In-Office or Remote
154K-251K Annually
Senior level
154K-251K Annually
Senior level
Biotech • Pharmaceutical
Leads a security monitoring team responsible for Splunk SIEM and log collection platform availability, performance, data quality, capacity, and operations. Manages employees, vendors, SLAs, audits, incident escalations, and security event triage. Partners with engineering and architecture teams on monitoring improvements, detection, correlation, and response projects. Provides technical leadership, stakeholder communication, performance reporting, and team development while evaluating emerging AI, machine learning, and analytics capabilities.
Top Skills: BashCloud Security LoggingEdrItilPythonRed Hat LinuxRsyslogSIEMSplunkSplunk Db ConnectSplunk Enterprise SecuritySplunk Heavy ForwarderSplunk Universal ForwarderSyslogVmware Data Collection NodeXdr
Yesterday
In-Office or Remote
Mid level
Mid level
Healthtech • Telehealth
Monitors and triages security alerts in a Security Operations Center, performs initial incident analysis, supports phishing and malware response, conducts vulnerability scans, manages security monitoring tools, documents investigations, and escalates verified threats. Collaborates with Tier 2 analysts, IT teams, vendors, and stakeholders while maintaining awareness of emerging cyber threats and security best practices.
Top Skills: AntivirusDhcpDnsEdr/XdrFirewallsIds/IpsLinuxSIEMTcp/IpWindows
21 Days Ago
Remote
US
Mid level
Mid level
Cloud • Information Technology • Consulting • Cybersecurity • Web3
Leads Tier-3 security monitoring, threat hunting, incident response, and SLA delivery across multi-tenant environments. Serves as incident commander while engineering detections, SOAR playbooks, integrations, and AI-assisted automation using Python, APIs, LLMs, and cloud security data. Advises clients, reduces alert noise, and aligns operations with NIST, ISO 27001, privacy, and regulatory requirements.
Top Skills: AWSAws CloudtrailAws CloudwatchAzureAzure AdBashBigQueryCcpaClaude ApiCortex XsoarCpraCrowdstrikeCrowdstrike FalconCursor IdeDemistoDockerElastic SiemGCPGdprGeminiGithub CopilotGoIamJumpcloudLangchainLgpdMcpMicrosoft SentinelMitre Att&CkNist Csf 2.0Nist Sp 800-53R5Nist Sp 800-61R2Node.jsOktaOpenai ApisPalo Alto Cortex XdrPandasPcapPowershellPythonRagRequestsRest ApisSentineloneSentineloneShuffleSigmaSplunkSuricataSyslogTinesWebhooksWindows Event LogsWiresharkYaraZeek

What you need to know about the Austin Tech Scene

Austin has a diverse and thriving tech ecosystem thanks to home-grown companies like Dell and major campuses for IBM, AMD and Apple. The state’s flagship university, the University of Texas at Austin, is known for its engineering school, and the city is known for its annual South by Southwest tech and media conference. Austin’s tech scene spans many verticals, but it’s particularly known for hardware, including semiconductors, as well as AI, biotechnology and cloud computing. And its food and music scene, low taxes and favorable climate has made the city a destination for tech workers from across the country.

Key Facts About Austin Tech

  • Number of Tech Workers: 180,500; 13.7% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Dell, IBM, AMD, Apple, Alphabet
  • Key Industries: Artificial intelligence, hardware, cloud computing, software, healthtech
  • Funding Landscape: $4.5 billion in VC funding in 2024 (Pitchbook)
  • Notable Investors: Live Oak Ventures, Austin Ventures, Hinge Capital, Gigafund, KdT Ventures, Next Coast Ventures, Silverton Partners
  • Research Centers and Universities: University of Texas, Southwestern University, Texas State University, Center for Complex Quantum Systems, Oden Institute for Computational Engineering and Sciences, Texas Advanced Computing Center

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account