SOC Analyst (Continuity / Coverage)

About the Role

AspenView is building a dedicated, 24/7 Security Operations Center team for a large U.S. consumer lender in the financial services sector, and we are hiring an SOC Analyst (Continuity / Coverage) at full strength when someone is on leave, sick, in training or has just resigned. You're trained on the full Tier 1 workload and the most common Tier 2 checks, and you move to whichever of the three shifts needs you.The role is full-time, on site in Bogotá or Buenos Aires, and dedicated to a single client, working on U.S. Eastern Time with senior leads in the United States.

What You Will Do

• Cover gaps on the 24/7 roster so no shift runs short.
• The full Tier 1 workload on any shift: acknowledgement, validation, enrichment, runbooks and escalation.
• The runbook library. When you find a step that's out of date on one shift, you fix it for all of them.
• Handover quality checks, since you see more crews than anyone else.
• Shadowing new joiners through their first weeks on the queue.
• Ticket quality reviews and audit-evidence preparation for the SOC Manager when the roster is full.
• Your roster is set by the SOC Manager around planned leave and training. Short-notice cover will still happen.
• Both sites work one shared queue, so you can cover either city's shifts from your own suite.
• On a night shift you may be the only analyst on the console, with the Tier 2 shift lead and Tier 3 on call.
• Your schedule changes more than anyone else's in the team. In exchange you see every shift, every crew and every runbook, which is the fastest way to learn the operation.
• You work from an access-controlled suite with a clean-desk rule and VDI-only access to the client's environment and tooling. Access to the client environment follows identity, criminal-background, employment and education checks, repeated periodically.
• Progression is to Tier 2, then Tier 3, detection engineering or threat hunting.

What You Bring

Education

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent hands-on experience (all levels).

Experience

• Hands-on exposure to security monitoring, or a SOC, NOC or service desk role with security duties.
• Log fundamentals and triage discipline: you follow a runbook exactly and notice when an alert doesn't fit.
• Comfortable moving between day, evening, night and weekend shifts. This is the core of the role.
• Clear written documentation, because runbooks and handovers are part of the job.
• English strong enough to write a clear escalation and talk it through with a US analyst (B2 or above).

Nice to Have

• A previous relief, float or backfill role in any shift-based operation.
• Any SIEM: Elastic, Splunk, Sentinel, QRadar.
• ServiceNow or another ticketing tool used for security work.
• EDR consoles such as CrowdStrike Falcon or Microsoft Defender, and identity alerts in Okta.
• Writing procedures or knowledge-base articles.
• MITRE ATT&CK vocabulary.
• Security+, CySA+, SC-200, BTL1 or similar.

About AspenView

AspenView Technology Partners connects Latin American engineering talent with North American organizations. We place people on one account rather than a queue, and keep them there. This security operations team runs on US Eastern hours from AspenView's delivery centres in Bogotá and Buenos Aires, with senior leads in the United States. Applications and questions: careers@aspenview.com