Security Operations Analyst - Bozeman or Missoula, MT

  • Workiva
  • Jan 11, 2022
Full time Analysis Operations Security

Job Description


The Security Operations Center (SOC) Analyst is the first line of defense for the Information Security team at Workiva. This role is responsible for receiving, researching, triaging and documenting all security events and alerts as they are received as well as utilizing threat intelligence information to hunt for potential security issues across the entire enterprise. Alerts and events will be generated from Workiva’s endpoints, networks, security information and event management (SIEM) systems, threat intelligence platforms, employees, third-parties and other sources. An analyst will interface with multiple groups and individuals across all organizations and teams throughout Workiva to help defend and maintain a strong security posture. The SOC analyst reports directly to the SOC manager and is a critical member of the team. This role will develop in-depth understanding of new trends and technologies related to information security and compliance, specifically those targeting cloud and software-as-a-service style enterprises, and they will contribute towards Workiva’s Information Security strategy and roadmap.



  • Assist in establishing and maintaining a mature and organized Security Operations Center through the evaluation of existing and proposed SOC policies, playbooks, and procedures.
  • Support cross team and department collaboration to monitor and respond to security events or reported issues as they arise.
  • Participate in regular incident responses, threat modeling activities, and retro exercises to hone and iteratively improve our detection, monitoring and reactive capabilities.
  • Stay current with and remain knowledgeable about developing threats through analyzing attacker tactics, techniques and procedures (TTPs) that target large cloud-first infrastructure and end user devices.
  • Define, create and maintain automation and orchestration solutions to automate, enrich and/or respond to ongoing threats and tasks.
  • Mature our incident response playbooks and procedures through triage, escalation, remediation and iterative documentation.
  • Research and explore new threat detection and hunting techniques across event data collected across multiple systems and environments.
  • Adhere to and establish service level agreements (SLAs) and create measurable benchmarks to show progress and improvement to Workiva’s defensive capabilities and coverage.


What You'll Need

  • High School Diploma or equivalent combination of education and experience in a related field.
  • Strong ethical and discretionary ability to handle sensitive information and data
  • Strong communication & social networking skills (written, verbal, listening) to collaborate with other teams across the organization
  • Excellent critical thinking and problem-solving skills
  • Self-motivated to research with a strong desire to understand how things work.
  • Highly organized and efficient
  • Information security monitoring and response, security operations, or related experience, with working knowledge of/familiarity with the following areas: SIEM product, with Splunk and Splunk Enterprise Security; Cloud environment, with Amazon Web Services (AWS); Linux/Unix operating systems; General security principles, web applications and risk and compliance initiatives
  • Cloud experience preferred
Travel Requirement
  • Minimal, Up to 10%
Working Conditions & Physical Requirements
  • Reliable internet access for any period of time working remotely, not in a Workiva office.


How You'll Be Rewarded

  • Base Pay Range in Colorado: $66,000 - $81,000

  • Discretionary bonus typically paid annually

  • Restricted Stock Units granted at time of hire

  • 401(k) match


 The base pay range represents the low and high end of the hiring range for this job. Actual pay will vary and may be above or below the range based on various factors including but not limited to relevant skills, experience, and capabilities.



Where You’ll Work


Our values drive how we work and who we hire. You will see these values ingrained in how we support our customers, work with team members, build our products and in the work environment we’ve created.

  • Customer Success:  Always delight our customers.

  • Trust: Rely on each other. 

  • Integrity: Do the right thing, every time. 

  • Collaboration: Share resources and work together. 

  • Innovation: Keep creating solutions and finding better ways. 

  • Inclusion: Support a diverse community where we all belong. 

  • Accountability: Be responsible for your success and failure.

We believe our people are our greatest asset, and our unique culture gives employees the opportunity to make an impact everyday. We give our employees the freedom and resources they need—backed by our culture of collaboration and diverse thought—to continue innovating and breaking new ground. We hire talented people with a wide range of skills and experiences who are eager to tackle some of today’s most challenging problems.


At Workiva, you’ll enjoy: 

  • Fantastic Benefits: With coverage starting day one, choose from competitive health, dental, and vision plans on the largest physician networks available.

  • Casual Dress: Workiva has a casual work environment, most people wear jeans to the office.

  • Involvement: Ability to participate in Employee Resource Groups, (Women in Tech, Women in Sales, Ethnic Diversity, Veterans, Rainbow (LGBTQ), Remote Employees, Caregiving) Volunteering, Company wide celebrations, and more

  • Work-life Balance: We have competitive PTO, VTO and Parental Leave. We encourage employees to spend time enjoying life outside of work.

Learn more about life at Workiva:

Learn more about the company:

Learn more about benefits:

Workiva is an Equal Employment Opportunity and Affirmative Action Employer.  We believe that great minds think differently.  We value diversity of backgrounds, beliefs, and interests, and we recognize diversity as an important source of intellectual thought, varied perspective, and innovation.  Employment decisions are made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression genetic information, marital status, citizenship status or any other protected characteristic.  


Workiva is committed to working with and providing reasonable accommodations to applicants with disabilities. To request assistance with the application process, please email

Workiva supports employees in working where they work best - either from an office or remotely from any location within their country of employment.  Effective October 18, 2021, proof of COVID-19 vaccination is required to visit any Workiva office, attend in-person meetings, or travel for business purposes.