Security Operations Analyst

NEXT’s mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience.

Simply put, wherever you find small businesses, you’ll find NEXT.

Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow — that’s where you come in.

We are looking for a Security Operations Analyst to join our growing SecOps team.This is a hands-on role in a fully cloud-native environment, focused on threat hunting, cloud investigations, and incident response.You’ll work with modern tooling and data sources to detect, investigate, and contain security threats across our cloud platforms.

What You’ll Do:

• Investigate cloud security alerts and incidents across AWS, Azure, or GCP.
• Proactively hunt for threats, misconfigurations, and suspicious activity.
• Apply DFIR skills to support investigations and incident response.
• Develop and tune detections, playbooks, and automations to improve visibility and response times.
• Partner with engineering and cloud teams to strengthen defenses and close security gaps.
• Stay ahead of emerging threats and vulnerabilities, and share insights across the team.

What We Need:

• 3-5 years of experience in Incident Response, Threat Hunting and Security Operations.
• Strong background in cloud security investigations (GCP, AWS or Azure).
• Hands-on experience with SIEMs, EDR/XDR, and cloud telemetry.
• Proficiency in Bash or Python for automation and data analysis.
• Solid understanding of DFIR principles and investigation best practices.
• Familiarity with MITRE ATT&CK and hypothesis-driven hunting.
• Excellent analytical and communication skills (Hebrew and English)
• Experience with SOAR tools or automated response workflows - Nice to have
• Experience building or tuning custom detections - Nice to have
• Relevant certifications (GCIH, GCFA, GCFE, AWS Security Specialty, etc.) - Nice to have