Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of key elements in the daily security operations program, encompassing security monitoring, incident response, access governance, vulnerability management, vendor risk, audit evidence, and cloud and SaaS security.

• Develop a continuous compliance evidence process to support SOC 2 Type II and HITRUST i1 assessments.

• Examine misdirection incidents and enhance DLP and external-send controls.

• Establish access governance through verification of provisioning and deprovisioning, ongoing access reviews, privileged-access reviews, and validation of MSP handoff.

• Investigate alerts and suspicious activities across platforms like CrowdStrike Falcon, Okta, Microsoft 365, Entra ID, Microsoft Purview, Zscaler, Box, KnowBe4, and similar systems.

• Prioritize vulnerabilities, security findings, access issues, and control gaps while driving remediation efforts with internal teams, the MSP, and vendors.

• Oversee provisioning verification, access reviews, vendor security reviews, DLP monitoring, security ticket workflows, and regular control activities.

• Enhance detection coverage and logging capabilities within CrowdStrike NG SIEM and other platforms.

• Assist with cloud security initiatives in Azure and AKS.

• Ensure audit-ready evidence is available for SOC 2 and HITRUST.

• Participate in vendor assessments, security terms negotiation, and AI policy monitoring.

• Report directly to the Sr. Director of InfoSec and IT.

⛳️ Requirements

• Strong investigative reasoning skills; ability to navigate incomplete information, formulate and test hypotheses, set priorities, and make informed escalation decisions.

• Practical risk prioritization based on exploitability, business impact, exposure, and operational reality.

• Clear written communication skills for incident documentation, audit evidence, and conveying information to non-technical leaders.

• Demonstrated ownership and judgment; capability to lead initiatives across teams and vendors, work independently, and identify issues that require security leadership or legal intervention.

• Must reside in and perform all work physically in the United States.

• Nice to have: experience in automation using Python or PowerShell.

• Nice to have: experience in detection engineering, including writing and tuning queries.

• Nice to have: background as a systems administrator or IT generalist.

• Nice to have: practical knowledge of identity management, endpoints, SaaS integrations, securing AI platforms, and remediation processes.

• Nice to have: experience with audit or GRC programs, SOC 2 evidence review, vendor security assessments, CAIQ responses, DPA or BAA security terms, or third-party assurance reports.

🏝️ Benefits

• Health, dental, and vision benefits.

• Annual cash incentive program.

• 401k plan with matching contributions.

• Flexible paid time off (PTO).

• PHM services available for you and your dependents.

• Virtual interview sessions conducted via Zoom or phone.