Security Analyst II

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Serve as the primary contact for the Security queue by assessing, prioritizing, routing, and resolving tickets, while escalating complex requests and automating repetitive request types.

• Evaluate endpoint and security alerts as well as DLP events utilizing runbooks and AI-assisted analysis.

• Review alert volumes and false-positive rates, refine detections, and automate enrichment and initial triage processes.

• Engage in incident response activities, including the triage of phishing and social-engineering incidents and composing internal security notifications.

• Conduct post-incident reviews, update runbooks, and implement changes to processes or tools.

• Review and enhance AI-generated responses to security questionnaires, RFPs, and due-diligence inquiries for Sales.

• Maintain the answer repository, standard responses, and Trust Center documents, and manage Trust Center access requests.

• Participate in customer calls to articulate Auros’s security stance with support from senior team members.

• Perform initial vendor security evaluations for third-party risk management.

• Assess requests for new software, browser extensions, and AI tools in accordance with the approval process.

• Assist with access verifications, customer data deletion requests, reporting impersonations or fraudulent domains, and facilitating internal and external audits.

• Develop and sustain automations, AI agents, and integrations across security tools.

• Ensure runbooks are up-to-date as actionable documents for personnel and AI tools.

• Define and monitor operational metrics such as triage time, resolution time, and questionnaire turnaround time.

• Utilize metrics to prioritize enhancements, pilot new tools or methodologies, and showcase impact.

• Exemplify Auros’s core values through work output and daily team interactions.

⛳️ Requirements

• Excellent written and verbal communication skills, including the ability to provide clear, accurate responses to customers and explain technical subjects to non-technical audiences.

• Comfortable engaging directly with customers and collaborating with internal teams.

• Highly organized, capable of managing multiple requests and deadlines while completing work efficiently.

• Self-motivated individual who can work independently, follow runbooks, recognize when to escalate issues, and proactively enhance processes.

• Experience utilizing AI for work automation, ideally through the creation of AI agents or agent-like workflows that boost team productivity.

• Technical background in security operations, encompassing alerting, endpoint management, identity and access management, and incident response basics.

• A minimum of 3 years of experience in security, IT, compliance, or a client-facing technical position.

• Familiarity with SOC 2, ISO 27001, or NIST CSF is preferred but not mandatory.

• Experience in completing security questionnaires such as SIG or CAIQ, or using compliance tools like Vanta, is preferred but not mandatory.

• Exposure to Jira or Jira Service Management is preferred but not mandatory.

• Familiarity with DLP, endpoint security, or SIEM/alerting tools, including detection or alert tuning, is preferred but not mandatory.

• Experience in building AI agents, automations, or integrations, or scripting against security tool APIs, is preferred but not mandatory.

• CompTIA Security+ or ISC2 CC certification is preferred but not mandatory.

🏝️ Benefits

• Equal Opportunity Employer.

• Inclusive and accessible candidate experiences.

• Accommodations available during the interview process.

• Welcoming of diverse perspectives and backgrounds.