Senior Corporate Security Specialist

This is a fully remote position, open to applicants in Arizona, +33 more states.

📋 Description

• Author, refine, and sustain detection mechanisms as code within the SIEM/SOAR pipeline.

• Identify gaps in detection and tools, and suggest improvements to the architecture.

• Participate in the on-call rotation and manage escalations with the third-party managed SOC.

• Manage email security, endpoint security, and DLP controls.

• Investigate and address high-sensitivity signals while fine-tuning controls.

• Conduct tabletop exercises and provide security training for the workforce.

• Generate threat intelligence that influences team priorities.

• Limit, suspend, or revoke employee system access when active risks are detected.

• Establish security requirements and detection coverage for identity and audit data collection.

• Perform sensitive matter reviews utilizing forensically sound evidence handling and chain-of-custody protocols.

• Independently lead intricate reviews concerning employee conduct, insider threats, access misuse, and data exfiltration.

• Execute forensic analysis across endpoint, identity, email, cloud, and SaaS data sources.

• Create findings, evidence summaries, technical analyses, and timelines.

• Safeguard evidence for legal holds and formal proceedings.

• Analyze findings and propose resolutions.

• Enhance Corporate Security methodologies, evidence standards, and reporting protocols.

• Oversee the SOC relationship and coordinate with forensic vendors and external specialists.

• Apply independent judgment in review methodologies and evidence management.

• Maintain chain-of-custody, evidence-handling, and confidentiality protocols.

⛳️ Requirements

• 5 to 7 years of security experience, including direct involvement in leading complex corporate security and workplace investigations.

• Practical experience conducting forensic investigations across endpoint, identity, email, cloud, and SaaS data sources.

• Proficient in detection engineering as code, including authoring, testing, and refining detections in a version-controlled pipeline.

• Experience with forensically sound evidence collection and preservation techniques, including chain-of-custody discipline, hashing, custodian-based collection, and eDiscovery/legal-hold processes.

• Good judgment regarding the collection and preservation of evidence, as well as knowledge of what to disclose and to whom.

• Proven track record of producing review findings and recommendations that withstand scrutiny.

• Comfort in collaborating with internal or external counsel and directing forensic vendors.

• Understanding of the legal context surrounding corporate-security issues.

• Excellent written and verbal communication skills, including the ability to explain technical findings to non-technical audiences.

• Experience collaborating with a managed SOC or MSSP, including managing escalations.

• Familiarity with infrastructure-as-code workflows using Terraform and Python for logging, alerting, and security automation.

• Experience securing environments such as Google Workspace, Okta, GitHub, and Atlassian.

• Experience assisting with PCI evidence collection and response.

• Availability during standard business hours and participation in an on-call rotation.

• Proficiency with virtual communication tools such as Zoom and Slack.

• ActBlue is currently unable to sponsor work visas.

• Background check required upon offer, with consent.

🏝️ Benefits

• Flexible work schedules and an unlimited time-off policy.

• Comprehensive health, dental, and vision insurance for employees and their families, fully paid and trans-inclusive.

• Fully-covered health reimbursement arrangement for out-of-pocket expenses.

• Fully-funded short- and long-term disability insurance.

• Fully covered basic and AD&D life insurance.

• Option for voluntary supplemental life insurance.

• Flexible spending account options for dependent and healthcare expenses.

• Employee Assistance Program (EAP) benefits.

• Automatic 2% employer-paid 401K contribution, plus an additional 6% match on employee contributions.

• A minimum of three months of paid medical, family, and parental leave for all new parents, including adoptions.

• Commuter or home-office benefits.

• $1,000 home-office setup allowance for all new full-time remote employees.

• Quarterly snack deliveries.

• Digital subscriptions to the Boston Globe and New York Times.

• Travel may be necessary for attendance at all-staff, departmental retreats, or select meetings.