Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead the investigation and response efforts for security incidents, suspicious activities, and emerging threats.

• Design, implement, and enhance security monitoring, detection, and response capabilities within our AWS environment.

• Develop and sustain effective detection rules, alerting strategies, and investigation protocols.

• Conduct post-incident analyses to ascertain root causes, lessons learned, and preventative steps.

• Identify security vulnerabilities, exposures, misconfigurations, and non-compliance risks, clearly communicating recommendations.

• Execute security assessments of third-party vendors, services, and technologies.

• Collaborate with Technology and Product teams to design secure solutions and bolster existing controls.

• Assist in vulnerability management, threat modeling, and endpoint security initiatives.

• Create and uphold security documentation, standards, and operational procedures.

• Contribute to security awareness initiatives and provide guidance on secure business practices.

• Stay abreast of evolving threats, attacker techniques, and defensive technologies.

⛳️ Requirements

• US Citizenship and residing in the USA.

• Over 5 years of experience in security operations, security engineering, or a similar cybersecurity role.

• Extensive experience with security monitoring, incident response, threat detection, and forensic investigations.

• Profound understanding of network security, application security, infrastructure hardening, and vulnerability management.

• Experience in deploying, managing, and automating security solutions in cloud environments.

• Strong knowledge of AWS architecture, security services, and cloud security best practices.

• Familiarity with macOS, Linux, and Windows environments.

• Solid understanding of log collection, analysis, and security event investigation.

• Experience in developing and maintaining security procedures and operational processes.

• Capability to communicate technical risks and recommendations effectively to both technical and non-technical audiences.

• Experience supporting compliance initiatives such as SOC 2, ISO 27001, GDPR, FedRAMP, or PIPEDA.

🏝️ Benefits

• Competitive compensation package that includes stock options.

• Comprehensive health and benefits coverage.

• Unlimited paid vacation.

• 401K matching.