Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Investigate, manage, respond to, and escalate security alerts from various security platforms, including EDR/XDR, SIEM, and others.

• Analyze security events escalated from tier 1 to validate threats and respond appropriately.

• Investigate and address reported phishing emails.

• Analyze, prioritize, and monitor vulnerabilities identified by vulnerability scanners.

• Research emerging threats and conduct global threat hunts to correlate industry data and threat feeds with our clients' environments and attack surfaces.

• Execute incident response procedures, examining indicators of compromise, identifying root causes, gathering evidence, and preparing incident response reports.

• Collaborate with other security analysts, compliance analysts, Compass engineers, and vCISOs, providing your technical expertise to deliver outstanding managed security services to our clients.

• Directly engage with clients and end users while investigating threats and managing/troubleshooting managed security tools.

• Assist in deploying the managed security services toolset to new clients.

• Support internal quality initiatives, including the development of standards and security services for Compass MSP.

• Stay updated with the latest industry trends, best practices, and regulatory requirements to continuously enhance our security services.

• Hunt for emerging threats using various methods and tools such as SIEM querying, software testing, and sandboxing. Convert the results of threat hunts into actionable alerts and analysis SOPs to assist the SOC in safeguarding clients.

• Create and maintain internal standard operating procedures.

• Participate in a flexible work schedule that includes after-hours/on-call shifts.

⛳️ Requirements

• A minimum of 5 years of experience in a SOC/incident response role.

• Proven experience in conducting end-to-end alert and incident investigations with minimal oversight and sound escalation judgment.

• Execution-oriented: capable of performing containment, blocking, isolation, and basic remediation in small to mid-sized business environments.

• Experience in monitoring and responding to threats affecting Windows, Microsoft 365/Entra ID, and firewalls.

• Familiarity and comfort working across EDR, firewall administration, identity and email security consoles, ticketing systems, RMM tools, and security telemetry sources.

Preferred Additional Experience:

• Infrastructure Recovery & IT Engineering.

• Network, cloud, and endpoint recovery.

• Firewall, VPN, and zero-trust environments.

• Backup validation and isolated recovery environments.

• Active Directory, virtual hosts, domain controllers, migrations, and secure system restoration.

• Endpoint wipe-and-reload and associated rebuild activities.

🏝️ Benefits

• Competitive pay.

• Quarterly bonuses.

• Progressive PTO.

• Medical/Dental/Vision/Life/Disability available.

• Tax-deferred retirement plan with company match.

• Career development and coaching.

• Enjoyable work environment!