Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct investigations and respond to security incidents

• Assess threats within a multifaceted enterprise setting

• Collaborate with internal teams and clients to contain and resolve security issues

• Act as a senior point of escalation for security investigations

• Oversee and manage information security solutions

• Gather evidence to fulfill internal and customer audit requirements

• Develop both internal and customer-facing security playbooks and procedures

• Support a global cybersecurity framework through established procedures, processes, and security tools

• Provide mentorship to junior members of the Security Operations team

• Carry out incident response roles as outlined in the Ensono Incident Response Plan

• Apply security application upgrades and patches

• Examine security incidents, threats, and vulnerabilities

• Adhere to project plans while meeting timelines and milestones

• Assist in creating and maintaining security metrics

• Collaborate on the formulation and adjustment of security alerts

• Stay abreast of new technologies and tool capabilities

• Aid product owners in aligning solutions with security product offerings

• Effectively prioritize tasks independently in a dynamic enterprise environment

• Deliver clear, detailed project reports to leadership

⛳️ Requirements

• A minimum of 5 years of progressive experience in cybersecurity, including at least 3 years of direct experience in a Security Operations Center (SOC) focusing on security monitoring, alert triage, incident investigation, escalation management, and incident response

• Proven experience leading or independently managing security investigations and incident response efforts within a large enterprise, managed services, MSSP, MDR, or multi-client environment

• Over 2 years of hands-on experience with Microsoft Sentinel in a live environment, which includes alert investigation, log analysis, incident management, threat detection, and security monitoring

• More than 2 years of hands-on experience with Microsoft Defender technologies, including the investigation and response to incidents involving endpoint, identity, email, and cloud security

• Familiarity with SIEM platforms and security monitoring tools

• Ability to differentiate between genuine security events and false positives while making risk-based decisions

• Experience communicating about security incidents, technical findings, business impacts, and remediation suggestions to both technical and non-technical audiences, including clients

• Skilled in creating and maintaining incident documentation, investigation records, security procedures, runbooks, and response playbooks

• Strong grasp of TCP/IP networking, DNS, firewalls, encryption technologies, security controls, and common attack vectors

• Comprehensive understanding of malware classification, attack methodologies, infection vectors, persistence mechanisms, and techniques used by threat actors

• Experience with digital forensics concepts, evidence preservation, log analysis, and investigative methodologies

• Ability to evaluate vulnerability scan results and assess associated risks

• Working knowledge of Microsoft Entra ID, Microsoft 365, Azure, vulnerability management processes, and privileged access management principles

• Familiarity with DLP, endpoint security technologies, anti-malware solutions, and host-based intrusion detection/prevention systems

• Proficient in using KQL, PowerShell, Python, SQL, or similar scripting tools

• Strong communication skills, both written and verbal, with the ability to perform effectively during high-pressure security incidents

• Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or a related field, or a comparable combination of education and relevant professional experience

• Availability for after-hours and/or on-call duties is required

🏝️ Benefits

• Unlimited Paid Days Off

• Three health plan options

• 401k with company matching

• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts

• Family Forming Benefit, including fertility coverage and adoption/surrogacy reimbursement

• Paid childbearing and paternal leave

• Education Reimbursement, Student Loan Assistance, or 529 College Funding

• Sabbatical leave

• Wellness program

• Flexible work schedule

• Annual bonus plan based on company and individual performance, subject to eligibility

• Equity grant under the Associate Equity Appreciation Program, contingent on eligibility

• Option to work from home or in Ensono offices when not required on a client site