Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee cross-departmental projects to execute essential security initiatives.

• Recognize, design, and implement automation throughout the company's systems and processes.

• Collaborate closely with the Chief Information Security Officer (CISO) to advance security initiatives and enhance the maturity of the security program.

• Automate routine security tasks.

• Address customer security assessments and fulfill audit requests.

• Provide security leadership across the organization in alignment with key corporate initiatives.

• Assess security vendors and optimize the usage of security tools and services.

• Lead the assessment, remediation, documentation, and certification activities for HITRUST, SOC 2, and PCI DSS.

• Aid in the design and execution of security-related training programs and communications.

• Direct projects aimed at optimizing security configurations and managing laptops and other devices.

• Investigate, document, and resolve security incidents.

• Automate incident response playbooks and IT security protocols.

• Introduce innovative technologies and services to sustain Marathon's competitive technical edge.

• Ensure secure software development practices, including GitHub security, code scanning, and AI code development.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Data Science, or a related discipline.

• 5 to 7 years of cumulative experience in various IT and security roles.

• Highly desirable security certifications pertinent to job responsibilities, such as Security+, CEH, CASP, or CISSP.

• Proficiency in creating automation using PowerShell or similar tools.

• Practical experience with security event triage, Windows OS, networking, SIEM, incident response, server and endpoint hardening, and application security best practices.

• Specific experience with Microsoft Defender, Cisco, Meraki, Dell laptops, AWS, Salesforce, Microsoft 365, Smartsheet, and PowerShell is highly preferred.

• Familiarity with privacy and security standards such as HIPAA, HITRUST, and NIST.

• Proven history of developing and implementing security policies and procedures.

• Outstanding written and verbal communication skills.

• Capability to translate technical security concepts into understandable, non-technical language.

• Data-driven approach to establishing measurable security objectives.

• Demonstrated project management skills applied to security initiatives.

• Ability to collaborate effectively across diverse teams and stakeholders.

• Proficient in Microsoft Office tools, especially Excel, for data analysis, reporting, and compliance purposes.

• Experience in securing software development processes, including GitHub, code scanning, and AI code development.

🏝️ Benefits

• Complimentary Marathon membership for in-person and virtual care.

• Employer-sponsored life and disability insurance.

• Options for medical and dental plans.

• Vision coverage.

• Employer-funded Health Savings Account (HSA).

• Flexible Spending Account (FSA) and voluntary illness, accident, and hospitalization plans.

• 401(k) matching.

• Financial coaching available through the Employee Assistance Program.

• Paid time off for vacation and sick leave.

• Holiday schedule.

• Unlimited access to mental health benefits and EAP resources.

• Incentives for challenges and healthy lifestyle activities.

• Family-building and hormonal health benefits.

• Paid parental leave.

• Generous Paid Time Off (PTO) or Flexible Time Off (FTO).

• Paid holidays plus an additional day for personal matters.

• Supplemental life insurance.

• Spending accounts.

• 401(k) plan with employer matching and graded vesting.

• Continuing Medical Education (CME), as applicable.