Senior Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Manage the daily security and compliance functions for Sola’s payment gateway and switch, which includes a PCI DSS 4.0.1 cardholder data environment.

• Conduct daily reviews of security logs across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls.

• Maintain ticket evidence, monitor exceptions, and resolve coverage gaps alongside related incidents.

• Oversee the PCI DSS and SOC 2 control calendar, including recurring control tasks, audit evidence, overdue actions, ASV scans, remediation, rescans, and access reviews.

• Assist internal and external auditors with evidence requests.

• Manage XDR and file integrity monitoring configurations and facilitate remediation efforts.

• Track Cognito authentication failures, suspicious login attempts, and indicators of account takeovers.

• Confirm GuardDuty coverage across AWS accounts and regions while monitoring Sumo Logic logs, alerts, and dashboards.

• Provision, alter, and revoke access; implement least privilege and MFA; and coordinate access certifications.

• Head security incident triage and investigation, authorized containment, resolution coordination, timelines, post-incident reports, and root cause analyses.

• Analyze firewall anomalies, uphold rule justifications and approvals, and coordinate monthly rule reviews.

• Maintain Confluence procedures and incident runbooks while providing monthly security and compliance metrics.

• Identify control and detection gaps, propose enhancements, and mentor less experienced team members.

⛳️ Requirements

• 3-5 years of practical experience in security operations or a related IT security role, encompassing independent alert investigation, incident triage, and identity administration.

• Hands-on experience with AWS, particularly GuardDuty and Cognito.

• Familiarity with SIEM queries, XDR, Windows/Linux logs, and network security; experience with comparable products is acceptable.

• Understanding of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.

• Capability to work autonomously, manage recurring compliance deadlines, and prioritize conflicting demands.

• Strong skills in ticket documentation along with excellent written and verbal communication abilities.

• Willingness to participate in after-hours incident response coverage, including weekend and holiday backup rotation.

• Experience in the payments sector or another PCI DSS regulated environment is preferred.

• A Bachelor's degree in Information Security, Computer Science, or a related discipline is preferred.

• Relevant security certifications are preferred, such as CompTIA Security+, CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP.

• Hands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic is preferred.

• Scripting experience in Python or Node.js is preferred.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance.

• Flexible work hours and remote work options.

• Opportunities for professional development and certifications.

• Generous paid time off policy.