Senior Associate, IT Security

Role overview Carry out day-to-day security operations across monitoring, incident response, vulnerability management, phishing analysis, and audit support. You’ll investigate security signals, coordinate remediation with technical teams and a managed security provider, and maintain reliable operational records and workflows.

Responsibilities - Triage alerts and investigate events with the security operations provider; contribute to incident containment, evidence gathering, timelines, and documentation across endpoint, cloud, identity, and email environments. - Review logs and telemetry from endpoint detection, SIEM, cloud security, email, and web security tools to identify threats or unusual activity. - Track provider queue health, response targets, and escalation quality; recommend process or alert tuning improvements. - Maintain incident playbooks and runbooks, and produce after-action notes and operational metrics. - Run vulnerability workflows from scan review and finding prioritization through remediation tracking, service-level reporting, and risk acceptance coordination. - Coordinate remediation with infrastructure, cloud, and application teams, prioritizing exposures by exploitability, business impact, and regulatory significance. - Support phishing investigations, email response, audit evidence, and attack-surface reviews, including stale assets, excessive permissions, and exposed credentials.

Requirements - The source describes a hands-on security operations practitioner role but does not provide a complete, reliable list of required experience or qualifications.

Nice to have - Experience in a regulated sector such as financial services, insurance, or reinsurance. - Security certifications such as Security+, CySA+, GSEC, Microsoft security operations, AWS Security, or practical penetration-testing credentials.

Benefits and work setup - Published base salary range: $110,000–$115,000 USD, adjusted by experience and location. - Annual bonus eligibility and a benefits package are described; specific benefit details are not provided.