Security Analyst

Role overview Own day-to-day security operations for a growing information security program. The work spans monitoring and investigation, access governance, vulnerability remediation, vendor risk, cloud and SaaS security, and audit readiness, with opportunities to improve how security issues are prevented and resolved.

Responsibilities - Investigate alerts and suspicious activity across endpoint, identity, productivity, data protection, and other security systems; document findings and escalate when needed. - Prioritize vulnerabilities, access concerns, and control gaps by weighing exposure, exploitability, and business impact, then coordinate remediation across internal teams and vendors. - Verify account provisioning and removal, run recurring access reviews, and check privileged access and managed service provider handoffs. - Improve data loss prevention controls and external sharing practices using observed incident patterns, while working with teams to address underlying workflow issues. - Strengthen detection coverage and logging, support security work in Azure and Kubernetes, and maintain evidence for SOC 2 and HITRUST assessments. - Maintain vendor reviews, security workflows, recurring controls, and operational runbooks.

Requirements - Strong investigative judgment: able to form and test hypotheses from incomplete telemetry and decide what needs attention or escalation. - Practical risk assessment skills that account for exploitability, business impact, exposure, and operational constraints. - Clear writing for incident records, audit evidence, and concise explanations of technical findings to nontechnical leaders. - Ownership and follow-through when coordinating work across teams and vendors, with sound judgment about when to involve security leadership or Legal.

Nice to have - Python or PowerShell automation experience, or depth in detection engineering and query tuning. - Systems administration or IT generalist experience involving identity, endpoints, SaaS integrations, or AI platform security. - Familiarity with audit or GRC programs, SOC 2 evidence, vendor assessments, CAIQ responses, or security terms in DPAs and BAAs.

Benefits and work setup - Remote within the United States; employees must live and perform all work in the country. - The listed base salary range is $110,000–$140,000, with a broader package that includes health, dental and vision coverage, an annual cash incentive, 401(k) match, flexible paid time off, and access to care navigation services for employees and dependents.