Senior Security Analyst

Accountabilities: Lead and support investigations and response activities involving security incidents, suspicious activity, vulnerabilities, and emerging threats. Design, implement, and continuously improve security monitoring, detection, alerting, and response capabilities across AWS environments. Develop and maintain detection rules, investigation procedures, security workflows, and operational processes. Conduct post-incident reviews to identify root causes, lessons learned, control gaps, and preventative measures. Identify security exposures, vulnerabilities, misconfigurations, and compliance risks, and communicate practical recommendations to relevant stakeholders. Perform security assessments of third-party vendors, SaaS platforms, services, and technologies. Partner with Technology and Product teams to design secure solutions and strengthen existing security controls. Support vulnerability management, threat modeling, endpoint security, and broader security engineering initiatives. Provide evidence and supporting materials for compliance programs and regulatory activities. Maintain security documentation, standards, operational procedures, and related governance materials. Support security awareness initiatives and provide guidance on secure business practices. Monitor evolving threats, attacker techniques, defensive technologies, and relevant security developments. Authorize and approve user access in accordance with applicable security requirements and processes. Coordinate with relevant AI and security teams on corporate-level security program functions. Develop and maintain an accurate System Security Plan (SSP) package for the designated FedRAMP system and distribute relevant elements on a need-to-know basis. Designate and coordinate personnel responsible for critical security program functions, including incident handling and disaster recovery. Receive and assess operational alerts, updates, and status reports from team members and critical system components. Oversee the continuous monitoring program for U.S. operations and report security and privacy status to relevant external entities, including customer agencies, FedRAMP program stakeholders, and third-party assessment organizations. Requirements 5+ years of experience in security operations, security engineering, cybersecurity, or a closely related field. U.S. citizenship and residence within the United States. Strong experience in security monitoring, incident response, threat detection, and forensic investigation. Deep understanding of network security, application security, infrastructure hardening, vulnerability management, and defensive security practices. Experience deploying, managing, and automating security solutions within cloud environments. Strong knowledge of AWS architecture, AWS security services, and cloud security best practices. Experience working across macOS, Linux, and Windows environments. Strong understanding of log collection, analysis, security event monitoring, and investigation. Experience creating, maintaining, and improving security procedures and operational processes. Ability to communicate technical risks, findings, and recommendations clearly to both technical and non-technical stakeholders. Demonstrated experience supporting FedRAMP certification and continuous monitoring activities, preferably within Class D (High) or Class C (Moderate) environments. Experience supporting compliance frameworks such as SOC 2, ISO 27001, GDPR, or comparable standards. Experience with threat modeling programs is a plus. Experience building security automation workflows is a plus. Experience evaluating third-party vendors and SaaS platforms is a plus. Security certifications such as CISSP, GCIH, GSEC, Security+, AWS Certified Security – Specialty, or AWS Certified Solutions Architect are valued. Strong ownership, analytical thinking, attention to detail, calm decision-making, and the ability to work effectively with incomplete information. A continuous-learning mindset and the ability to balance strong security practices with practical business requirements. Benefits Competitive compensation package for a full-time, permanent position. Stock options/equity participation. Comprehensive health and benefits coverage. 401(k) matching. Unlimited paid vacation. Fully remote work from anywhere in the United States. Opportunity to work on cloud security, threat detection, incident response, compliance, and security operations at enterprise scale. Exposure to AWS security, FedRAMP continuous monitoring, security automation, and evolving cybersecurity challenges.