Senior Security Analyst

Key Responsibilities

Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities

Endpoint Security: Own the organization’s endpoint security strategy and operations using CrowdStrike, proactively identifying risks, leading investigations, driving remediation efforts, and continuously improving endpoint protections.

Email Security: Lead the evolution of our email security program by designing advanced detection, DLP, and anti-phishing controls while continuously improving protection against emerging attack techniques

Security Leadership: Act as the security lead for cross-functional technology initiatives, providing technical guidance and ensuring security is incorporated into architecture, engineering, and operational decisions

Security Program Development: Design, implement, and continuously mature security processes across incident response, vulnerability management, identity and access management, data protection, and security monitoring

Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities

Security Tooling: Stay ahead of emerging threats and security trends, recommend and vet new tools as appropriate

Requirements

Experience: 8+ years of professional experience in cybersecurity, including experience independently leading security initiatives within cloud-first organizations.

Technical Skills:

Strong hands-on experience with Crowdstrike Falcon or similar endpoint security platforms

Expertise in Google Workspace security administration (Gmail rules, DLP, monitoring)

Expertise in advanced email security platforms (Sublime, Mimecast, Proofpoint, Abnormal, etc.)

Expertise with identity access management platforms (Okta)

Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management (Wiz experience preferred)

Experience designing security controls rather than simply administering security tools

Demonstrated ability to independently drive complex security initiatives from concept through implementation

Compliance & Privacy: Experience implementing security controls aligned with SOC 2, ISO 27001, FERPA

Mindset: Meticulous and tenacious in identifying and resolving security risks

Communication: Excellent written and verbal skills; ability to convey security concepts to both technical and non-technical audiences