Security Administrator

Posh; United States; Remote; USD 70,000 - 100,000; Full time

Job summary

Posh is seeking a Security Administrator / SOC Analyst to be on the front line of our day-to-day security operations. You will triage alerts, hunt for threats, and manage security tooling across the company, working with senior staff for mentorship.

This role offers exposure to security operations, compliance activities, and a growing AI-focused environment where your work is visible and impactful.

Qualifications

• 1–3 years of experience in a security operations, SOC analyst, security administration, or similar IT security role
• Hands‑on experience with a SIEM Platform, ideally CrowdStrike Falcon Next‑Gen SIEM (alert triage, working with detections, log searching/querying); experience with CrowdStrike Falcon endpoint protection and cloud security modules is a plus
• Familiarity with Google Cloud Platform (GCP), including its security and logging services
• Experience analyzing log data to identify suspicious or anomalous activity and investigating alerts, with support from senior team members on complex cases
• Familiarity with security fundamentals: endpoint protection, alert triage, incident response basics, and vulnerability management
• Strong written and verbal communication skills — you'll interact with non‑technical teammates frequently
• Willingness and ability to participate in an on‑call rotation

Responsibilities

• Operate and administer our CrowdStrike Falcon Next-Gen SIEM — the core of this role. Monitor, triage, and respond to alerts; tune existing detections and assist in building new detection rules and dashboards with guidance from senior security staff; and help manage log ingestion sources across the organization
• Perform threat and anomaly hunting across SIEM log data to proactively identify risks before they become incidents
• Administer, configure, and troubleshoot the broader CrowdStrike platform — including endpoint protection/anti-virus and cloud security (CSPM) components — to ensure continuous coverage across the organization
• Help manage and monitor security within our Google Cloud Platform (GCP) environment, including supporting security findings reviews in Security Command Center
• Serve as the first point of contact for day-to-day security questions from employees
• Assist with compliance team efforts, including evidence gathering and controls support for SOC 2 audits
• Help document security processes, procedures, and educational materials for internal teams
• Participate in the security team's on-call rotation, including occasional after-hours support

Skills

Incident response

SIEM operations

Threat hunting

Log analysis

Security fundamentals

On-call readiness

Communication skills

Tools

CrowdStrike Falcon

JamfPro

Google Cloud Platform

Job description

About the Role

We're expanding our security team with a Security Administrator / SOC Analyst. You'll be the front line of Posh's day-to-day security operations: triaging alerts, hunting for threats and anomalies in log data, managing our security tooling, and fielding security questions from teams across the company.

This hire reflects Posh's continued investment in security as we scale. Working alongside senior security staff who will provide support and mentorship, you'll take point on daily security operations while contributing to strategic initiatives — expanding our threat hunting and detection capabilities, assisting in our compliance program, and supporting our SOC 2 audits. If you're an early-career security professional looking for broad exposure to security operations, compliance, and IT at a growing AI company, this is a role where your work is visible, your impact is immediate, and you'll learn directly from experienced practitioners.

What You'll Do

• Operate and administer our CrowdStrike Falcon Next-Gen SIEM — the core of this role. Monitor, triage, and respond to alerts; tune existing detections and assist in building new detection rules and dashboards with guidance from senior security staff; and help manage log ingestion sources across the organization
• Perform threat and anomaly hunting across SIEM log data to proactively identify risks before they become incidents
• Administer, configure, and troubleshoot the broader CrowdStrike platform — including endpoint protection/anti-virus and cloud security (CSPM) components — to ensure continuous coverage across the organization
• Help manage and monitor security within our Google Cloud Platform (GCP) environment, including supporting security findings reviews in Security Command Center
• Serve as the first point of contact for day-to-day security questions from employees
• Assist with compliance team efforts, including evidence gathering and controls support for SOC 2 audits
• Help document security processes, procedures, and educational materials for internal teams
• Participate in the security team's on-call rotation, including occasional after-hours support

What We're Looking For

Required:

• 1–3 years of experience in a security operations, SOC analyst, security administration, or similar IT security role
• Hands‑on experience with a SIEM Platform, ideally CrowdStrike Falcon Next‑Gen SIEM (alert triage, working with detections, log searching/querying); experience with CrowdStrike Falcon endpoint protection and cloud security modules is a plus
• Familiarity with Google Cloud Platform (GCP), including its security and logging services
• Experience analyzing log data to identify suspicious or anomalous activity and investigating alerts, with support from senior team members on complex cases
• Familiarity with security fundamentals: endpoint protection, alert triage, incident response basics, and vulnerability management
• Strong written and verbal communication skills — you'll interact with non‑technical teammates frequently
• Willingness and ability to participate in an on‑call rotation

Nice to Have:

• Experience with JamfPro
• Exposure to compliance frameworks such as SOC 2, NIST, or ISO 27001
• Experience with DLP tooling or PII protection practices
• Experience with CrowdStrike query language (CQL/LogScale) or similar SIEM query languages
• Relevant certifications (e.g., Security+, GSEC, GCIH, CrowdStrike certifications such as CCFA/CCFH, Google Cloud Security certifications)
• Interest in AI security, responsible AI practices, or securing AI/ML systems

Why Join Posh's Security Team

• Real impact, real mentorship: You'll be a foundational member of a growing security function — not a cog in a large SOC — learning directly from senior security leadership
• Breadth of exposure: Work across security operations, compliance, and cross‑functional initiatives with sales and engineering
• Growth path: As Posh scales, so will the security team — this role is positioned to grow into greater ownership and seniority over time
• Mission that matters: Help protect sensitive financial data and shape trustworthy AI practices in a regulated industry

About Posh

At Posh, we’re revolutionizing the way financial institutions serve their communities.

Through innovative AI solutions, we make customer support more accessible, fast, and enjoyable — for both callers and staff members. Our AI assistants span digital (web and mobile) and voice (phone) channels, while our internal‑facing solutions directly augment staff members’ ability to serve.

We believe the most successful AI products are built on a symbiotic relationship between humans and AI — each empowered to put their best foot forward. The bar is low, but the ceiling is high. Come build with us.

Posh does not discriminate in employment on the basis of race, color, religion, sex (including pregnancy and gender identity), national origin, political affiliation, sexual orientation, marital status, disability, genetic information, age, membership in an employee organization, retaliation, parental status, military service, or other non‑merit factor.