Security Analyst

Janus Henderson Investors U.S.; Denver (CO); Hybrid; USD 80,000 - 120,000; Full time

Benefits offered by this job

Health benefits

Wellbeing program (Wellhub)

Volunteer time off

Professional development support

Parental leave benefits

Job summary

Janus Henderson Investors U.S. is seeking a security operations professional to focus on cyber incident response and vulnerability management. You will triage alerts, determine severity, and coordinate remediation with development and operations teams in a hybrid Denver-area environment.

The role requires experience with SIEM/EDR, IAM monitoring, ITSM tooling, and strong written/verbal communication. On-call rotations and weekend work may be needed. Hybrid work options available.

Qualifications

• 2+ years in an Information Security role with proven experience in Security Operations or Threat Analysis roles.
• Proven hands-on experience with SIEM and EDR platforms.
• Analytical mindset and knowledge of TTPs, malware behaviour, and incident handling methodologies.
• Familiarity with IAM concepts and monitoring — able to review user permissions, detect abuse, and flag suspicious behaviour or policy violations.
• Experience performing alert triage and incident escalation within defined SLAs, using ITSM tooling such as ServiceNow and documentation platforms such as Confluence.
• Strong collaboration skills working with application and infrastructure teams within a security context.
• In-depth working knowledge of security best practices and frameworks (e.g., MITRE ATT&CK, OWASP Top 10, NIST).
• Excellent written and verbal communication skills, with the ability to produce clear work notes, handover reports, and stakeholder updates.
• Ability to manage multiple projects and tasks.
• Analytical ability to capture and summarise information, find solutions to various tactical and strategic problems and prioritise work.
• Exposure to public cloud infrastructure (SaaS, IaaS, and PaaS).

Responsibilities

• Perform alert triage of security alerts to validate and prioritise incidents.
• Determine severity, impact, and root cause of incidents using MSSP and internal tools.
• Conduct initial triage and assessment of incidents to determine severity and impact.
• Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and EDR systems, in a timely manner meeting SLAs.
• Perform routine reviews of IAM to identify and address abuse of permissions by authorised users.
• Monitor for policy violations and report suspicious user behaviour.
• Assist in isolating affected systems to contain threats under supervision.
• Work notes and artefact logging in ITSM (ServiceNow / Confluence) incident tickets.
• Facilitate handovers to other SOC team members at the end of a shift, ensuring a smooth transition of ongoing incidents.
• Provide clear and timely updates to other SOC members and escalation points.
• Seek guidance from and elevate where necessary to Mid-level Tier 2 analysts.
• Support daily security operations, by conducting regular vulnerability scans, analyse resulting reports and triage identified issues to ensure timely risk mitigation.
• Lead the end-to-end process of identifying, assessing, and coordinating the remediation of vulnerabilities across applications, infrastructure, and cloud environments, working closely with development and operations teams to implement effective and sustainable security controls.
• Optimize vulnerability scanning profiles, dashboards, and reports to ensure comprehensive coverage and actionable insights, while analyzing data to prioritize risks and provide clear remediation guidance.
• Contribute to the continuous improvement of vulnerability management processes, policies, and procedures, including supporting incident response activities and aligning with industry best practices.
• Stay up-to-date on the latest cyber security threats, vulnerabilities, and attack techniques.
• Participate in on-call rotations and provide triage and escalation support.
• Flexible working hours may require scheduled work on weekends and/or holidays, including being on-call.
• Participate in handling queries from the security inbox, ensuring timely response to security-related inquiries.
• Carry out other duties as assigned

Skills

SIEM platforms

EDR platforms

IAM monitoring

ITSM tooling

Confluence

ServiceNow

Security best practices

MITRE ATT&CK

Strong communication

Cloud (SaaS/IaaS/PaaS)

Tools

ServiceNow

Confluence

SIEM

EDR

Job description

This position will be posted for a minimum of five calendar days internally. All internal applicants are required to inform your current supervisor/manager prior to applying. Internal applicants are required to be in \"good standing\" in your current role, which is defined as a performance rating of \"met all objectives\" or higher. You cannot be on a current performance improvement plan or written warning for any reason and must have been in your current role for a minimum of 6 months, unless otherwise approved for an early transfer by your current leader and the People Department.

Your opportunity

This role will focus on Cyber Incident Response and Vulnerability Management

Incident response and management

• Perform alert triage of security alerts to validate and prioritise incidents.
• Determine severity, impact, and root cause of incidents using MSSP and internal tools.
• Conduct initial triage and assessment of incidents to determine severity and impact.
• Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and endpoint detection and response (EDR) systems, in a timely manner meeting SLAs.
• Perform routine reviews of IAM to identify and address abuse of permissions by authorised users.
• Monitor for policy violations and report suspicious user behaviour.
• Assist in isolating affected systems to contain threats under supervision.

Reporting, documentation, and communication

• Work notes and artefact logging in ITSM (ServiceNow / Confluence) incident tickets.
• Facilitate handovers to other SOC team members at the end of a shift, ensuring a smooth transition of ongoing incidents.
• Provide clear and timely updates to other SOC members and escalation points.
• Seek guidance from and elevate where necessary to Mid-level Tier 2 analysts.

Vulnerability Management

• Support daily security operations, by conducting regular vulnerability scans, analyse resulting reports and triage identified issues to ensure timely risk mitigation. Lead the end-to-end process of identifying, assessing, and coordinating the remediation of vulnerabilities across applications, infrastructure, and cloud environments, working closely with development and operations teams to implement effective and sustainable security controls.
• Optimize vulnerability scanning profiles, dashboards, and reports to ensure comprehensive coverage and actionable insights, while analyzing data to prioritize risks and provide clear remediation guidance.
• Contribute to the continuous improvement of vulnerability management processes, policies, and procedures, including supporting incident response activities and aligning with industry best practices.

Other

• Stay up-to-date on the latest cyber security threats, vulnerabilities, and attack techniques.
• Participate in on-call rotations and provide triage and escalation support.
• Flexible working hours may require scheduled work on weekends and/or holidays, including being on-call.
• Participate in handling queries from the security inbox, ensuring timely response to security-related inquiries.
• Carry out other duties as assigned

What to expect when you join our firm

• Hybrid working and reasonable accommodations
• Generous Holiday policies
• Excellent Health and Wellbeing benefits including corporate membership to Wellhub
• Paid volunteer time to step away from your desk and into the community
• Support to grow through professional development courses, tuition/qualification reimbursement and more
• Maternal/paternal leave benefits and family services
• Unique employee events and programs including a 14er challenge
• Complimentary beverages, snacks and all employee Happy Hours

Must have skills

• 2+ years in an Information Security role with proven experience in Security Operations or Threat Analysis roles
• Proven hands-on experience with SIEM and EDR platforms
• Analytical mindset and knowledge of TTPs, malware behaviour, and incident handling methodologies.
• Familiarity with IAM concepts and monitoring — able to review user permissions, detect abuse, and flag suspicious behaviour or policy violations.
• Experience performing alert triage and incident escalation within defined SLAs, using ITSM tooling such as ServiceNow and documentation platforms such as Confluence.
• Strong collaboration skills working with application and infrastructure teams within a security context
• In-depth working knowledge of security best practices and frameworks (e.g., MITRE ATT&CK, OWASP Top 10, NIST)
• Excellent written and verbal communication skills, with the ability to produce clear work notes, handover reports, and stakeholder updates.
• Ability to manage multiple projects and tasks.
• Analytical ability to capture and summarise information, find solutions to various tactical and strategic problems and prioritise work
• Exposure to public cloud infrastructure (SaaS, IaaS, and PaaS)

Nice to have skills

• 1+ years of experience within Incident Response and/or Security Operations
• Scripting or automation experience (e.g., Python, PowerShell, KQL) to enhance SOC playbooks, enrich alerts, or reduce manual triage effort.
• Exposure to SOAR platforms and use-case development for automating repeatable response actions.
• Experience working alongside an MSSP or within a co-managed SOC model.
• Familiarity with Threat Intelligence platforms (e.g., OpenCTI, Recorded Future, MISP) and applying CTI to detection and hunting.
• Relevant Information Security certifications (e.g., CompTIA Security+,