Security Analyst

Solairus Aviation; Penngrove (CA); Hybrid; USD 110,000 - 170,000; Full time

Job summary

Solairus Aviation is seeking a Senior Security Analyst to help protect people, systems, and data behind its operations. You will work with a peer to monitor security, respond to incidents, and continuously improve the program.

The role is full-time, on-site with hybrid scheduling—four days in the office and one day work‑from‑home. You will handle alert triage, incident response, IAM hygiene, and security tooling tuning, while coordinating with IT and Help Desk.

Qualifications

• 2–4 years of experience in security operations, IT security, or a related role with security responsibilities.
• Working knowledge of SIEM, EDR, SSO, and email security platforms.
• Understanding of incident response fundamentals, attack techniques, and log analysis.
• Strong written communication and ability to document findings for technical teams and leadership.
• Ability to work independently while collaborating with a peer and participate in after‑hours on-call rotation.

Responsibilities

• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments.
• Participate in incident response including containment, evidence collection, and post‑incident review.
• Support identity and access management by reviewing access and enforcing least‑privilege controls.
• Administer and tune security tooling to reduce noise and improve detection quality.
• Support email security, phishing response, and security awareness training.
• Assist with vulnerability management by tracking remediation with IT partners.
• Maintain and improve security operations documentation and reporting metrics.
• Support compliance, audit, and eDiscovery requests as needed.
• Share an on‑call rotation with a peer and provide coverage during absences.
• Partner with Help Desk and IT on security tickets and user guidance.

Skills

Security operations

SIEM

EDR

IAM/SSO

Incident response

Tools

Microsoft Sentinel

CrowdStrike Falcon

Okta

Microsoft Entra ID

Microsoft Purview

Delinea Secret Server/Privilege Manager

Mimecast

Zendesk

incident.io

NinjaOne

Job description

Solairus Aviation is seeking a Senior Security Analyst to help protect the people, systems, and data behind its business aviation operations. Working as a peer alongside a second Security Analyst, this role shares responsibility for day-to-day security operations, including monitoring, alert triage, incident response, identity and access hygiene, and continuous improvement of the security program. The two analysts divide workload, cover for each other, and rotate after-hours responsibilities so the function runs consistently. This is a full-time, on-site position that works primarily standard business hours with participation in a shared after-hours on-call rotation for security incidents.

This position follows a hybrid schedule, with four days per week in the office and one day working from home.

Essential Duties

• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures.
• Participate in incident response, including containment, evidence collection, documentation, and post-incident review.
• Support identity and access management by reviewing access, maintaining role-based group assignments, and enforcing least-privilege and privileged access controls.
• Administer and tune security tooling to reduce noise and improve detection quality.
• Support email security, phishing response, and security awareness training.
• Assist with vulnerability management by tracking remediation of identified risks with IT partners.
• Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics.
• Support compliance, audit, and eDiscovery requests as needed.
• Share an on-call rotation with the other Security Analyst and provide mutual coverage during absences.
• Partner with the Help Desk and broader IT team on security-related tickets and user guidance.

Required Qualifications

• 2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities.
• Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign-on (SSO), and email security platforms.
• Understanding of incident response fundamentals, common attack techniques, and log analysis.
• Strong written communication skills, including the ability to clearly document findings for technical teams and leadership.
• Ability to work independently while collaborating closely with a peer.
• Willingness to participate in a shared after-hours on-call rotation for security incidents.

Preferred Qualifications

• Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms.
• Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne.
• Scripting or query experience using KQL, PowerShell, or Python.
• Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH.
• Experience in aviation or another regulated environment with 24/7 operations.