Security Analyst

Solairus Aviation, Inc.; Petaluma (CA); Hybrid; USD 110,000 - 150,000; Full time

Job summary

Solairus Aviation, Inc. is seeking a Senior Security Analyst to protect people, systems, and data behind its business aviation operations. You will work alongside a peer in day-to-day security operations, including monitoring, incident response, IAM hygiene, and program improvement.

This is a full-time, on-site role with a hybrid schedule (four days in office, one day from home). You will share after-hours coverage in a rotation and partner with IT to handle security tickets and user guidance,

Qualifications

• 2–4 years of experience in security operations or related roles.
• Working knowledge of SIEM, EDR, SSO, and email security platforms.
• Understanding incident response fundamentals and log analysis.
• Strong written communication for technical leadership.
• Ability to work independently while collaborating with a peer.
• Willingness to participate in after-hours on-call rotation.

Responsibilities

• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments.
• Participate in incident response including containment, evidence collection, and post-incident review.
• Support identity and access management with RBAC and least-privilege controls.
• Administer and tune security tooling to reduce noise and improve detection.
• Support email security, phishing response, and security awareness training.
• Assist with vulnerability management and remediation tracking.
• Maintain and improve security operations documentation and metrics.
• Support compliance, audit, and eDiscovery requests as needed.
• Share on-call rotation with the other analyst and provide mutual coverage.
• Collaborate with Help Desk and IT on security tickets and guidance.

Skills

Security operations

SIEM

EDR

SSO

Email security

Written communication

Independence with collaboration

On-call rotation

Tools

Microsoft Sentinel

CrowdStrike Falcon

Okta

Microsoft Entra ID

Microsoft Purview

Delinea Secret Server/Privilege Manager

Mimecast

Zendesk

incident.io

NinjaOne

KQL

PowerShell

Python

Job description

Overview

Solairus Aviation is seeking a Senior Security Analyst to help protect the people, systems, and data behind its business aviation operations. Working as a peer alongside a second Security Analyst, this role shares responsibility for day‑to‑day security operations, including monitoring, alert triage, incident response, identity and access hygiene, and continuous improvement of the security program. The two analysts divide workload, cover for each other, and rotate after‑hours responsibilities so the function runs consistently. This is a full‑time, on‑site position that works primarily standard business hours with participation in a shared after‑hours on‑call rotation for security incidents.

This position follows a hybrid schedule, with four days per week in the office and one day working from home.

Essential Responsibilities/Duties

Essential Duties

• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures.

• Participate in incident response, including containment, evidence collection, documentation, and post‑incident review.

• Support identity and access management by reviewing access, maintaining role‑based group assignments, and enforcing least‑privilege and privileged access controls.

• Administer and tune security tooling to reduce noise and improve detection quality.

• Support email security, phishing response, and security awareness training.

• Assist with vulnerability management by tracking remediation of identified risks with IT partners.

• Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics.

• Support compliance, audit, and eDiscovery requests as needed.

• Share an on‑call rotation with the other Security Analyst and provide mutual coverage during absences.

• Partner with the Help Desk and broader IT team on security‑related tickets and user guidance.

Qualifications

Required Qualifications

• 2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities.

• Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign‑on (SSO), and email security platforms.

• Understanding of incident response fundamentals, common attack techniques, and log analysis.

• Strong written communication skills, including the ability to clearly document findings for technical teams and leadership.

• Ability to work independently while collaborating closely with a peer.

• Willingness to participate in a shared after‑hours on‑call rotation for security incidents.

Preferred Qualifications

• Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms.

• Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne.

• Scripting or query experience using KQL, PowerShell, or Python.

• Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH.

• Experience in aviation or another regulated environment with 24/7 operations.