Security Analyst

inMy Jet; Petaluma (CA); Hybrid; USD 100,000 - 140,000; Full time

Job summary

Solairus Aviation in Petaluma, CA, is seeking a Senior Security Analyst to protect people, systems, and data across aviation operations. You will monitor security events, respond to incidents, manage access controls, and improve tooling and documentation.

The role is full-time with hybrid work: four days in the office and one day remote, mainly business hours, with occasional on-call rotations for incidents. Prior security operations experience is required.

Qualifications

• 2–4 years of experience in security operations, IT security, or related role with security responsibilities.
• Working knowledge of SIEM, EDR, SSO, and email security platforms.
• Understanding of incident response fundamentals, common attack techniques, and log analysis.
• Strong written communication skills to document findings for technical teams and leadership.
• Ability to work independently while collaborating with a peer.
• Willingness to participate in a shared after-hours on-call rotation for security incidents.

Responsibilities

• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments.
• Participate in incident response, including containment, evidence collection, and post-incident review.
• Support identity and access management by reviewing access and enforcing least-privilege controls.
• Tune security tooling to reduce noise and improve detection quality.
• Assist with vulnerability management and remediation tracking.
• Maintain security operations documentation and reporting metrics.

Skills

Security operations

SIEM

EDR

SSO

Incidence response

Log analysis

Tools

Microsoft Sentinel

CrowdStrike Falcon

Okta

Microsoft Entra ID

Microsoft Purview

Delinea Secret Server/Privilege Manager

Mimecast

Job description

# Security AnalystSolairus AviationPetaluma, CA, USA11 days agoJob descriptionOverviewSolairus Aviation is seeking a Senior Security Analyst to help protect the people, systems, and data behind its business aviation operations. Working as a peer alongside a second Security Analyst, this role shares responsibility for day-to-day security operations, including monitoring, alert triage, incident response, identity and access hygiene, and continuous improvement of the security program. The two analysts divide workload, cover for each other, and rotate after-hours responsibilities so the function runs consistently. This is a full-time, on-site position that works primarily standard business hours with participation in a shared after-hours on-call rotation for security incidents.This position follows a hybrid schedule, with four days per week in the office and one day working from home.Essential Responsibilities/DutiesEssential Duties• Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures.• Participate in incident response, including containment, evidence collection, documentation, and post-incident review.• Support identity and access management by reviewing access, maintaining role-based group assignments, and enforcing least-privilege and privileged access controls.• Administer and tune security tooling to reduce noise and improve detection quality.• Support email security, phishing response, and security awareness training.• Assist with vulnerability management by tracking remediation of identified risks with IT partners.• Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics.• Support compliance, audit, and eDiscovery requests as needed.• Share an on-call rotation with the other Security Analyst and provide mutual coverage during absences.• Partner with the Help Desk and broader IT team on security-related tickets and user guidance.QualificationsRequired Qualifications• 2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities.• Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign-on (SSO), and email security platforms.• Understanding of incident response fundamentals, common attack techniques, and log analysis.• Strong written communication skills, including the ability to clearly document findings for technical teams and leadership.• Ability to work independently while collaborating closely with a peer.• Willingness to participate in a shared after-hours on-call rotation for security incidents.Preferred Qualifications• Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms.• Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne.• Scripting or query experience using KQL, PowerShell, or Python.• Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH.• Experience in aviation or another regulated environment with 24/7 operations.