Senior Business Process Analyst

Jobtailor; Sandy (UT); On-site; USD 90,000 - 140,000; Full time

Job summary

Jobtailor in Utah seeks a seasoned security operations professional to lead first-response investigations and triage CVEs using CVSS within a risk-based context.

You will maintain vulnerability backlogs, respond to security questionnaires, and develop standard security responses while supporting pre-sales discussions and reporting to engineering leadership.

Qualifications

• 5+ years of related experience with a Bachelor’s degree in Computer Science or technical discipline; or 3–4 years and a Master’s degree; or equivalent work experience.
• Significant experience in a security operations, threat analysis, or intelligence role.
• Strong understanding of network protocols, traffic analysis, and adversary behaviour.
• Experience with SIEM, IDS/IPS, and security monitoring platforms — Splunk, Elastic, or equivalent.
• Ability to triage and score vulnerabilities with contextual judgment.
• Clear, precise written communication.
• Sound independent judgment.
• Calm under pressure.
• Collaborative by default.

Responsibilities

• Lead first-response investigation on security incidents.
• Triage and score incoming CVEs using CVSS and contextual risk assessment.
• Maintain the vulnerability tracking backlog in Jira.
• Respond to customer security questionnaires and audit evidence requests.
• Develop and maintain a library of standard security responses.
• Support pre‑sales security conversations.
• Produce regular security metrics and status reporting for engineering leadership.
• Maintain internal security knowledge base, runbooks, and process documentation.
• Support compliance evidence collection for SOC2, ISO 27001, and related frameworks.

Skills

Security operations

Threat analysis

Incident response

Network protocols

SIEM/IDS/IPS

Vulnerability triage

Written communication

Independent judgment

Collaboration

Education

Bachelor's degree in CS or related

Master's degree

Tools

Splunk

Elastic

Job description

Responsibilities

• Lead first-response investigation on security incidents.
• Triage and score incoming CVEs using CVSS and contextual risk assessment.
• Maintain the vulnerability tracking backlog in Jira.
• Respond to customer security questionnaires and audit evidence requests.
• Develop and maintain a library of standard security responses.
• Support pre‑sales security conversations.
• Produce regular security metrics and status reporting for engineering leadership.
• Maintain internal security knowledge base, runbooks, and process documentation.
• Support compliance evidence collection for SOC2, ISO 27001, and related frameworks.

Qualifications

• Minimum of 5 years of related experience with a Bachelor’s degree in Computer Science or technical discipline; or 3–4 years and a Master’s degree; or equivalent work experience.
• Significant experience in a security operations, threat analysis, or intelligence role.
• Strong understanding of network protocols, traffic analysis, and adversary behaviour.
• Experience with SIEM, IDS/IPS, and security monitoring platforms — Splunk, Elastic, or equivalent.
• Ability to triage and score vulnerabilities with contextual judgment.
• Clear, precise written communication.
• Sound independent judgment.
• Calm under pressure.
• Collaborative by default.

Certifications & Qualifications

SOC2, ISO 27001