Senior Cyber Security Analyst

Jobgether; United States; Remoto; USD 140.000 - 210.000; Tempo integral

Benefícios oferecidos por esta vaga

Remote work opportunity

Education & conference reimbursement

Professional growth

Collaborative environment

Employee support

Resumo da vaga

Jobgether is seeking a security operations leader to coordinate incident response, threat detection, and automation efforts across cloud and on-prem environments. You will work with engineering and product teams to strengthen security controls and respond to critical incidents with speed and precision.

In this role you will build and tune detection rules, mentor juniors, and stay ahead of evolving threat landscapes, including AI-enabled risks.

Qualificações

• At least five years of experience in security operations or incident response.
• Hands-on with SIEM and EDR; detection engineering and incident analysis.
• Scripting and automation with Python or PowerShell; SOAR experience.
• Cloud security across AWS, Azure, or GCP.
• Familiarity with MITRE ATT&CK and NIST frameworks.
• Strong communication and cross-team collaboration.
• Proactive learning and AI-enabled security operations.

Responsabilidades

• Serve as the primary technical contact for escalated security incidents and manage investigations.
• Monitor alerts, investigate threats, and improve detection rules and workflows.
• Develop scripts and security automation to reduce repetitive tasks.
• Conduct threat hunting and enhance coverage based on intelligence.
• Apply AI-assisted tools to prioritize investigations and improve analysis.
• Assess vulnerabilities across infrastructure, cloud services, and AI-enabled solutions.
• Evaluate and integrate security platforms to boost detection and response.
• Support audits by documenting controls and maintaining incident response playbooks.
• Collaborate with engineering and other teams to strengthen security practices.

Conhecimentos

Security operations

Incident response

Threat detection

Communication

Continuous learning

Formação

Cybersecurity certifications

Ferramentas

SIEM

EDR

SOAR

Python

PowerShell

Descrição da vaga

Accountabilities

• Security Incident Response: Serve as the primary technical contact for escalated security incidents, coordinating investigations from initial triage through containment, remediation, and post-incident reviews.
• Security Monitoring and Threat Detection: Monitor and investigate security alerts, abuse reports, and suspicious activities. Improve detection rules, correlation logic, and response workflows across SIEM, EDR, and other security platforms.
• Automation and Operational Efficiency: Develop and maintain scripts, orchestration workflows, and security automation tools to reduce repetitive tasks, streamline Level 1 operations, and improve analyst productivity.
• Threat Hunting and Detection Engineering: Conduct proactive threat hunting, validate detection capabilities, identify monitoring gaps, and continuously enhance security coverage using established frameworks and emerging threat intelligence.
• AI-Enabled Security Operations: Apply AI-assisted tools to enrich alerts, prioritize investigations, and improve analysis efficiency while monitoring evolving threats, including AI-driven attacks and the misuse of generative AI platforms.
• Vulnerability Management: Assess vulnerabilities across infrastructure, applications, cloud services, and AI-enabled solutions. Prioritize remediation efforts and validate corrective actions to reduce organizational risk.
• Security Technology and Integration: Evaluate and optimize security platforms, support the secure integration of new and existing systems, and identify technologies that improve detection, response, and operational resilience.
• Compliance and Documentation: Support audits and compliance activities by collecting evidence, documenting security controls, maintaining incident response playbooks, and assisting with remediation initiatives.
• Cross-Functional Collaboration: Work closely with engineering and other business teams to strengthen security practices, communicate risks, share expertise, and promote continuous improvement and professional development.

Requirements

• Professional Experience: At least five years of experience in security operations, incident response, cybersecurity analysis, or a closely related discipline.
• Security Monitoring Expertise: Hands-on experience with SIEM and EDR platforms, including detection engineering, alert investigation, rule tuning, and incident analysis.
• Scripting and Automation: Working knowledge of Python, PowerShell, or similar scripting languages, along with experience using SOAR platforms or security orchestration tools.
• Cloud Security: Experience monitoring and securing cloud environments, preferably across AWS, Microsoft Azure, or Google Cloud Platform.
• Security Frameworks: Familiarity with industry-standard security frameworks and methodologies, particularly MITRE ATT&CK and NIST.
• Incident Management: Strong analytical and problem-solving skills, with the ability to manage escalated incidents, assess threats, coordinate remediation, and make informed decisions under pressure.
• Communication Skills: Excellent written and verbal communication skills, including the ability to explain technical findings, brief stakeholders, and coordinate effectively with both technical and non-technical teams.
• Continuous Learning: A proactive approach to professional development and an interest in emerging cybersecurity technologies, automation, and AI-assisted security operations.
• Preferred Qualifications: Certifications such as GCIH, GCIA, GCFA, Security+, CySA+, or equivalent credentials are advantageous. Experience in regulated industries such as gaming, financial services, or healthcare is also considered an asset.

Benefits

• Competitive Compensation: Annual base salary ranging from CAD 155,000 to CAD 185,000 , depending on qualifications, experience, and other applicable factors.
• Comprehensive Benefits: Access to a broad benefits package designed to support physical, financial, and emotional well-being.
• Remote Work: A remote opportunity based in Canada, offering flexibility in your working environment.
• Education and Conference Reimbursement: Financial support for professional education, industry conferences, and ongoing skills development.
• Professional Growth: Opportunities to deepen expertise in security operations, incident response, cloud security, automation, and emerging AI security technologies.
• Collaborative Environment: Work alongside dedicated technology professionals in a relaxed, team-oriented environment.
• Employee Support: Access to resources and benefits designed to support employees through everyday needs and important life milestones.