Senior Information Security Analyst - IR & Automation

Allegiant; Minneapolis (MN); On-site; USD 108,000 - 131,000; Full time

Benefits offered by this job

Profit Sharing

Medical Travel Reimbursement

401K with an employer match

Employee Stock Purchase Plan

Paid vacation, holidays, and sick time

Tuition Reimbursement

Job summary

Allegiant in Minneapolis, MN is seeking a senior individual contributor on the cybersecurity operations team to own day-to-day operation, tuning, and continuous improvement of the enterprise cybersecurity toolset. This role leads advanced detection and response across endpoint, identity, application and cloud surfaces; and translates threat intelligence into prioritized remediation for owners.

The role also drives investigations, builds automation to reduce manual tasks, mentors analysts, and

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering or related field; equivalent experience.
• CISSP, CISM, OSCP or related certifications.
• Minimum six years of information security experience.
• Minimum two years of project or team lead experience.
• Authorized to work in the US; must pass a background check.

Responsibilities

• Operate and tune the enterprise EDR platform; investigate escalated detections and drive containment.
• Develop and maintain detections, exclusions, and response policies; validate coverage.
• Monitor agent health and coverage and close gaps with platform teams.
• Design and maintain automation playbooks to reduce manual security tasks.
• Onboard log sources, validate parsing, and ensure data retention for monitoring and compliance.
• Lead threat intelligence consumption and translate into detections and actions.

Skills

Cybersecurity experience

Security operations center

Incident response

Automation development

Threat hunting

Education

Bachelor's Degree

Master's degree

Tools

EDR

SIEM

Threat intelligence platforms

Job description

Allegiant in Minneapolis, MN is seeking a senior individual contributor on the cybersecurity operations team to own day-to-day operation, tuning, and continuous improvement of the enterprise cybersecurity toolset. This role leads advanced detection and response across endpoint, identity, application and cloud surfaces; and translates threat intelligence into prioritized remediation for owners.

The role also drives investigations, builds automation to reduce manual tasks, mentors analysts, and