Senior Security Analyst

Brown & Brown Insurance; Daytona Beach (FL); On-site; USD 120,000 - 155,000; Full time

Benefits offered by this job

Health benefits

401k

Tuition reimbursement

Paid time off

Job summary

Brown & Brown Insurance in Daytona Beach, FL is seeking a Senior Security Analyst to join our growing security team. You will monitor security alerts, investigate incidents, and support our threat intelligence and incident response efforts to improve detection and response capabilities.

The role requires 7+ years in security operations, strong knowledge of SIEM/EDR, and experience with CrowdStrike, Google SecOps, and Microsoft Log Analytics.

Qualifications

• B.S. in Information Security, Computer Science, Computer Engineering or similar technical program or equivalent experience
• At least one active security certification preferred: GCIH, GCIA, CISSP, CEH or related
• 7+ years in security operations, incident response, threat monitoring, or cyber defense role supporting a large organization
• Working knowledge of SIEM, EDR, IDS/IPS, DLP, vulnerability management, email security, and threat intelligence platforms
• Experience with Microsoft security ecosystems (Entra ID, Defender) preferred
• Experience writing queries, analyzing logs, or basic scripting preferred

Responsibilities

• Monitor alerts, events, and logs across endpoints, networks, cloud, identity, email, and apps.
• Triage, analyze, and investigate suspicious activity to determine scope and response.
• Validate and escalate incidents per IR procedures with timely documentation.
• Analyze data from SIEM, EDR, IDS/IPS, DLP, and other tools to identify threats.
• Support containment, recovery, and evidence collection during incidents.
• Leverage threat intel to assess attacker tactics and indicators of compromise.
• Tune detection content and alert logic with engineering teams to improve quality.
• Conduct threat hunting using logs and endpoint telemetry.
• Track and report incidents, findings, trends, and metrics for leadership.
• Assist vulnerability and risk analysis by correlating findings to business impact.

Skills

Security monitoring

Incident response

Threat intelligence

Threat hunting

Forensic analysis

Log analysis

Scripting

Information security frameworks

Education

B.S. in Information Security, Computer Science, or related field

Tools

CrowdStrike

Google SecOps

Microsoft Log Analytics

ServiceNow

Job description

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers.

Brown & Brown is seeking a Senior Security Analyst to join our growing team in Daytona Beach, FLor Plano, TX.

The Security Analyst supports the organization’s security posture through continuous monitoring, analysis, investigation, and response to cybersecurity threats and suspicious activity. This position within the Office of the CISO focuses on security operations, threat intelligence, incident triage, alert validation, log analysis, and coordination across security and technology teams to improve detection and response capabilities. The Security Analyst reports directly to the Global Director of Security Operations and Incident Response and helps the organization prevent, detect, contain, and respond to threats through disciplined analysis, documentation, and operational support. In addition, the security analyst is responsible for various security improvement projects.

How You Will Contribute:

• Monitor security alerts, events, and logs across endpoint, network, cloud, identity, email, and application security platforms
• Perform security triage, analysis, and investigation of suspicious activity to determine scope, impact, and appropriate response actions
• Validate and elevate security incidents in accordance with incident response procedures, ensuring timely communication and documentation
• Analyze data from SIEM, EDR, IDS/IPS, DLP, email security, and other monitoring tools to identify malicious or anomalous behavior
• Support incident response activities by collecting forensic evidence, preserving artifacts, analyzing forensic artifacts, tracking actions, and assisting with containment and recovery efforts
• Leverage threat intelligence sources and internal context to assess emerging threats, attacker tactics, and indicators of compromise relevant to the organization
• Review and tune detection content, use cases, and alert logic in partnership with engineering and platform teams to improve detection quality and reduce false positives
• Conduct recurring and ad hoc threat hunting activities using logs, endpoint telemetry, and threat intelligence to identify previously undetected threats
• Track, document, and report security incidents, investigative findings, trends, and operational metrics to support management reporting and continuous improvement
• Assist with vulnerability, exposure, and risk-related analysis by correlating findings with threat activity and business impact

Skills & Experience to be Successful:

• B.S. in Information Security, Computer Science, Computer Engineering or similar technical program or equivalent experience
• At least one active security certification preferred: GCIH, GCIA, CISSP, CEH or related
• Preferred experience using CrowdStrike, Google SecOps, Microsoft Log Analytics, and ServiceNow.
• 7+ years in a security operations, incident response, threat monitoring, or cyber defense role supporting a large organization
• Working knowledge of security monitoring and investigative technologies such as SIEM, EDR, IDS/IPS, DLP, vulnerability management, email security, and threat intelligence platforms
• Strong understanding of security operations concepts such as incident triage, alert validation, threat intelligence, kill-chain analysis, insider threat, risk assessment, and security metrics
• Familiarity with attack paths, threat vectors, attacker TTPs, indicators of compromise, and investigative methodologies
• Working knowledge of information security best practices, incident handling procedures, and common security frameworks such as NIST and MITRE ATT&CK
• Experience investigating activity in Microsoft security ecosystems, including Entra ID, Defender, and related cloud or hybrid environments preferred
• Experience with writing queries, analyzing logs, building reports, or using basic scripting for investigations and operational efficiency preferred

Teammate Benefits & Total Well-Being

We go beyond standard benefits, focusing on the total well-being of our teammates, including:

• Health Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance
• Financial Benefits: ESPP; 401k; Student Loan Assistance; Tuition Reimbursement
• Mental Health & Wellness: Free Mental Health &Enhanced Advocacy Services
• Beyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more.

Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.

The Power To Be Yourself

As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, “The Power to Be Yourself”.