Senior Security Analyst

Brown & Brown, Inc.; Daytona Beach, Northern (FL, KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health benefits

401k

Student loan assistance

Tuition reimbursement

Paid time off

Mental health resources

Job summary

Brown & Brown, Inc. in Daytona Beach, FL or Plano, TX, seeks a Senior Security Analyst to strengthen our security posture through monitoring, analysis, and incident response.

You will work under the Office of the CISO to detect, investigate, and respond to threats across endpoints, networks, cloud, and identity. This role requires 7+ years in security operations, familiarity with SIEM/EDR, and experience with CrowdStrike, Google SecOps, and Microsoft tools.

Qualifications

• Bachelor's degree in a relevant field or equivalent experience.
• Active security certifications such as GCIH, GCIA, CISSP, CEH preferred.
• Experience with CrowdStrike, Google SecOps, Microsoft Log Analytics, and ServiceNow.
• 7+ years in a security operations, incident response, threat monitoring, or cyber defense role.

Responsibilities

• Monitor alerts, events, and logs across endpoint, network, cloud, identity, email, and application security platforms.
• Perform security triage, analysis, and investigation of suspicious activity to determine scope, impact, and actions.
• Validate and elevate security incidents per incident response procedures with timely communication and documentation.
• Analyze data from SIEM, EDR, IDS/IPS, DLP, email security, and other tools to identify malicious or anomalous behavior.
• Support incident response activities by collecting forensic evidence, preserving artifacts, and assisting containment and recovery.
• Leverage threat intelligence sources to assess emerging threats, attacker tactics, and IOCs relevant to the organization.
• Review and tune detection content, use cases, and alert logic with engineering to reduce false positives.
• Conduct recurring threat hunting using logs and endpoint telemetry to find undetected threats.
• Document incidents, investigative findings, trends, and metrics for management reporting.
• Assist with vulnerability, exposure, and risk analyses by correlating findings with threat activity.

Skills

Security operations

Incident response

Threat monitoring

Log analysis

Threat hunting

Digital forensics

Education

B.S. in Information Security/CS/Engineering

Tools

CrowdStrike

Google SecOps

Microsoft Log Analytics

ServiceNow

SIEM

EDR

Job description

Built on meritocracy, our unique company culture rewards self-starters and those who are committed to doing what is best for our customers. Brown & Brown is seeking a Senior Security Analyst to join our growing team in Daytona Beach, FL or Plano, TX. The Security Analyst supports the organization’s security posture through continuous monitoring, analysis, investigation, and response to cybersecurity threats and suspicious activity. This position within the Office of the CISO focuses on security operations, threat intelligence, incident triage, alert validation, log analysis, and coordination across security and technology teams to improve detection and response capabilities. The Security Analyst reports directly to the Global Director of Security Operations and Incident Response and helps the organization prevent, detect, contain, and respond to threats through disciplined analysis, documentation, and operational support. In addition, the security analyst is responsible for various security improvement projects.

How You Will Contribute

• Monitor security alerts, events, and logs across endpoint, network, cloud, identity, email, and application security platforms
• Perform security triage, analysis, and investigation of suspicious activity to determine scope, impact, and appropriate response actions
• Validate and elevate security incidents in accordance with incident response procedures, ensuring timely communication and documentation
• Analyze data from SIEM, EDR, IDS/IPS, DLP, email security, and other monitoring tools to identify malicious or anomalous behavior
• Support incident response activities by collecting forensic evidence, preserving artifacts, analyzing forensic artifacts, tracking actions, and assisting with containment and recovery efforts
• Leverage threat intelligence sources and internal context to assess emerging threats, attacker tactics, and indicators of compromise relevant to the organization
• Review and tune detection content, use cases, and alert logic in partnership with engineering and platform teams to improve detection quality and reduce false positives
• Conduct recurring and ad hoc threat hunting activities using logs, endpoint telemetry, and threat intelligence to identify previously undetected threats
• Track, document, and report security incidents, investigative findings, trends, and operational metrics to support management reporting and continuous improvement
• Assist with vulnerability, exposure, and risk-related analysis by correlating findings with threat activity and business impact

Skills & Experience to be Successful

• B.S. in Information Security, Computer Science, Computer Engineering or similar technical program or equivalent experience
• At least one active security certification preferred: GCIH, GCIA, CISSP, CEH or related
• Preferred experience using CrowdStrike, Google SecOps, Microsoft Log Analytics, and ServiceNow.
• 7+ years in a security operations, incident response, threat monitoring, or cyber defense role supporting a large organization
• Working knowledge of security monitoring and investigative technologies such as SIEM, EDR, IDS/IPS, DLP, vulnerability management, email security, and threat intelligence platforms
• Strong understanding of security operations concepts such as incident triage, alert validation, threat intelligence, kill‑chain analysis, insider threat, risk assessment, and security metrics
• Familiarity with attack paths, threat vectors, attacker TTPs, indicators of compromise, and investigative methodologies
• Working knowledge of information security best practices, incident handling procedures, and common security frameworks such as NIST and MITRE ATT&CK
• Experience investigating activity in Microsoft security ecosystems, including Entra ID, Defender, and related cloud or hybrid environments preferred
• Experience with writing queries, analyzing logs, building reports, or using basic scripting for investigations and operational efficiency preferred

Teammate Benefits & Total Well-Being

• Health Benefits: Medical/Rx, Dental, Vision, Life Insurance, Disability Insurance
• Financial Benefits: ESPP; 401k; Student Loan Assistance; Tuition Reimbursement
• Mental Health & Wellness: Free Mental Health & Enhanced Advocacy Services
• Beyond Benefits: Paid Time Off, Holidays, Preferred Partner Discounts and more.

Not reflective of all benefits. Enrollment waiting periods or eligibility criteria may apply to certain benefits. Benefit details and offerings may vary for subsidiary entities or in specific geographic locations.

We think of ourselves as a team, so we have teammates - not employees. We strive to attract people who are competitive, driven, and disciplined.

The Power To Be Yourself As an Equal Opportunity Employer, we are committed to fostering an inclusive environment comprised of people from all backgrounds, with a variety of experiences and perspectives, guided by our Diversity, Inclusion & Belonging (DIB) motto, “The Power to Be Yourself”.

Founded in 1939 as a small, two-partner firm, Brown & Brown (NYSE: BRO) and our team of companies have grown into one of the world’s largest insurance brokerages while staying true to our foundation of trust, resilience, and delivering results.

With a team that is as connected locally as it is globally, our high-performing, highly collaborative team delivers innovative risk and insurance solutions.

We look for individuals who embrace our culture, thrive in a collaborative environment, are driven to grow and succeed, and are committed to always doing what is right.

With a unique culture built on integrity, superior capabilities and grit, we value teamwork, trust and courage.

Everything we do is about the greater “WE”—never “me.”

While diverse in abilities and experience, we are all connected through our core values, a commitment to our local communities and a shared mission—always doing what is best for our customers.

Brown & Brown and its affiliates maintain an internal recruiting team responsible for filling open roles posted to the public.