Senior Security Analyst

Janus Henderson Group; Denver, Northern (CO, KY); Hybrid; USD 100,000 - 130,000; Full time

Job summary

Janus Henderson is seeking an experienced Incident Response Analyst to triage and manage security alerts, determine severity, and coordinate containment and remediation.

You will monitor SIEM/EDR, work with MSSP or internal teams, document findings in ITSM and Confluence, and participate in on-call rotations.

Hybrid work in the United States with competitive benefits and growth opportunities.

Qualifications

• 2+ years in Information Security with SOC/Threat Analysis.
• Hands-on experience with SIEM and EDR.
• Knowledge of IAM concepts and monitoring.
• Experience with ITSM tooling like ServiceNow.

Responsibilities

• Perform alert triage of security alerts to validate and prioritise incidents.
• Determine severity, impact, and root cause of incidents using MSSP and internal tools.
• Conduct initial triage and assessment of incidents to determine severity and impact.
• Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and EDR systems, in a timely manner meeting SLAs.
• Perform routine reviews of IAM to identify and address abuse of permissions by authorised users.
• Monitor for policy violations and report suspicious user behaviour.
• Assist in isolating affected systems to contain threats under supervision.

Skills

Security Operations

Incident Triage

Threat Analysis

IAM Monitoring

SLAs & ITSM

Collaboration

MITRE ATT&CK

Cloud Exposure

Communication Skills

On-Call

Tools

ServiceNow

Confluence

SIEM Platforms

EDR Platforms

Job description

Select how often (in days) to receive an alert:

A career at Janus Henderson is more than a job, it’s about investing in a brighter future together .

Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.

Our Values are key to driving our success, and are at the heart of everything we do:

Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust

If our mission, values, and purpose align with your own, we would love to hear from you!

Your opportunity

Incident response and management

• Perform alert triage of security alerts to validate and prioritise incidents.
• Determine severity, impact, and root cause of incidents using MSSP and internal tools.
• Conduct initial triage and assessment of incidents to determine severity and impact.
• Monitor and respond to security alerts and events generated by security tools and technologies, including SIEM, IDS/IPS, firewalls, email, and endpoint detection and response (EDR) systems, in a timely manner meeting SLAs.
• Perform routine reviews of IAM to identify and address abuse of permissions by authorised users.
• Monitor for policy violations and report suspicious user behaviour.
• Assist in isolating affected systems to contain threats under supervision.

Reporting, documentation, and communication

• Work notes and artefact logging in ITSM (ServiceNow / Confluence) incident tickets.
• Facilitate handovers to other SOC team members at the end of a shift, ensuring a smooth transition of ongoing incidents.
• Provide clear and timely updates to other SOC members and escalation points.
• Seek guidance from, and embrace when necessary to Mid-level Tier 2 analysts.

Other

• Participate in security awareness training and exercises to educate employees on best practices for cyber security hygiene and incident response.
• Stay up-to-date on the latest cyber security threats, vulnerabilities, and attack techniques.
• Participate in on-call rotations and provide triage and escalation support.
• Flexible working hours may require scheduled work on weekends and/or holidays, including being on-call.
• Participate in handling queries from the security inbox, ensuring timely response to security-related inquiries.
• Carry out other duties as assigned

What to expect when you join our firm

• Hybrid working and reasonable accommodations
• Excellent Health and Wellbeing benefits including corporate membership to Wellhub
• Paid volunteer time to step away from your desk and into the community
• Support to grow through professional development courses, tuition/qualification reimbursement and more
• Maternal/paternal leave benefits and family services
• Unique employee events and programs including a 14er challenge
• Complimentary beverages, snacks and all employee Happy Hours

Supervisory responsibilities

• Yes

Nice to have skills

• 1+ years of experience within Incident Response and/or Security Operations
• Scripting or automation experience (e.g., Python, PowerShell, KQL) to enhance SOC playbooks, enrich alerts, or reduce manual triage effort.
• Exposure to SOAR platforms and use‑case development for automating repeatable response actions.
• Experience working alongside an MSSP or within a co‑managed SOC model.
• Familiarity with Threat Intelligence platforms (e.g., OpenCTI, Recorded Future, MISP) and applying CTI to detection and hunting.
• Relevant Information Security certifications (e.g. CompTIA Security+, CySA+, CEH, SANS, Cloud Certifications).

Must have skills

• 2+ years in an Information Security role with proven experience in Security Operations or Threat Analysis roles
• Proven hands‑on experience with SIEM and EDR platforms
• Analytical mindset and knowledge of TTPs, malware behaviour, and incident handling methodologies.
• Familiarity with IAM concepts and monitoring — able to review user permissions, detect abuse, and flag suspicious behaviour or policy violations.
• Experience performing alert triage and incident escalation within defined SLAs, using ITSM tooling such as ServiceNow and documentation platforms such as Confluence.
• Strong collaboration skills working with application and infrastructure teams within a security context
• In‑depth working knowledge of security best practices and frameworks (e.g., MITRE ATT&CK, OWASP Top 10, NIST)
• Excellent written and verbal communication skills, with the ability to produce clear work notes, handover reports, and stakeholder updates.
• Ability to manage multiple projects and tasks.
• Analytical ability to capture and summarise information, find solutions to various tactical and strategic problems and prioritise work
• Exposure to public cloud infrastructure (SaaS, IaaS, and PaaS)

Ongoing competence in the role to be assessed, in line with applicable regulatory requirements, by:

• Completion of all assigned compliance training

Compensation information

The base salary range for this position is $100,000-$130,000. This range is estimated for this role. Actual pay may be different. This position will be open through September 30, 2026.

Annual Bonus Opportunity:

Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance.

Benefits:

Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career pagehere .

Janus Henderson Investors is an equal opportunity employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks.

Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licenses where not supported by an employee’s job functions (as determined by Janus Henderson at its sole discretion).

You should be willing to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants’ past political contributions or activity may impact applicants’ eligibility for this position.

You will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.