Senior Security Analyst

Colonial Group; Lenexa (KS); On-site; USD 95,000 - 110,000; Full time

Benefits offered by this job

Bonus program

Job summary

Colonial Group is seeking a Senior Security Analyst to lead advanced security monitoring, threat analysis, and incident response with a focus on AI and emerging technologies.

This senior individual contributor will partner with Security Operations, GRC, Data Governance, Privacy, Legal, IT Operations, application owners, platform teams, and business stakeholders to strengthen the organization’s security posture.

Qualifications

• Bachelor's degree and/or certifications in information security, cybersecurity, computer science, information technology, or related field, or equivalent practical experience.
• Five+ years of progressive cybersecurity experience including security monitoring, incident response, investigations, vulnerability analysis, app security, cloud security, or risk assessment.
• Experience performing security investigations, assessments, threat modeling, vulnerability analysis, or architecture reviews.
• Working knowledge of SIEM, EDR/XDR, email security, identity security, vulnerability management, network security, cloud security, app security, and case-management tech.

Responsibilities

• Perform advanced security monitoring and analysis across SIEM, endpoint, email, identity, network, cloud, and other security data sources.
• Triage and investigate alerts, correlate activity across platforms, assess business impact, and guide response actions.
• Lead threat hunting, review threat intel, and identify emerging threats affecting the org.
• Improve detection logic, triage guidance, escalation criteria, and analyst procedures.
• Provide senior analytical support for complex events and mentor junior analysts.

Skills

Security monitoring

Threat analysis

Incident response

Vulnerability management

AI security

Education

Bachelor's degree or certifications in information security

Tools

SIEM

EDR/XDR

Cloud security

Job description

The Senior Security Analyst is a senior individual contributor responsible for security monitoring, threat analysis, incident response, vulnerability and exposure management, security assessments, and continuous improvement of operational security practices. The role provides advanced analytical support for complex security events, evaluates technical risk, recommends practical controls, and helps improve the organization’s overall security posture.

In addition to broad Senior Security Analyst responsibilities, this position serves as a security subject matter resource for artificial intelligence, automation, citizen-developed applications, and other emerging technologies. AI security is an area of emphasis within the role, not its exclusive function. The position partners closely with Security Operations, Security Engineering, GRC, Data Governance, Privacy, Legal, IT Operations, application owners, platform teams, and business stakeholders.

Essential Functions

Security Monitoring and Threat Analysis

• Perform advanced security monitoring and analysis across SIEM, endpoint, email, identity, network, cloud, application, and other security data sources.
• Triage and investigate alerts, correlate activity across multiple platforms, determine business impact, and recommend appropriate response actions.
• Conduct proactive threat hunting, review relevant threat intelligence, and identify emerging threats that may affect the organization.
• Improve detection use cases, alert logic, triage guidance, escalation criteria, and analyst investigation procedures.
• Provide senior-level analytical support for complex security events and mentor analysts through technical review and knowledge sharing.

Incident Response and Investigations

• Identify, investigate, contain, and support recovery from cybersecurity incidents in coordination with Security Operations and business partners.
• Analyze suspected unauthorized access, malware, phishing, account compromise, data exposure, policy violations, and other security events.
• Collect and preserve relevant evidence, document investigative findings, assess impact, and communicate recommended actions clearly.
• Maintain and improve incident response procedures, investigation playbooks, escalation paths, and lessons-learned activities.
• Participate in tabletop exercises and readiness activities that strengthen organizational response capabilities.

Vulnerability, Exposure, and Security Control Analysis

• Analyze vulnerabilities and security exposures, validate findings, assess applicability and risk, and coordinate remediation with system owners.
• Review technical designs, configurations, authentication and authorization models, network paths, APIs, secrets management, logging, and security controls.
• Perform or coordinate security assessments, threat modeling, control validation, abuse-case analysis, and technical risk reviews.
• Track findings through remediation, verification, exception, or formal risk acceptance using established processes.
• Evaluate new security products and technologies and recommend improvements to security controls, tooling, and operational practices.

AI and Emerging Technology Security

• Assess AI platforms, generative AI tools, agents, copilots, machine learning solutions, automation, low- code applications, and citizen-developed technology as part of the broader security review function.
• Evaluate risks involving prompts, model outputs, knowledge sources, connectors, retrieval methods, data flows, third-party processing, retention, identity, and access.
• Analyze AI-specific threats such as prompt injection, data leakage, insecure output handling, excessive agency, unsafe tool use, unauthorized retrieval, and supply-chain compromise.
• Provide practical security guidance and reusable control patterns for proof-of-concept, pilot, and production use of AI-enabled solutions.
• Monitor relevant AI security research, standards, threat activity, and vendor capabilities and translate developments into appropriate security recommendations.
• Security Advisory, Process Improvement, and Collaboration
• Provide practical security guidance to IT teams, application owners, platform engineers, citizen developers, vendors, and business stakeholders.
• Develop and maintain security procedures, review checklists, control requirements, knowledge articles, and repeatable assessment practices.
• Identify automation and process improvement opportunities that increase consistency, reduce manual effort, and improve response quality.
• Prepare clear reports, metrics, dashboards, and executive-ready summaries describing security risks, findings, trends, and remediation progress.
• Partner with Security Engineering, GRC, Data Governance, Privacy, Legal, Procurement, and Vendor Risk Management to support coordinated security outcomes.

Salary range: $95,000-$110,000 annual salary plus non-guaranteed annualized bonus program

Minimum Requirements

• Bachelor's degree and/or certifications in information security, cybersecurity, computer science, information technology, or a related field, or equivalent practical experience.
• Five or more years of progressive experience in cybersecurity, including security monitoring, incident response, investigations, vulnerability analysis, application security, cloud security, or technical risk assessment.
• Experience performing security investigations, security assessments, threat modeling, vulnerability analysis, or security architecture reviews.
• Working knowledge of SIEM, EDR/XDR, email security, identity security, vulnerability management, network security, cloud security, application security, and case-management technologies.
• Foundational knowledge of generative AI, AI-enabled applications, APIs, automation, cloud services, identity and access management, and data security principles.
• Ability to analyze complex technical activity and designs, identify realistic attack or abuse scenarios, and translate findings into clear business impact and actionable requirements.
• Strong analytical, problem-solving, organizational, written communication, and interpersonal skills.
• Ability to work independently and collaboratively across technical teams, business functions, leadership levels, and third-party providers.
• High level of integrity, sound judgment, attention to detail, and professionalism.

Preferred Requirements

• Hands-on experience with security monitoring, incident response, threat hunting, vulnerability management, application security testing, API security, or cloud security.
• Experience assessing or securing generative AI platforms, AI agents, copilots, retrieval-augmented generation solutions, low-code applications, or citizen-developed technology.
• Experience with Microsoft-focused enterprise environments, including Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender for Cloud, Microsoft Entra ID, Azure AI services, Microsoft Copilot, or Microsoft Power Platform.
• Knowledge of common cybersecurity frameworks and guidance, including NIST Cybersecurity Framework, MITRE ATTCCK, CIS Controls, the NIST AI Risk Management Framework, OWASP guidance for large language model applications, or MITRE ATLAS.
• Experience supporting vendor risk reviews, privacy assessments, data governance, security exceptions, or technology approval processes.
• Relevant professional certification such as CISSP, CSSLP, CCSP, CISM, CySA+, Security+, GIAC certification, or a comparable cloud or security credential.
• Experience supporting a geographically distributed organization with a mix of corporate, field, cloud, SaaS, and on-premises technology environments.