Senior Security Analyst

StaffXpert LLC; New York (NY); Hybrid; USD 120,000 - 190,000; Full time

Job summary

STAFFXPERT LLC, on behalf of our client in New York City, NY, is seeking a Senior Security Analyst to join a cloud-first security program. The role focuses on strengthening security operations, vulnerability management, cloud security, identity protection, and incident response across the organization.

The ideal candidate will lead security initiatives, manage threat detection, protect AWS and GCP environments, and collaborate with engineering and infrastructure teams to reduce enterprise risk.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field, or equivalent professional experience.
• 8+ years of hands-on cybersecurity experience.
• Proven experience leading and delivering security initiatives within cloud-first organizations.
• Hands-on experience with endpoint security platforms, including CrowdStrike or similar solutions.
• Strong knowledge of Google Workspace security administration, including Gmail security controls, DLP, and monitoring.
• Experience with advanced email security technologies and threat protection solutions.
• Experience with Cisco Meraki security and device management.
• Experience with Identity and Access Management (IAM) platforms such as Okta.
• Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management.
• Experience designing, implementing, and managing enterprise security controls.
• Knowledge of security compliance frameworks and standards such as SOC 2, ISO 27001, and FERPA.
• Excellent communication, documentation, and stakeholder management skills.

Responsibilities

• Lead security initiatives across cloud, endpoint, email, identity, and data protection environments.
• Manage and enhance vulnerability management programs, including remediation tracking and risk reduction efforts.
• Conduct endpoint security monitoring, investigations, and threat response using enterprise security platforms such as CrowdStrike.
• Support and secure AWS and GCP cloud environments in collaboration with engineering and infrastructure teams.
• Develop and improve security controls, monitoring capabilities, threat detection processes, and incident response procedures.
• Strengthen email security, phishing protection, and data loss prevention (DLP) measures.
• Collaborate with cross-functional teams to implement security best practices and reduce organizational risk.
• Drive security program maturity through process improvements, governance initiatives, and security control implementation.

Skills

Cloud security

Endpoint security

IAM Okta

AWS security

GCP security

CrowdStrike

Vulnerability management

Email security

SOC 2 ISO 27001

Security governance

Threat detection

Education

Bachelor's degree or equivalent in Cybersecurity/IT/CS

Tools

CrowdStrike

Okta

GCP Console

AWS IAM

Job description

a { text-decoration: none; color: #464feb; } tr th, tr td { border: 1px solid #e6e6e6; } tr th { background-color: #f5f5f}.

Job Title Senior Security Analyst

Location New York City, NY (Hybrid)

Job Summary

STAFFXPERT LLC is seeking a Senior Security Analyst on behalf of our client in New York City, NY. This role is ideal for an experienced cybersecurity professional who thrives in cloud-first environments and is passionate about strengthening enterprise security. The successful candidate will play a key role in enhancing security operations, vulnerability management, cloud security, identity protection, and incident response capabilities across the organization.

Key Responsibilities

• Lead and execute security initiatives across cloud, endpoint, email, identity, and data protection environments.

• Manage and enhance vulnerability management programs, including remediation tracking and risk reduction efforts.

• Conduct endpoint security monitoring, investigations, and threat response using enterprise security platforms such as CrowdStrike.

• Support and secure AWS and GCP cloud environments in collaboration with engineering and infrastructure teams.

• Develop and improve security controls, monitoring capabilities, threat detection processes, and incident response procedures.

• Strengthen email security, phishing protection, and data loss prevention (DLP) measures.

• Collaborate with cross-functional teams to implement security best practices and reduce organizational risk.

• Drive security program maturity through process improvements, governance initiatives, and security control implementation.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.

• 8+ years of hands-on cybersecurity experience.

• Proven experience leading and delivering security initiatives within cloud-first organizations.

• Hands-on experience with endpoint security platforms, including CrowdStrike or similar solutions.

• Strong knowledge of Google Workspace security administration, including Gmail security controls, DLP, and monitoring.

• Experience with advanced email security technologies and threat protection solutions.

• Experience with Cisco Meraki security and device management.

• Experience with Identity and Access Management (IAM) platforms such as Okta.

• Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management.

• Experience designing, implementing, and managing enterprise security controls.

• Knowledge of security compliance frameworks and standards such as SOC 2, ISO 27001, and FERPA.

• Excellent communication, documentation, and stakeholder management skills.

Preferred Qualifications

• Experience supporting security awareness and cybersecurity training programs.

• Exposure to AI governance, security risk management, and emerging technology initiatives.

• Relevant industry certifications such as CISSP, CCSP, Security+, AWS Security Specialty, or equivalent.

• Experience working within highly regulated environments.