Senior Security Analyst

Sola Payments; Oregon; Hybrid; USD 125,000 - 150,000; Full time

Job summary

Sola is seeking a Sr. Security Analyst to join our DevSecOps team, owning day-to-day security and compliance for our payment gateway and switch, including PCI DSS 4.0.1.

You will perform security log reviews, IAM, incident handling, and quarterly control tasks while coordinating audits and remediation across AWS accounts and regional scopes. The role emphasizes independent work, escalation handling, and strengthening controls as the business scales.

Qualifications

• 3–5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.
• Practical experience with AWS (GuardDuty & Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted.
• Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.
• Proven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands.
• Strong ticket documentation skills and excellent written and verbal communication skills.

Responsibilities

• Security Log Review: perform daily reviews across multiple tools and retain evidence.
• Compliance Control Execution: manage PCI DSS and SOC 2 control calendar, audits support.
• XDR and File Integrity Monitoring: operate XDR and FIM configurations with health checks.
• Authentication Monitoring: monitor Cognito, investigate failures, coordinate access issues.
• Cloud and SIEM Monitoring: verify GuardDuty coverage and monitor logs/dashboards.
• Identity and Access Management: provision/revoke access with least privilege and MFA.
• Incident Response: lead triage, containment, and root cause analyses.
• Firewall Management: review rules and coordinate changes with network engineers.
• Documentation and Reporting: maintain runbooks and provide monthly control metrics.
• Continuous Improvement: identify gaps and document improvements.

Skills

Security operations

AWS security

SIEM analysis

XDR & FIM

Incident response

Access management

Documentation

Communication skills

After-hours support

Python/Node.js scripting

Education

Bachelor’s degree in Information Security or CS

Security certifications (CISSP, GIAC, CompTIA)

Tools

Trend Micro

CrowdStrike

Feroot

Sumo Logic

AWS Cognito/GuardDuty

Job description

Job Summary: We believe in empowering our employees to think outside the box and meet challenges head-on because, at Sola, everyone is a leader. Our employees take personal responsibility for ensuring our merchants and vendor partners have the tools and guidance they need to be successful. If you are driven to help us create next-generation payment solutions, eager to effect change, and passionate about protecting the data our merchants trust us with, we want to talk to you! We are looking for a Sr. Security Analyst to join our DevSecOps team and own day-to-day security and compliance operations for our payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. This hands-on role focuses on security log review, identity and access management, incident handling, and the documented execution of recurring PCI DSS and SOC 2 controls. As a senior member of the team, you will work independently, serve as the escalation point for security operations issues, and help strengthen our controls as the business grows.

Duties and Responsibilities:

• Security Log Review: Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls. Retain ticket evidence of scope, results, coverage gaps, and linked incidents, and track exceptions through resolution.
• Compliance Control Execution: Own the assigned PCI DSS and SOC 2 control calendar. Complete recurring control tasks, retain audit evidence, track overdue actions, and coordinate ASV scans, remediation, rescans, and access reviews. Support internal and external auditors with evidence requests.
• XDR and File Integrity Monitoring: Operate XDR and approved file integrity monitoring configurations. Verify agent coverage, health, and updates; apply approved routine adjustments; and coordinate remediation with system owners.
• Authentication Monitoring: Monitor Cognito authentication failures, suspicious logins, and account takeover indicators. Investigate findings and coordinate login availability issues with application owners.
• Cloud and SIEM Monitoring: Verify GuardDuty coverage across AWS accounts and regions and monitor findings. Check Sumo Logic log delivery, alerts, and dashboards, and elevate collection or monitoring failures.
• Identity and Access Management: Provision, modify, and promptly revoke access based on approved requests. Apply least privilege and MFA requirements, document approvals and changes, and coordinate periodic access certifications with system owners.
• Incident Response: Lead the triage and investigation of security incidents, perform authorized containment, and coordinate resolution with internal teams and vendors. Maintain incident timelines, post-incident reports, and root cause analyses.
• Firewall Management: Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers.
• Documentation and Reporting: Maintain Confluence procedures and incident runbooks, reviewing them quarterly and after relevant changes or incidents. Provide monthly metrics on control completion, coverage, incidents, access changes, and overdue actions.
• Continuous Improvement: Identify gaps in detection coverage, controls, and processes and recommend improvements. Share knowledge with and help guide less experienced team members.

Success in this role will be measured through a combination of control execution, detection coverage, access hygiene, and incident handling, including:

• Daily log reviews completed on schedule, with documented evidence for every review.
• PCI DSS and SOC 2 control tasks completed by their due dates, with overdue actions tracked to closure.
• Clean quarterly ASV scans, with remediation and rescans completed within required windows.
• XDR, FIM, and GuardDuty coverage maintained across all in-scope systems, accounts, and regions, with gaps escalated promptly.
• Access revocations completed within defined SLAs, and periodic access certifications completed on time.
• Incidents triaged within defined response times, with timelines, post-incident reports, and root cause analyses completed for all qualifying events.
• Monthly firewall rule reviews completed with current justifications and approval records.
• Audit evidence delivered without findings attributable to missed or undocumented controls.
• Procedures and runbooks reviewed quarterly and kept current.

Requirements and Qualifications:

• 3-5 years of hands‑on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.
• Practical experience with AWS (including GuardDuty and Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted.
• Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.
• Proven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands.
• Strong ticket documentation skills and excellent written and verbal communication skills.
• Ability to take part in after‑hours incident response coverage, including a weekend and holiday backup rotation.

Preferred Qualifications:

• Experience in the payments industry or another PCI DSS regulated environment.
• A bachelor's degree in Information Security, Computer Science, or a related field.
• Relevant security certifications, such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP.
• Hands‑on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.
• Scripting experience in Python or Node.js.

Leadership Profile:

The successful candidate brings sound judgment, strong attention to detail, and a sense of ownership over daily security and compliance operations, which take priority in this role. Engineering opportunities depend on interest, capacity, and mentorship. Application, infrastructure, network, and compliance owners provide support. Access and production changes require independent approval, and response coverage includes named backups for weekends, holidays, and leave.

Location:

• Remote

Salary:

• $125,000 - $150,000 annually

About Sola

Sola is a leading payments provider offering a full suite of merchant services, including payment processing, gateway solutions, and payfac capabilities. With strong partnerships across key verticals and a deep integration with ISV platforms, we deliver innovative and scalable solutions that help businesses of all sizes manage their payments efficiently. Headquartered in New York, our company is known for its customer‑first approach, cutting‑edge technology, and commitment to driving seamless transactions.

Equal Employment Opportunity Policy

Sola provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.