Senior Security Analyst

Jobgether; United States; Remote; USD 125,000 - 150,000; Full time

Benefits offered by this job

Fully remote

Remote work from US

Professional development

Competitive salary

Job summary

Jobgether is partnering with a United States–based company to hire a Senior Security Analyst for a fully remote role focused on protecting payment data and ensuring PCI DSS 4.0.1 and SOC 2 compliance across a cloud/FW/SIEM environment.

You will own security operations, incident response, IAM, and audit readiness with cross-functional collaboration across engineering, infrastructure, network, and compliance teams.

Qualifications

• 3-5 years of hands-on experience in security operations or a related IT security discipline.
• Experience with AWS services, particularly GuardDuty and Cognito, SIEM queries, XDR tools, Windows and Linux logs.
• Working knowledge of PCI DSS and SOC 2 control execution, audit evidence management, least-privilege access, change control, and incident response procedures.
• Ability to work independently, manage recurring compliance deadlines, prioritize competing demands, and maintain consistent operational execution.
• Strong documentation skills, including the ability to maintain clear tickets, incident timelines, audit evidence, procedures, and root cause analyses.
• Excellent written and verbal communication skills, with the ability to collaborate effectively with application, infrastructure, network, and compliance teams.
• Availability to participate in after-hours incident response, including a weekend and holiday backup rotation.
• Preferred: Bachelor's degree in Information Security, Computer Science, or related field.
• Preferred: Experience in payments/fintech with PCI DSS requirements.
• Preferred: Certifications such as CompTIA Security+, GIAC, CISSP, etc.
• Preferred: Familiarity with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.
• Preferred: Scripting in Python or Node.js.

Responsibilities

• Security Monitoring and Log Reviews across multiple security tools and environments.
• Compliance and Audit Readiness for PCI DSS and SOC 2 control calendar; manage evidence and scans.
• XDR and File Integrity Monitoring configurations and remediation coordination.
• Authentication Monitoring and investigation of anomalous activity with application owners.
• Cloud and SIEM Operations across AWS and Sumo Logic; escalate gaps and collection failures.
• Identity and Access Management provisioning and revocation; enforce least-privilege and MFA.
• Incident Response leadership including containment, timelines, reports and root cause analyses.
• Firewall Management including rule reviews and changes with network engineers.
• Documentation and Reporting of security procedures and incident response runbooks; monthly control reports.
• Continuous Improvement and Team Support in detection gaps and operational processes.
• After-hours incident response coverage and weekend/holiday rotations.

Skills

Security operations

Incident triage

IAM management

PCI DSS / SOC2

AWS security

XDR / SIEM

Documentation

Communication

After-hours support

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

Trend Micro

CrowdStrike

Feroot

Sumo Logic

Amazon Cognito

AWS GuardDuty

Job description

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Security Analyst based in the United States.

Join a fully remote security team dedicated to protecting sensitive payment data and maintaining the integrity of modern payment processing systems. As Senior Security Analyst, you will take ownership of day-to-day security operations and compliance activities across a payment gateway and switching environment, including a PCI DSS 4.0.1 cardholder data environment. You will monitor security events, manage identities and access, investigate incidents, and ensure recurring PCI DSS and SOC 2 controls are executed and documented effectively. Working closely with engineering, infrastructure, network, and compliance stakeholders, you will strengthen security controls and improve threat detection capabilities. This hands-on role offers significant autonomy, with responsibility for operational execution, incident escalation, audit readiness, and continuous improvement. You will play a critical part in safeguarding payment information while supporting the reliability and growth of essential financial technology services.

Accountabilities

• Security Monitoring and Log Reviews: Conduct daily security log reviews across Trend Micro, CrowdStrike, Feroot, Amazon Cognito, AWS GuardDuty, databases, and firewalls. Document review scope, results, coverage gaps, and related incidents in tickets, tracking exceptions through resolution.
• Compliance and Audit Readiness: Own the assigned PCI DSS and SOC 2 control calendar, complete recurring control activities, retain audit evidence, monitor overdue actions, and coordinate access reviews, Approved Scanning Vendor (ASV) scans, remediation, and rescans. Respond to internal and external auditor evidence requests.
• XDR and File Integrity Monitoring: Maintain Extended Detection and Response (XDR) and approved File Integrity Monitoring (FIM) configurations. Verify agent coverage, health, and updates, apply authorized routine adjustments, and coordinate remediation with system owners.
• Authentication Monitoring: Monitor authentication failures, suspicious login activity, and potential account takeover indicators in Amazon Cognito. Investigate anomalies and coordinate with application owners to resolve authentication and login availability issues.
• Cloud and SIEM Operations: Verify AWS GuardDuty coverage across all relevant accounts and regions, investigate findings, and monitor Sumo Logic log delivery, alerts, and dashboards. Escalate collection failures, monitoring gaps, and other issues that could affect detection capabilities.
• Identity and Access Management: Provision, modify, and revoke user access promptly in response to approved requests. Enforce least-privilege access and multi-factor authentication (MFA), document approvals and changes, and coordinate periodic access certifications with system owners.
• Incident Response: Lead incident triage and investigation, perform authorized containment actions, and coordinate resolution with internal teams and external vendors. Maintain incident timelines, post-incident reports, and root cause analyses for qualifying events.
• Firewall Management: Investigate firewall anomalies, maintain rule justifications and approval records, and coordinate monthly firewall rule reviews and authorized routine changes with network engineers.
• Documentation and Reporting: Maintain security procedures and incident response runbooks in Confluence, reviewing them quarterly and following relevant incidents or operational changes. Produce monthly reports covering control completion, monitoring coverage, security incidents, access changes, and overdue actions.
• Performance and Control Effectiveness: Ensure daily log reviews are completed on schedule, compliance activities meet deadlines, ASV scan findings are remediated within required timeframes, and security monitoring coverage is maintained across in-scope systems.
• Continuous Improvement and Team Support: Identify gaps in detection, controls, and operational processes; recommend improvements; share knowledge; and support the development of less experienced team members.
• Operational Coverage: Participate in after-hours incident response coverage, including designated weekend and holiday backup rotations, ensuring continuity during absences and leave.

Requirements

• 3-5 years of hands-on experience in security operations or a related IT security discipline, including independent alert investigation, incident triage, and identity administration.
• Practical experience with AWS services, particularly GuardDuty and Cognito, alongside SIEM queries, XDR tools, Windows and Linux logs, and network security technologies. Experience with comparable products is also accepted.
• Working knowledge of PCI DSS and SOC 2 control execution, audit evidence management, least-privilege access, change control, and incident response procedures.
• Ability to work independently, manage recurring compliance deadlines, prioritize competing demands, and maintain consistent operational execution.
• Strong documentation skills, including the ability to maintain clear tickets, incident timelines, audit evidence, procedures, and root cause analyses.
• Excellent written and verbal communication skills, with the ability to collaborate effectively with application, infrastructure, network, and compliance teams.
• Availability to participate in after-hours incident response, including a weekend and holiday backup rotation.
• Preferred education: Bachelor's degree in Information Security, Computer Science, or a related field.
• Preferred industry experience: Experience in payments, financial technology, or another environment subject to PCI DSS requirements.
• Preferred certifications: CompTIA Security+, CompTIA CySA+, GIAC certifications such as GCIH or GCIA, SSCP, CISSP, or other relevant security credentials.
• Preferred technical experience: Hands-on familiarity with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.
• Additional advantage: Scripting experience with Python or Node.js.

Benefits

• Competitive annual salary: USD $125,000-$150,000.
• Fully remote work: Work remotely from the United States.
• Meaningful security ownership: Take responsibility for day-to-day security operations and compliance controls in a payment processing environment.
• Senior-level autonomy: Independently manage operational priorities, investigate incidents, and serve as an escalation point for security issues.
• Professional development: Opportunities to strengthen expertise in cloud security, threat detection, incident response, payment security, and regulatory compliance.
• Cross-functional collaboration: Work alongside application, infrastructure, network, engineering, and compliance stakeholders.
• Continuous improvement: Contribute to strengthening security controls, improving monitoring coverage, and enhancing operational processes as the business grows.

How Jobgether Works

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice:

By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.