Senior Security Analyst

Abby Care; United States; Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Competitive compensation

Hybrid work model

Healthcare benefits

Job summary

Abby Care is seeking a Senior Security Analyst to strengthen security operations, incident response, and risk management across cloud, endpoints, and identity systems. You will mentor junior analysts and drive improvements in security posture in a hybrid, San Francisco-based role.

Responsibilities include leading incident response, vulnerability management, and compliance readiness (SOC 2, ISO 27001, HIPAA, PCI DSS) while collaborating with IT, Legal, and Product teams to scale secure AI usage.

Qualifications

• 8+ years in security operations with incident response lifecycle experience.
• Hands-on with SIEMs, EDR/XDR, vulnerability scanners and IAM concepts.
• Familiarity with SOC 2, ISO 27001, NIST, CIS frameworks and audits.

Responsibilities

• Lead end-to-end incident response, threat hunting, and RCA across tools and cloud.
• Own vulnerability management lifecycle and risk communication to stakeholders.
• Audit security controls across Okta, Google Workspace, JAMF; support audits.
• Mentor team members and advance automation via SOAR and scripts.

Skills

Security operations

Incident response

SIEM

EDR/XDR

Vulnerability management

IAM (SAML, SSO, MFA, RBAC)

Risk assessment

AI/LLM security risks

Education

Bachelor's degree in Computer Science / Information Security / Cybersecurity

Tools

SentinelOne

Okta

JAMF

Google Workspace

Terraform

Job description

About Abby Care: Powering the future of care at home for all of America.

Abby Care is building the leading AI-native platform for family-led care. America is facing a growing care crisis. Millions more people need care at home than ever. Over 50 million family caregivers support loved ones without the tools, training, or recognition they deserve.

We believe families are the largest untapped caregiving workforce in America, and that technology can help them deliver better care while driving stronger outcomes and greater transparency across the healthcare system.

Abby Care combines clinical oversight with an AI-powered platform to train, enable, and support family caregivers in delivering high-quality care at home. Our platform helps health plans and government partners better understand, verify, and improve care in the home. We expand access to care, reduce reliance on higher-cost settings, and help ensure public dollars are spent effectively.

We are proud to partner with leading health plans, providers, and community organizations and are backed by top VCs. We envision a future where family-led care is a core part of the healthcare system. Abby Care is building that future.

Join us in solving one of the most important challenges of our time.

The Opportunity

We're looking for a Senior Security Analyst to strengthen our security operations, threat detection, and risk management program. This role reports into the Director of IT, Information & Security. You'll take the lead on incident response, vulnerability management, and security monitoring across our cloud, endpoint, and identity infrastructure, while mentoring junior analysts and driving continuous improvement of our security posture. This role is a strong fit for someone who thinks like an attacker, communicates like a partner, and enjoys turning alerts into action.

This is a Full-Time Hybrid opportunity based in San Francisco, CA.

What you'll work on

Security Operations & Incident Response

• Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR (SentinelOne), and cloud security tooling.
• Develop and maintain incident response playbooks, runbooks, and tabletop exercises.

Vulnerability & Risk Management

• Own the vulnerability management lifecycle, partnering with IT and Engineering to remediate scan, pen test, and audit findings.
• Maintain the risk register, conduct third-party/vendor risk assessments, and communicate technical risks to business stakeholders.

Identity, Endpoint & Compliance Oversight

• Partner with IT to audit and enforce security controls across Okta (RBAC/MFA), Google Workspace (DLP/logs), JAMF, and SentinelOne.
• Drive evidence collection and remediation for compliance audits (SOC 2, ISO 27001, HIPAA, PCI DSS) while aligning policies with NIST CSF and CIS frameworks.

Security Engineering & Automation

• Automate detection, response, and reporting workflows via SOAR, scripting, and APIs to improve alert quality and efficiency.
• Mentor team members and contribute to cross-functional security knowledge sharing.

AI Security & Governance

• Establish guardrails and acceptable-use policies for enterprise AI tools (e.g., GenAI, Claude), mitigating shadow AI, data leakage, and third-party vendor risks alongside IT, Legal, and Compliance.
• Partner with Product and Engineering to assess and remediate AI/LLM-specific vulnerabilities, including prompt injection, model abuse, and data exposure.
• Pilot and evaluate AI-powered security capabilities (e.g., AI-assisted SIEM/EDR triage and anomaly detection) to boost response speed and operational efficiency.

What you'll have

• 8+ years of experience in security operations, leading incident response end-to-end from detection through remediation.
• Associate's or Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience
• Hands-on experience with SIEMs, EDR/XDR (e.g., SentinelOne), vulnerability scanners, cloud security, and core IAM concepts (SSO, MFA, RBAC).
• Working knowledge of security frameworks (SOC 2, ISO 27001, NIST, CIS) with strong analytical skills to translate technical risk to business stakeholders.
• Familiarity with emerging AI/LLM risks and an interest in evaluating AI capabilities for security use cases.
• Excellent communication skills with the ability to prioritize competing incidents and operate calmly under pressure.

Nice to have

• Hands-on experience with Okta, JAMF, or Google Workspace, alongside Infrastructure as Code (Terraform) for access/security policy management.
• Scripting experience (Python, Bash), SOAR exposure, and familiarity with CSPM tools or native cloud security platforms (AWS/GCP/Azure).
• Practical experience securing AI/ML pipelines and GenAI deployments, or operating AI-driven security tools.
• Relevant credentials such as CISSP, GCIH, GCIA, OSCP, or Security+.

Benefits

• Competitive compensation packages that reflect the value you bring. We reward our team