Senior Security Operations & Incident Response Lead

Ascensus; Dresher (Montgomery County); On-site; USD 120,000 - 160,000; Full time

Job summary

Ascensus, a leading independent technology and service platform powering savings plans across America, seeks a Principal Security Ops Analyst to oversee operational security responsibilities across Ascensus.

You will manage security tools (IAM, SIEM, IPS, WAF) and monitor security events, coordinate incident response, and work with IT, risk & governance, and facilities to strengthen security controls.

Qualifications

• Minimum 5 years in information security or security operations.
• Experience configuring and managing the listed security tools.
• Strong written and verbal communication with all levels.
• Ability to lead, inspire and motivate associates.
• Bachelor's degree plus equivalent work experience; CISSP preferred.

Responsibilities

• Oversee security event monitoring and response.
• Manage and maintain security tools (IAM, SIEM, IPS, WAF).
• Collaborate with IT, risk & governance, and facilities.
• Produce quarterly security operations metrics.
• Assist in phishing investigations and social engineering analyses.
• Support incident response and vulnerability management.
• Develop and improve security processes and procedures.
• Protect confidential data and ensure proper handling.

Skills

Security operations

Monitoring & IR

Networking basics

Communication

Leadership

Independent work

Security tools administration

Education

Bachelor's degree

CISSP (preferred)

Tools

IAM

IPS

SIEM

Web Application Firewall

Antivirus / Endpoint protection

CASB

UBA

DLP

Web Proxy/Filtering

Vulnerability management

File integrity monitoring

NAC

Job description

Ascensus, a leading independent technology and service platform powering savings plans across America, seeks a Principal Security Ops Analyst to oversee operational security responsibilities across Ascensus.

You will manage security tools (IAM, SIEM, IPS, WAF) and monitor security events, coordinate incident response, and work with IT, risk & governance, and facilities to strengthen security controls.