Sr. Security Operations Analyst

enVista; Carmel (IN); Hybrid; USD 120,000 - 150,000; Full time

Benefits offered by this job

Competitive pay bonuses

Comprehensive health coverage

PTO and sabbatical programme

401k and retirement resources

Flexible work options

Employee referral bonus

Job summary

enVista is hiring a Senior Security Operations Analyst to independently lead complex investigations across multiple systems and security domains. You will coordinate technical response activities for major incidents and develop practical detections, playbooks, and procedures.

The role also includes mentoring junior analysts and driving improvements, serving as the owner of a security platform or capability.

Qualifications

• 5-8 years of relevant cybersecurity experience with hands‑on security operations or incident response
• Bachelor's degree or equivalent practical experience in Cybersecurity/IT
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, and Azure security technologies
• Familiarity with SOC 2, ISO 27001, NIST CSF, PCI DSS and related frameworks
• Experience with phishing simulations and security awareness communications
• Strong ability to translate technical findings into business risk implications

Responsibilities

• Lead complex investigations across multiple systems and security domains
• Coordinate technical response activities for major security incidents
• Develop detections, playbooks, and response procedures
• Mentor junior analysts and drive operational improvements
• Interact with clients and internal teams to communicate risk clearly
• Own assigned security platform or capability and drive enhancements

Skills

Security operations

Incident response

Microsoft Defender

Microsoft Sentinel

Azure security

Threat intelligence

Risk assessment

Education

Bachelor's degree in Cybersecurity

Tools

Microsoft Defender

Azure security tools

Job description

enVista is stronger than ever—focused, energized, and ready to lead the future of supply chain and enterprise consulting. As the premier provider of supply chain technology and strategy services, material handling automation and robotics, Microsoft solutions, and IT managed services, we bring more than 20 years of unmatched domain expertise to thousands of leading brands. We don’t just solve problems, we help our clients transform the way they work, grow, and compete.

The Senior Security Operations Analyst is an experienced individual contributor who independently leads complex investigations, coordinates significant response activities, improves detection and response capabilities, and mentors developing analysts. This role exercises advanced technical judgment across multiple security domains and may own an assigned platform, process, service component, or technical capability.

This is more than just a technical role, it’s an opportunity to be a thought leader and change-maker at a pivotal time in enVista’s journey. We are investing in our people, systems, and future, and we’re looking for bold innovators who want to build with us.

Why enVista?

Our associates are at the forefront of commerce, supply chain, and technology—developing smart, sustainable solutions that improve profitability and positively impact the world. We support our people with comprehensive onboarding and training, award and recognition programs, volunteer and affinity groups, and a strong mentoring culture. We’re committed to growing top talent—and giving them the tools to thrive.

If you’re ready to step into a high-impact role with a company that’s growing, innovating, and leading the market, this is your moment.

What you will do:

• Independently lead complex investigations involving multiple systems, technologies, data sources, or security domains.
• Correlate endpoint, identity, network, cloud, email, application, and threat intelligence data to determine incident scope, cause, impact, confidence, and required response.
• Coordinate technical response activities for significant security incidents and provide timely stakeholder communications.
• Conduct root cause analysis and develop practical corrective and preventive recommendations.
• Develop, tune, test, and document security detections, correlation rules, investigative procedures, and response playbooks.
• Develop scripts, queries, integrations, and workflow automation that improve investigation quality, response time, and service consistency.
• Lead vulnerability analysis and risk-based remediation discussions with system owners, clients, and technical teams.
• Lead technical discussions with clients and translate findings into clear business and risk implications.
• Review analyst investigations, reports, case documentation, and recommendations for quality, accuracy, and completeness.
• Mentor analysts and provide technical guidance during investigations, escalations, and operational initiatives.
• Serve as the operational owner for an assigned security platform, process, service component, procedure, or technical capability.
• Identify material gaps in logging, monitoring, detection coverage, response procedures, or service delivery and lead corrective improvements.
• Operates independently with minimal oversight.
• Demonstrates advanced technical expertise across multiple security domains.
• Exercises strong risk-based judgment and communicates recommendations clearly.
• Serves as a trusted technical resource, reviewer, and mentor.

What you will bring:

• Bachelor's degree in Cybersecurity, Information Technology or equivalent practical experience
• 5-8 years of relevant cybersecurity experience, including substantial hands‑on security operations or incident response responsibility
• Demonstrated experience independently leading complex investigations and response activities
• Experience with Microsoft Defender, Microsoft Sentinel, Entra ID, Azure security technologies, and the Microsoft security ecosystem
• Experience with cloud security monitoring and cloud security posture management technologies
• Familiarity with SOC 2, ISO 27001, NIST Cybersecurity Framework, PCI DSS, and related compliance frameworks
• Experience supporting or governing third‑party managed security service providers
• Experience with phishing simulations, security awareness campaigns, and related communications
• Relevant certifications such as Security+, CySA+, GSEC, SC-200, GCIH, GCIA, GCED, GMON, AZ-500, CISSP, or equivalent demonstrated expertise are strongly preferred
• Experience developing detections, automations, operational improvements, or security workflows
• Experience presenting technical findings and risk information to clients, business leaders, and technical teams
• Strong understanding of threat detection, incident response methodologies, and security operations practices
• This role will be based in our Carmel office in a hybrid capacity

What we offer:

• Competitive Pay + Performance Bonuses– Your impact matters, and we make sure it shows in your paycheck
• Comprehensive Health Coverage– Medical, Dental, and Visionand Prescription coverage, along with HSA/FSA options that work for you and your family
• Time to recharge and give back– Flexible paid time off (PTO), holidays and unlimited volunteering days
• Paid Sabbatical– After seven years of service, take a well‑earned break to rest, recharge, or explore
• Financial security & retirement– Employed matched 401k, planning and hardship resources, disability and life insurance
• Flexible Work Options– Balance life and work with hybrid and remote opportunities that support how you thrive
• Employee Referral Bonus– Know someone amazing? Get rewarded for bringing top talent into the enVista family

Preferred

Bachelors or better in Information Technology or related field.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.