Staff Security Analyst

Alkami Technology, Inc.; United States; On-site; USD 123,000 - 154,000; Full time

Benefits offered by this job

Remote-first environment

Unlimited paid time off

401(k) with employer match

Job summary

Alkami Technology, a leading digital banking platform, is seeking a Staff Security Analyst to lead detection and incident response across our US enterprise. You will design, implement, and mature threat detection capabilities and work with engineering, infra, and cloud teams to strengthen security controls.

You will mentor analysts, oversee complex investigations, and develop automation to speed response. The role requires strong leadership, threat hunting, and knowledge of MITRE ATT&CK;

Qualifications

• Bachelor's degree or equivalent in Cybersecurity, CS, IT or related field.
• 6–10 years in security operations, threat detection, IR, or related fields across multiple tech domains.
• Advanced incident response leadership and threat detection engineering
• Expertise with SIEM, EDR, cloud security monitoring, identity monitoring, and email security platforms
• Advanced threat hunting, forensics, malware analysis, and adversary behavior analysis
• Knowledge of MITRE ATT&CK, threat intel, detection engineering, and IR frameworks
• Security automation, orchestration, and workflow optimization
• Ability to lead cross-functional investigations and influence stakeholders
• Strong analytical, investigative, and executive communication skills
• Ability to independently solve complex security challenges

Responsibilities

• Lead complex incident response activities from containment to post-incident improvements.
• Design, implement, and mature enterprise threat detection capabilities (SIEM, EDR, cloud monitoring).
• Conduct proactive threat hunting to identify advanced attacker behaviors.
• Develop and maintain detection engineering standards, playbooks, tuning methodologies.
• Partner with Security Engineering, Infra, Cloud, Identity, and App Sec teams to strengthen controls.
• Lead forensic investigations across endpoints, networks, cloud, and apps.
• Evaluate threats, intel, and detection technologies to improve monitoring.
• Develop automation/workflows to speed response and ops efficiency.
• Establish and report on operational security metrics and maturity.
• Advise teams on monitoring, logging, incident readiness, and coverage.
• Mentor analysts through guidance and knowledge sharing.
• Contribute to security strategy, architecture reviews, and planning.
• Collaborate with Risk/Compliance/Audit/Legal on requirements.
• Research emerging attack techniques and AI-enabled threats to enhance capabilities.

Skills

Security operations

Threat detection

Incident response

Digital forensics

MITRE ATT&CK

Threat hunting

Security automation

Cross-functional leadership

Executive communication

Analytical thinking

Education

Bachelor's degree in Cybersecurity, Computer Science, IT or related field

Tools

Microsoft Sentinel

Microsoft Defender

Splunk

CrowdStrike

Chronicle

SIEM

Endpoint detection & response

Cloud security monitoring

Identity monitoring

Email security platforms

Job description

Alkami is the digital sales and service platform provider for U.S. banks and credit unions. Our unified Platform integrates onboarding, digital banking, and data and marketing—each solution can stand alone, but together they deliver more—to help institutions onboard, engage, and grow relationships. As the future shifts toward Anticipatory Banking, we help data-informed bankers meet the moment with technology that drives action.

Founded in 2009, we continue to be recognized for our intentional culture and tremendous growth (Best Place to Work in Fintech; Best & Brightest to Work For Nationally; and Comparably’s Best Company Culture, Best Career Growth, Best Engineering Team, and Best Places to Work in Dallas, among others). We’re building a culture where each Alkamist can perform to their highest potential, and we’re always on the lookout for the best and brightest minds. If you’re ready to experience the power of alchemy - transforming the ordinary into the extraordinary - come join one of the fastest growing SaaS companies in the U.S.

As a remote-first company, most of our positions can be remote in the US, except for key roles, which will be indicated in the Job Title.

Follow us on Glassdoor and LinkedIn!

The Staff Security Analyst is an advanced security operations professional who leads the design, execution, and continuous improvement of Alkami’s threat detection and incident response capabilities across the enterprise. This role applies broad technical expertise to solve highly complex security challenges, strengthen detection engineering, and influence operational security strategy through cross-functional collaboration and technical leadership. Operating with significant independence, the incumbent partners with engineering, infrastructure, cloud, and technology leaders to improve organizational resilience, mature security operations capabilities, and enable rapid, effective response to evolving cyber threats.

Key Responsibilities & Duties:

• Lead complex incident response activities, including containment, eradication, recovery, and post-incident improvements.
• Design, implement, and mature enterprise threat detection capabilities using SIEM analytics, endpoint detection, cloud monitoring, behavioral analytics, and automated response workflows.
• Conduct proactive threat hunting to identify advanced attacker behaviors, emerging threats, and indicators of compromise.
• Develop and maintain enterprise detection engineering standards, playbooks, tuning methodologies, and quality practices.
• Partner with Security Engineering, Infrastructure, Cloud Engineering, Identity, and Application Security teams to strengthen security controls and reduce organizational risk.
• Lead forensic investigations across endpoint, network, cloud, identity, and application environments.
• Evaluate emerging threats, adversary techniques, threat intelligence, and detection technologies to improve monitoring and response capabilities.
• Develop automation and orchestration workflows to improve operational efficiency and response speed.
• Establish and report on operational metrics related to detection effectiveness, incident response performance, and security operations maturity.
• Advise technology teams on monitoring strategies, logging requirements, incident readiness, and detection coverage.
• Mentor Security Analysts through technical guidance, investigation reviews, and knowledge sharing.
• Contribute to enterprise security strategy, architecture reviews, and long-term cybersecurity planning.
• Collaborate with Risk, Compliance, Internal Audit, and Legal teams to support regulatory, customer, and audit requirements.
• Research emerging attack techniques, AI-enabled threats, and evolving security operations technologies to continuously enhance security capabilities.

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
• 6–10 years of experience in security operations, threat detection, incident response, digital forensics, cybersecurity engineering, or a related information security discipline, including broad experience leading complex enterprise security investigations and detection engineering initiatives across multiple technology domains.
• Advanced incident response leadership and threat detection engineering
• Expertise with SIEM, endpoint detection and response, cloud security monitoring, identity monitoring, and email security platforms
• Advanced threat hunting, digital forensics, malware analysis, and adversary behavior analysis
• Expert knowledge of MITRE ATT&CK, threat intelligence, detection engineering, and incident response frameworks
• Security automation, orchestration, and operational workflow optimization
• Ability to lead complex cross-functional security investigations and influence technical stakeholders
• Strong analytical, investigative, and executive communication skills
• Ability to independently solve highly complex operational security challenges

Desired Skills:

• GCIA, GCIH, GCFA, SC-200, CISSP, or comparable advanced cybersecurity certification
• Experience supporting regulated financial services environments
• Experience with Microsoft Sentinel, Microsoft Defender, Splunk, CrowdStrike, Chronicle, or comparable enterprise security platforms
• Experience developing enterprise detection engineering standards and security automation
• Experience leading major incident response activities and security operations maturity initiatives

The salary range for this position is: $123,200 - $154,000

Cool Things to Know

Not Just Any Company : Alkami has an awesome diverse and inclusive environment. We have a FUN culture and offer great benefits, including remote-first environment, unlimited paid time off, 401(k) with employer match, and more.

• remote-first environment
• unlimited paid time off
• 401(k) with employer match

Work Authorization : We cannot offer employment sponsorship at this time. Candidates must be eligible to work in the US for full-time employment.

Recruiters : We are not looking for outside recruiting firms to help us in this search. Thank you for understanding.

Pay Transparency: As of January 1, 2023, new states and locales have enacted pay equity laws that require more pay transparency by employers in the following states: California, Colorado (effective January 1, 2021), Connecticut, Maryland, Nevada, New Jersey, New York, Ohio, Rhode Island and Washington.

The Important Stuff

Alkami Technology is an Equal Opportunity Employer and Prohibits Discrimination and Harassment of Any Kind: Alkami is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Alkami are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Alkami will not tolerate discrimination or harassment based on any of these characteristics. Alkami encourages applicants of all ages.

#LI-REMOTE