Senior Security Analyst

This role provides ownership for enterprise security operations, with responsibility for protecting data, systems, and networks across cloud and on-prem environments. The position oversees security monitoring and incident response, enriches alerts with contextual and threat intelligence, and drives coordinated response efforts across technical and business teams.

• Direct security event monitoring and incident response activities, ensuring timely triage, escalation, and resolution.
• Assess organizational security risk through periodic reviews of access models, controls, and governance practices, recommending risk-based improvements.
• Lead access governance oversight, including investigations of improper access, remediation actions, and compliance documentation.
• Oversee analysis and response to alerts from endpoint, network, and monitoring platforms in alignment with internal standards.
• Manage senior-level response to email-based threats such as phishing, malware, and impersonation, identifying opportunities for systemic control improvements.
• Provide strategic administration of Microsoft Defender for Office 365, including policy design, tuning, investigations, and continuous optimization.
• Use Microsoft Secure Score and related metrics to prioritize remediation initiatives and strengthen Microsoft 365 and Entra security.
• Support client and regulatory audits by coordinating security evidence collection and contributing to assessment responses.
• Stay current on security, risk, and regulatory trends through ongoing professional development and industry engagement.

• Bachelor’s degree in information security or a related discipline.
• Hands-on experience with security frameworks such as ISO 27001.
• Industry certifications preferred (e.g., CISSP, CISA, CISM).
• Experience administering Microsoft Defender for Office 365 and enterprise email security platforms (Mimecast preferred).
• Proven ability to investigate and remediate email-based threats, including phishing, business email compromise, and malware.
• Experience with endpoint detection and response tools, alert triage, threat hunting, and remediation.
• Demonstrated involvement across the full incident lifecycle, from detection through recovery.
• Working knowledge of SIEM concepts, threat intelligence, auditing, tuning, and basic scripting.