Security Operations Analyst

Iterable is the leading AI-powered customer engagement platform that helps leading brands like Redfin, Seat Geek, Priceline, Calm, and Box create dynamic, individualized experiences  platform empowers organizations to activate customer data, design seamless cross‑channel interactions, and optimize engagement—all with enterprise‑grade security and compliance. Today, nearly 1,200 brands across 50+ countries rely on Iterable to drive growth, deepen customer relationships, and deliver joyful customer experiences.

Our success is powered by extraordinary people who bring our core values—Trust, Growth Mindset, Balance, and Humility—to life. We foster a culture of innovation, collaboration, and inclusion, where ideas are valued and individuals are empowered to do their best work. That’s why we’ve been recognized as one of Inc’s Best Workplaces and Fastest Growing Companies, and were recognized on Forbes’ list of America’s Best Startup Employers in 2022.

Notably, Iterable has also been listed on Wealthfront’s Career Launching Companies List and has held a top 10 ranking on the Top 25 Companies Where Women Want to Work.

With a global presence—including offices in San Francisco, New York, Denver, London, and Lisbon, plus remote employees worldwide—we are committed to building a diverse and inclusive workplace. We welcome candidates from all backgrounds and encourage you to apply. Learn more about our story and mission on our Culture and About Us pages. Let’s shape the future of customer engagement together!

We are seeking a detail‑oriented and process‑driven Security Operations Analyst to join our Security Engineering team. This role is best suited for a Junior‑level individual with some experience that is looking to transition into a Mid‑level security operational role. The ideal candidate is ready and excited to become a critical part in maintaining our daily security posture through consistent operational execution, including alert triage, incident coordination, vulnerability and threat monitoring, and validation of detection coverage.

This is a critical, hands‑on security operations role and the primary operational resource supporting our Security Engineering team. Success hinges on a disciplined approach to daily execution, making this the perfect role for a process‑driven individual eager to master foundational security operations and make a measurable impact on our security posture. Since this is a hands‑on security operations role, your day‑to‑day tasks require exceptional attention to detail, comfort with repetitive workflows, and an ability to strictly follow defined runbooks and standard operating procedures (SOPs).

Candidates that are disciplined, reliable, and motivated by doing foundational security operations well and embody regular, reliable, disciplined and motivated work are encouraged to apply. The willingness to learn new concepts and properly convey them to stakeholders is not only required but encouraged, as well as maintaining an open mind about different methods of accomplishing a goal.

• Alert Triage & Queue Management:
  Perform initial investigation, data enrichment, and escalation of alerts and tickets generated by the SIEM, SOAR, EDR, IDS, and other monitoring tools.
• Case Escalation:
  Identify alerts and situations requiring escalation to the Security on‑call.
• Incident Coordination:
  Maintain accurate and timely incident records in Security Incident record keeping software. The tasks include identifying ownership, timeline tracking, status updates, and ensuring retrospective remediation tasks are captured in individual Ticketing platforms.
• Coordinate communication for containment and remediation steps with relevant teams (engineering, security, support, etc.).
• Conduct detection validation, verifying false positives and adding research for alerts to tickets before escalation to senior security engineers.
• Case Documentation:
  Ensure investigation notes, follow‑ups, retrospective analysis, and action items are consistently documented, logged, and tracked to completion.
• Perform unsupervised investigation for lower‑severity incidents or…