Security Analyst

At CHAMP, we are redefining the technology used by Motor Vehicle Agencies and their stakeholders. We do so with innovative, cloud-based software that enhances efficiency, security, and interoperability. Our solutions replace outdated processes with modern, scalable platforms, enabling organizations to operate with greater speed and accuracy in an increasingly digital world.

Security Analyst (Level I / Level II)

Location
:
Cleveland (Onsite – 4 days in office)

Department
:
Security

Reports To
:
Director of Security

Travel: Up to 10%

Sponsorship: This position is not eligible for Visa Sponsorship

Relocation: This position is not eligible for Relocation Assistance

Your Impact

We are seeking a motivated Security Analyst to join our Security team. This position is responsible for supporting Security Operations Center (SOC) activities, Detection & Response, Security Compliance, and General Security initiatives across the organization.

The ideal candidate has a strong cybersecurity foundation, excellent analytical skills, and a passion for continuous improvement. Preference will be given to candidates with hands‑on Security Operations Center experience, particularly with Data Dog Cloud SIEM, although experience with Splunk, Microsoft Sentinel, Crowd Strike Falcon Complete, QRadar, Log Rhythm, Elastic, or similar SIEM/SOC platforms is also valuable.

This position requires a hands‑on engineer who can balance strategic program development with day-to-day operational execution across multiple security domains.

This role is ideal for a cybersecurity professional who wants broad exposure across threat detection, incident response, cloud security, compliance, vulnerability management, and security automation while helping mature CHAMP's overall security posture.

Every Security Analyst, regardless of level, is expected to own something, improve something, automate something, and challenge existing assumptions. The difference between levels is not whether they contribute and demonstrate an ownership mentality, but the size and impact of what they contribute.

What You Will Do

Security Monitoring and SIEM Operations Support

• Support the implementation, administration, and ongoing operation of the enterprise SIEM platform
• Maintain onboarding, validation, and maintenance of security log sources across cloud, application, infrastructure, identity, endpoint, and network environments.
• Monitor the health, availability, and effectiveness of security logging pipelines and ingestion processes.
• Continuously evaluate enterprise systems and identify opportunities to onboard additional data sources that improve organizational visibility and threat detection capabilities.
• Develop and maintain dashboards, reports, operational metrics, and monitoring views supporting security operations, leadership reporting, and program maturity initiatives.
• Assist with development, testing, validation, and tuning of detection rules, alerts, correlation logic, and security monitoring content.
• Review false positives, detection gaps, and monitoring deficiencies and recommend improvements to increase detection effectiveness.

Security Operations and Incident Response Coordination

• Serve as an internal point of contact for the organization's third‑party Security Operations Center and managed detection and response providers.
• Review, validate, and oversee investigations performed by third‑party Security Operations Center analysts.
• Coordinate incident escalations between the Security Operations Center provider and internal engineering, infrastructure, and business stakeholders.
• Assist with determining appropriate response actions and escalation paths for security incidents.
• Support incident response activities including investigation, containment, eradication,…