Senior Associate, Security Operations

Senior Associate, Security Operations

Andersen’s information security function is expanding, and this role sits at the operational core of that effort. The Senior Associate, Security Operations serves as the firm’s internal hub for day‑to‑day security operations, owning the relationship with our managed detection and response provider, triaging and coordinating incident response, managing security vendor relationships, and executing client security due diligence. This role requires a candidate who is equally comfortable analyzing a threat escalation and drafting a vendor risk assessment.

Senior Associate reports to the Head of Security Engineering & Architecture, with dotted‑line accountability to the Senior Manager, Governance, Risk & Compliance for client diligence and vendor risk. After‑hours availability is a firm requirement.

• Serve as the firm’s internal incident response coordinator, working alongside the managed detection and response provider during active security events
• Execute, test, and continuously improve IR playbooks through regular tabletop exercises and lessons learned
• Coordinate internal stakeholder communication during incidents and produce post‑incident reports for technical and executive audiences
• Serve as the primary liaison to the firm’s MDR provider, review threat reports, and hold the provider accountable to SLAs
• Triage MDR escalations, assess severity, and initiate appropriate internal response workflows
• Coordinate detection rule tuning and alert threshold adjustments to reduce false positives
• Maintain knowledge of MDR detection logic and flag coverage gaps to the Head of Security Engineering & Architecture
• Execute responses to client security questionnaires and due diligence requests accurately and on time
• Ensure questionnaire responses reflect the firm’s control posture and certifications, escalating discrepancies immediately
• Manage intake and tracking of diligence requests, flagging new questions to the Senior Manager, GRC
• Support the Head of Security Engineering & Architecture with vulnerability management and remediation follow‑up
• Manage relationships with security technology and service vendors, tracking contract terms, renewal dates, and SLA performance
• Partner with the Senior Manager, GRC on vendor risk assessments and track findings to remediation
• Maintain operational documentation including runbooks, contact trees, and escalation procedures
• Contribute to security awareness initiatives and serve as a resource for internal teams
• Identify and assess AI‑related security risks, incorporate AI threat scenarios into tabletop exercises, and monitor use of unsanctioned AI tools

• 5+ years of experience in security operations, incident response, or closely related discipline
• Bachelor’s degree in Information Security, Computer Science, or related field
• Experience triaging and coordinating incident response during active events
• Ability to execute, test, and improve IR playbooks
• Working familiarity with managed detection and response services
• Experience managing vendor relationships and SLA oversight
• Experience with client security due diligence and questionnaire responses
• Technical fluency in endpoint security, network fundamentals, log analysis, and threat detection
• Proficiency with SIEM, EDR, and ticketing platforms
• Knowledge of AI‑enabled threat vectors
• Strong written communication skills for incident reports and client responses
• Availability to respond to high‑severity incidents outside business hours

• Relevant incident handling or security analysis certification (e.g., GCIH, GSEC, GSOC)
• Background in professional services or consulting
• Familiarity with SOC 2 or ISO 27001 control environments
• Exposure to threat intelligence platforms or processes
• Knowledge of AI security risk frameworks such as NIST AI RMF or MITRE ATLAS

Competitive base compensation, benefits package, and discretionary bonuses based on performance. Expected salary range for U.S. employees: $115,000–$130,000. Benefits include medical, dental, vision, basic life insurance, 401(k) plan, 160 hours paid time off annually, and twelve paid holidays.

Andersen Tax welcomes and encourages workforce diversity. We are an equal opportunity employer. Applicants and employees are considered for positions and are evaluated without regard to race, color, national origin, ancestry, religion, sexual orientation, gender identity, sex, age, marital status, military status, veteran status, genetic information, or any other characteristic protected by law. All qualified individuals, including those with criminal histories, will be considered in a manner consistent with applicable law.

We provide reasonable accommodations to qualified individuals with disabilities.