Security Operation Analyst

At Flexspring, you will have the autonomy and flexibility to tackle your role in a way that is right for you. We foster a learning culture that will allow you to develop new skills and progress in your career.

Flexspring is an iPaaS (Integration Platform as a Service) company specializing in HR data integrations. We partner with HR teams and HR software companies to design and deliver custom integrations that connect HR, payroll, and business systems, reduce manual work, improve data accuracy, and help people's operations run more efficiently.

As our Security Analyst, you will provide continuous security monitoring, detection, and incident response for Flexspring's cloud infrastructure and integration platform. You will work closely with our Security & Compliance Lead to close the gap between governance/audit readiness and day-to-day operational security, acting as the team's frontline eyes on threats while supporting vulnerability management and compliance evidence gathering. You will also serve as the secondary owner for security incident response, ensuring the department is never a single point of failure on security matters.

• Monitor security alerting and detection tooling (SIEM/EDR) on an ongoing basis; triage, investigate, and escalation confirmed security incidents.
• Own vulnerability management end to end: track findings from scans and penetration tests through to remediation, following up with the relevant technical owners across IT Ops, Cloud Engineering, and SRE.
• Maintain and tune detection rules and alert logic to reduce false positives and close monitoring coverage gaps.
• Act as secondary owner for security incident response, working alongside the Security & Compliance Lead, following the department's established escalation protocols (routed through Jira, no ad hoc direct messaging).
• Support the Security & Compliance Lead with evidence collection for SOC 2 / ISO 27001 audits where operational or technical evidence (logs, monitoring configurations, incident records) is required.
• Coordinate with Cloud Engineering and Integration Support/SRE teams during active security incidents to determine root cause and scope.
• Stay current on emerging threats, vulnerabilities, and security best practices relevant to cloud infrastructure and SaaS/iPaaS platforms.
• Ensure any AI-assisted tooling used for triage or detection complies with Flexspring's AI & R&D Safe Sandbox Policy (read-only service accounts, sandboxed environments, no unauthorized use of customer data).

• Work from home with flexible hours.
• 4 weeks of paid vacation annually.
• Comprehensive health benefits package for you and your family.
• Team events and opportunities to connect with colleagues.
• Opportunity to work with cutting-edge technologies.
• Competitive base salary.

• Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.
• Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation.
• Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking).
• Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging.
• Understanding of compliance frameworks such as SOC 2 and/or ISO 27001.
• Strong analytical and documentation skills; comfortable working through Jira-based ticketing and escalation processes.

• Security certifications (Security+, GSEC, GCIH, or equivalent).
• Experience with AWS-native security tooling (Guard Duty, Security Hub, Cloud Trail).
• Exposure to SaaS/iPaaS environments or HR technology platforms.
• Scripting/automation experience (Python, or similar) to support detection tuning or reporting.
• Experience supporting external audits or penetration test coordination.

For more information about Flexspring, visit:

Flexspring is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Flexspring are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership…