Senior Security Analyst, RAAS – Managed Services

🕒 Outubro 24

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $94.000 - $153.000 / ano

⏰ Tempo Integral

🟠 Sênior

🔐 Analista de Segurança da Informação

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 3%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Por que essa pontuação:

• Aberta há 19 dias.
• As vagas desta empresa costumam ser preenchidas em 36 dias.

Candidatar-se

Encontrar Vagas Remotas Similares

Aprio

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

💼 Consultoria

🏥 Saúde

🏗️ Construção

💰 Debt Financing em 2018-10

Consulting • Healthcare • Construction

Aprio é uma empresa abrangente de consultoria de negócios, impostos e contabilidade, que oferece uma gama de serviços em várias indústrias, incluindo construção, odontologia, serviços financeiros, saúde, manufatura e tecnologia. Eles oferecem serviços como avaliação de negócios, assessoria CFO, planejamento sucessório, consultoria digital, gestão de riscos e conformidade. A Aprio atua em áreas como consultoria em blockchain, ERP e aplicações empresariais, consultoria tributária, contabilidade terceirizada e gestão de patrimônio. Com forte presença em mais de 50 países, a Aprio é comprometida com a diversidade e responsabilidade social corporativa, continuamente inovando para atender às necessidades de sua diversa clientela.

Descrição

• Monitor alerts and incidents across client tenants in Microsoft Sentinel and Microsoft Defender products • Triage incidents, verify automated enrichment, and meet acknowledgment and containment SLAs • Investigate suspicious sign-ins, risky users, and conditional access failures in Microsoft Entra ID • Write and tune KQL queries for threat hunting, investigation, and detection rule development • Trigger, approve, reverse, operate, and author Sentinel automation rules and Logic Apps playbooks • Escalate confirmed incidents with complete timelines and supporting evidence • Review, approve, reject, validate, and reverse automated containment actions • Monitor playbook health and maintain per-client automation settings • Ensure client notifications accurately reflect automated actions • Identify opportunities for new automation and tuning • Follow change control procedures using Sentinel Repositories/CI-CD • Notify clients of incidents via phone, email, or ticketing system • Write incident summaries and remediation recommendations for technical and non-technical audiences • Contribute to monthly client security reports and service reviews • Tune analytics rules, update runbooks and knowledge base articles, and track emerging threats • Participate in rotating after-hours, evening, weekend, and holiday on-call coverage for 24/7 client protection • Maintain reliable home internet and phone for remote shifts and on-call coverage

🎯 Requisitos

• 3–4 years of experience in a SOC, MSSP, MDR, or IT security operations role • Hands-on production experience with Microsoft Sentinel and Microsoft Defender XDR • Working knowledge of KQL • Solid understanding of Microsoft Entra ID, Microsoft 365, Windows endpoints, networking fundamentals, and common attack techniques (MITRE ATT&CK) • Clear written and verbal communication skills, including composure and clarity during active client incidents • Availability and willingness to work evenings, weekends, holidays, and on-call rotations • Ability to work independently with minimal supervision • Working knowledge of Sentinel automation rules, incident tasks, and playbook triggers (incident, alert, and entity triggers) • Sound judgment regarding when automation should be trusted and when it should be overridden • Microsoft SC-200 certification required • At least one of SC-300, AZ-500, AZ-104, or SC-401, or commitment to earn one within 90 days of hire • Experience managing multiple tenants simultaneously through Azure Lighthouse or Defender XDR multi-tenant management • Experience building Sentinel automation with Logic Apps, along with PowerShell or Python scripting • Familiarity with Microsoft Security Copilot, Defender for Cloud, and Microsoft Purview • SC-401 or SC-100 • Vendor-neutral certifications such as CISSP • Bachelor's degree in cybersecurity, IT, or a related field, or equivalent experience

🏖️ Benefícios

• Medical, Dental, and Vision Insurance on the first day of employment • Flexible Spending Account and Dependent Care Account • 401k with Profit Sharing • 9+ holidays and discretionary time off structure • Parental Leave – coverage for both primary and secondary caregivers • Tuition Assistance Program and CPA support program with cash incentive upon completion • Discretionary incentive compensation based on firm, group and individual performance • Incentive compensation related to origination of new client sales • Top rated wellness program • Flexible working environment including remote and hybrid options • Competitive compensation • Industry-leading benefits • Flexible work environment to enjoy work/life balance

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo