Senior Security Analyst, RAAS – Managed Services

Job not on LinkedIn

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $94k - $153k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Aprio

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏥 Healthcare

🏗️ Construction

💰 Debt Financing on 2018-10

Consulting • Healthcare • Construction

Aprio is a comprehensive business advisory, tax, and accounting firm that provides a range of services across various industries including construction, dental, financial services, healthcare, manufacturing, and technology. They offer services such as business valuation, CFO advisory, succession planning, digital advisory, risk management, and compliance. Aprio is involved in areas like blockchain advisory, ERP and business applications, tax consulting, outsourced accounting, and wealth management. With a strong presence in over 50 countries, Aprio is committed to diversity and corporate social responsibility, continually innovating to meet the needs of their diverse clientele.

📋 Description

• Monitor alerts and incidents across client tenants in Microsoft Sentinel and Microsoft Defender products • Triage incidents, verify automated enrichment, and meet acknowledgment and containment SLAs • Investigate suspicious sign-ins, risky users, and conditional access failures in Microsoft Entra ID • Write and tune KQL queries for threat hunting, investigation, and detection rule development • Trigger, approve, reverse, operate, and author Sentinel automation rules and Logic Apps playbooks • Escalate confirmed incidents with complete timelines and supporting evidence • Review, approve, reject, validate, and reverse automated containment actions • Monitor playbook health and maintain per-client automation settings • Ensure client notifications accurately reflect automated actions • Identify opportunities for new automation and tuning • Follow change control procedures using Sentinel Repositories/CI-CD • Notify clients of incidents via phone, email, or ticketing system • Write incident summaries and remediation recommendations for technical and non-technical audiences • Contribute to monthly client security reports and service reviews • Tune analytics rules, update runbooks and knowledge base articles, and track emerging threats • Participate in rotating after-hours, evening, weekend, and holiday on-call coverage for 24/7 client protection • Maintain reliable home internet and phone for remote shifts and on-call coverage

🎯 Requirements

• 3–4 years of experience in a SOC, MSSP, MDR, or IT security operations role • Hands-on production experience with Microsoft Sentinel and Microsoft Defender XDR • Working knowledge of KQL • Solid understanding of Microsoft Entra ID, Microsoft 365, Windows endpoints, networking fundamentals, and common attack techniques (MITRE ATT&CK) • Clear written and verbal communication skills, including composure and clarity during active client incidents • Availability and willingness to work evenings, weekends, holidays, and on-call rotations • Ability to work independently with minimal supervision • Working knowledge of Sentinel automation rules, incident tasks, and playbook triggers (incident, alert, and entity triggers) • Sound judgment regarding when automation should be trusted and when it should be overridden • Microsoft SC-200 certification required • At least one of SC-300, AZ-500, AZ-104, or SC-401, or commitment to earn one within 90 days of hire • Experience managing multiple tenants simultaneously through Azure Lighthouse or Defender XDR multi-tenant management • Experience building Sentinel automation with Logic Apps, along with PowerShell or Python scripting • Familiarity with Microsoft Security Copilot, Defender for Cloud, and Microsoft Purview • SC-401 or SC-100 • Vendor-neutral certifications such as CISSP • Bachelor's degree in cybersecurity, IT, or a related field, or equivalent experience

🏖️ Benefits

• Medical, Dental, and Vision Insurance on the first day of employment • Flexible Spending Account and Dependent Care Account • 401k with Profit Sharing • 9+ holidays and discretionary time off structure • Parental Leave – coverage for both primary and secondary caregivers • Tuition Assistance Program and CPA support program with cash incentive upon completion • Discretionary incentive compensation based on firm, group and individual performance • Incentive compensation related to origination of new client sales • Top rated wellness program • Flexible working environment including remote and hybrid options • Competitive compensation • Industry-leading benefits • Flexible work environment to enjoy work/life balance