Senior Security Analyst

🔥 14 hours ago

🇺🇸 United States – Remote

💵 $100k - $125k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Ensono

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

Consulting • Cloud Services • IT Services

Ensono is a managed service provider and expert technology advisor focused on enabling clients to navigate complex IT environments. Ensono offers services including mainframe-as-a-service, cloud migration, and IT infrastructure management, with a strong emphasis on modernizing legacy systems and optimizing IT operations. The company is recognized for its flexibility and allyship, providing businesses with the ability to adapt and evolve through solutions like Ensono Flex®. It specializes in both mainframe and cloud solutions, holding competency in AWS mainframe modernization and is a global Azure Expert MSP. Ensono acts as an ally, helping companies achieve better business outcomes through IT innovation and strategic technology advisement.

📋 Description

• Investigate and respond to security events • Analyze threats across a complex enterprise environment • Work with internal teams and customers to contain and remediate security incidents • Serve as a senior escalation point for security investigations • Monitor and administer information security solutions • Collect evidence for internal and customer audit requirements • Create internal and customer-facing security playbooks and procedures • Support a global cybersecurity model through procedures, processes, and security tools • Mentor junior Security Operations team members • Perform incident response roles under the Ensono Incident Response Plan • Implement security application upgrades and patches • Investigate security events, threats, and vulnerabilities • Follow project plans and meet timelines and milestones • Assist with security metrics creation and maintenance • Collaborate to create and tune security alerts • Learn new technologies and tooling capabilities • Assist product owners with alignment of solutions to security product offerings • Independently prioritize tasks in a fast-paced enterprise environment • Provide clear, detailed project reports to leaders

🎯 Requirements

• 5+ years of progressive cybersecurity experience, including at least 3 years of hands-on Security Operations Center (SOC) experience supporting security monitoring, alert triage, incident investigation, escalation management, and incident response • Experience leading or independently handling security investigations and incident response activities within a large enterprise, managed services, MSSP, MDR, or multi-customer environment • 2+ years of hands-on experience with Microsoft Sentinel in a production environment, including alert investigation, log analysis, incident management, threat detection, and security monitoring • 2+ years of hands-on experience with Microsoft Defender technologies, including investigation and response of endpoint, identity, email, and cloud security incidents • Experience with SIEM platforms and security monitoring tools • Experience distinguishing true-positive security events from false positives and making risk-based decisions • Experience communicating security incidents, technical findings, business impact, and remediation recommendations to technical and non-technical stakeholders, including customers • Experience creating and maintaining incident documentation, investigation records, security procedures, runbooks, and response playbooks • Strong understanding of TCP/IP networking, DNS, firewalls, encryption technologies, security controls, and common attack vectors • Strong understanding of malware classification, attack methodologies, infection vectors, persistence mechanisms, and threat actor techniques • Experience with digital forensics concepts, evidence preservation, log analysis, and investigative methodologies • Experience evaluating vulnerability scan results and assessing vulnerability risks • Working knowledge of Microsoft Entra ID, Microsoft 365, Azure, vulnerability management processes, and privileged access management concepts • Experience with DLP, endpoint security technologies, anti-malware solutions, and host-based intrusion detection/prevention concepts • Experience using KQL, PowerShell, Python, SQL, or similar tools • Strong written and verbal communication skills with the ability to perform effectively during high-pressure security incidents • Bachelor's Degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or a related field, or an equivalent combination of education and relevant professional experience • After-hours and/or on-call duty is required

🏖️ Benefits

• Unlimited Paid Days Off • Three health plan options • 401k with company match • Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts • Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement • Paid childbearing and paternal leave • Education Reimbursement, Student Loan Assistance or 529 College Funding • Sabbatical leave • Wellness program • Flexible work schedule • Annual bonus plan based on company and individual performance, depending on eligibility • Equity grant under the Associate Equity Appreciation Program, depending on eligibility • Option to work from home or in Ensono offices when not required on a client site