Senior Security Analyst

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $125k - $150k / year

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 3%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sola

WebsiteLinkedInAll Job Openings

51 - 200 employees

💳 Fintech

🤝 B2B

☁️ SaaS

💰 Private equity on 2022-08

Fintech • B2B • SaaS

Sola is a payments platform and PayFac-as-a-Service provider that helps software platforms and merchants accept and manage payments across online, in-person, and omnichannel channels. The company offers billing and invoicing, POS solutions, security and fraud protection, transaction optimization, data and insights, developer tools (APIs, documentation, sandbox) and in-house support teams to simplify integrations, reduce liability, and help businesses monetize payments. Sola operates as a registered trade name of Fidelity Payment Services and focuses on enabling platforms and merchants across North America to integrate payments and grow revenue.

📋 Description

• Own day-to-day security and compliance operations for Sola’s payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment • Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls • Retain ticket evidence, track exceptions, and resolve coverage gaps and linked incidents • Own the PCI DSS and SOC 2 control calendar, recurring control tasks, audit evidence, overdue actions, ASV scans, remediation, rescans, and access reviews • Support internal and external auditors with evidence requests • Operate XDR and file integrity monitoring configurations and coordinate remediation • Monitor Cognito authentication failures, suspicious logins, and account takeover indicators • Verify GuardDuty coverage across AWS accounts and regions and monitor Sumo Logic logs, alerts, and dashboards • Provision, modify, and revoke access; apply least privilege and MFA; coordinate access certifications • Lead security incident triage and investigation, authorized containment, resolution coordination, timelines, post-incident reports, and root cause analyses • Review firewall anomalies, maintain rule justifications and approvals, and coordinate monthly rule reviews • Maintain Confluence procedures and incident runbooks and provide monthly security and compliance metrics • Identify control and detection gaps, recommend improvements, and guide less experienced team members

🎯 Requirements

• 3-5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration • Practical experience with AWS, including GuardDuty and Cognito • Experience with SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted • Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response • Ability to work independently, manage recurring compliance deadlines, and prioritize competing demands • Strong ticket documentation skills and excellent written and verbal communication skills • Ability to take part in after-hours incident response coverage, including a weekend and holiday backup rotation • Experience in the payments industry or another PCI DSS regulated environment preferred • Bachelor's degree in Information Security, Computer Science, or a related field preferred • Relevant security certifications preferred, such as CompTIA Security+, CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP • Hands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic preferred • Scripting experience in Python or Node.js preferred