SecOps Business Analyst

Foresite • Overland Park, KS

6d

About The Position

Foresite is looking for a dynamic, execution-focused SecOps Business Analyst to bridge the gap between technical execution and executive strategy. Reporting directly to the VP of Security Operations, you will act as a dedicated process architect and specials projects lead for our Security Operations team. In this role, you won't just sit behind a desk looking at spreadsheets; you will embed directly with our security analysts and engineers. You will shadow their day-to-day workflows, map out how alerts move through our ecosystem, document "tribal knowledge" into repeatable playbooks, and identify opportunities to eliminate manual toil through process refinement and automation.

Requirements

• 2+ years of experience in project management, business operations, or continuous improvement roles, ideally in a fast-paced or tech-forward environment.
• A strong foundational understanding of SecOps concepts (SIEM, SOAR, EDR, vulnerability patching, threat hunting, and the lifecycle of an incident).
• Strong proficiency in data analysis. Experience with tools like SQL, Excel/Sheets (advanced), and data visualization platforms (e.g., Tableau, PowerBI, Looker) to turn data into narratives.
• Familiarity with continuous improvement frameworks (Lean, Six Sigma, or Agile/Scrum).
• Exceptional communication skills with a proven ability to lead matrixed, cross-functional teams and influence without direct authority.

Nice To Haves

• Certifications in Process/Service Management (e.g., ITIL 4, Lean Six Sigma Green Belt, or Scrum Master).
• Basic security certifications showing technical curiosity (e.g., CompTIA Security+, GSEC, or specialized vendor certifications).
• Experience participating in "Post-Mortem" or Root Cause Analysis (RCA) exercises following major operational or security incidents.

Responsibilities

• Process Discovery & Shadowing: Spend dedicated time with SOC analysts, incident responders, and security engineers to understand their daily workflows, pain points, alert-handling procedures, and tool usage.
• Workflow Documentation: Translate chaotic, complex, or unwritten technical procedures into clear, visual swimlane diagrams, standard operating procedures (SOPs), and incident response playbooks.
• Continuous Improvement (CI): Analyze current-state processes to find bottlenecks, redundant steps, and alert fatigue catalysts. Propose data-driven recommendations for automation (via SOAR) or process refinement.
• VP Special Projects: Execute ad-hoc, high-priority projects assigned by the VP of Cybersecurity (e.g., evaluating the operational ROI of a security tool, prepping for a maturity assessment, or facilitating post-incident root-cause analysis).
• Metrics & Reporting: Help define, capture, and track Security Operations KPIs (e.g., Mean Time to Acknowledge [MTTA], Mean Time to Remediate [MTTR], and process error rates) to demonstrate the business value of security optimizations.

Benefits

• Comprehensive Health & Wellness: Robust medical insurance options to keep you and your family healthy.
• Employer-Covered Insurance: We fully provide employer-paid Dental coverage, as well as Short-Term (STD) and Long-Term Disability (LTD).
• Generous Time Off: We believe in a true work-life balance. You’ll start with 3 weeks of paid vacation, plus additional sick leave and paid company holidays.
• Growth & Mentorship: Access to world-class training. We support your career trajectory, whether you’re looking to deepen your technical skills or move into leadership.
• Impactful Work: Help protect global clients using the latest AI-enhanced security tools and GCP native technologies.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed