Security Analyst III

Staritas • Remote, US,

4d • $110,000 - $125,000 • Remote

About The Position

The Security Analyst III at Staritas is responsible for leading the organization’s security operations, governance, and compliance programs. This role serves as a key contributor to the design, implementation, and enforcement of security policies and standards, ensuring alignment with SOC 2 and other regulatory frameworks. The Security Analyst III owns the security monitoring ecosystem, including SIEM operations, leads enterprise-wide security awareness initiatives (e.g., KnowBe4), and manages audit readiness and control effectiveness. This position partners closely with IT Operations, leadership, and the Information Security Officer to proactively reduce risk, improve security posture, and ensure compliance.

Requirements

• 7–10+ years of experience in cybersecurity, IT security operations, or related fields
• Demonstrated experience with SIEM platforms (e.g., Microsoft Sentinel, SUMO, or equivalent) including design, tuning, and operational ownership
• Proven experience developing and enforcing security policies and governance frameworks (SOC 2 required)
• Experience with incident response, vulnerability management, and endpoint security tooling
• Experience working with managed security providers (MDR/eSOC)
• Strong project management and cross-functional collaboration skills

Nice To Haves

• Experience leading or supporting SOC 2 audits, including control ownership and evidence management a plus
• Hands-on experience with security awareness platforms such as KnowBe4, including program rollout and management
• Bachelor’s degree in Info Tech, Cybersecurity, Computer Science, or related field is preferred but not required
• CISSP, CISM, or similar advanced security certification
• Microsoft Security certifications (e.g., SC-200, SC-300)
• SOC 2 / compliance-related training or certifications
• Microsoft 365 security ecosystem preferred

Responsibilities

• Lead security monitoring and response operations leveraging SIEM and integrated security platforms; tune alerts, develop use cases, and drive continuous improvement in detection capabilities
• Own SIEM platform management, including onboarding new log sources, correlation rule development, and integration with endpoint, cloud, and network security tools
• Develop, implement, and enforce security policies, standards, and procedures aligned with SOC 2 and industry best practices
• Lead incident response activities, including investigation, containment, root cause analysis, and documentation; coordinate with internal and external stakeholders as required
• Manage vulnerability management program, including scanning, prioritization, remediation tracking, and reporting to leadership
• Own and administer the security awareness program, including KnowBe4 rollout, phishing simulations, reporting, and targeted training campaigns
• Serve as primary owner for SOC 2 compliance activities, including control documentation, evidence collection, audit coordination, and continuous control monitoring
• Develop and maintain security documentation, including policies, procedures, runbooks, and audit artifacts
• Partner with IT Operations to implement and enforce secure configurations, access controls, and endpoint protection strategies
• Lead evaluation, selection, and implementation of new security technologies, including cost analysis and operational integration planning
• Manage third-party security services and vendors (e.g., MDR/eSOC providers) and ensure contractual and operational expectations are met
• Oversee BYOD and endpoint security programs, including MDM enforcement and secure access policies
• Support client and regulatory security inquiries, including RFP responses and due diligence requests
• Stay current with evolving threat landscape, compliance requirements, and security best practices
• Other duties, as assigned.

Benefits

• Competitive salary and performance bonus program
• Fully remote work environment
• Comprehensive benefits package including 401k match
• 19 days of PTO per year
• 10 holidays per year
• Opportunity to work in a mission-driven organization where your work directly shapes clarity, confidence, and better outcomes across healthcare
• medical, dental, and vision coverage
• retirement savings plans with company contributions
• paid parental and family leave
• access to employee assistance and wellness resources
• life and disability insurance
• professional development opportunities
• flexible work arrangements

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: Associate degree