Security Analyst

Whoop•Boston, MA

10d•$70,000 - $110,000•Onsite

About The Position

WHOOP is seeking a Security Analyst to support day-to-day security operations and maintain operational visibility across the security environment. The role works with the internal security team and external security partners to investigate alerts, coordinate response activities, and ensure security issues are triaged and addressed efficiently. The ideal candidate combines strong analytical skills with operational discipline and works across security and engineering teams to investigate potential threats and improve security processes. The position is based in WHOOP’s Boston, Massachusetts office. The successful candidate must be prepared to relocate if necessary to work from that office. The role includes participation in the security team’s on-call rotation. The U.S. base salary range is $70,000–$110,000. In addition to base salary, the successful candidate will receive benefits and an equity package. WHOOP describes its total compensation as base salary, equity, and benefits.

Requirements

At least 3 years of experience in security operations, incident response, threat detection, or a related cybersecurity role.
Experience investigating security alerts or suspicious activity across environments such as endpoint, identity, cloud, or SaaS systems.
Experience triaging and managing security investigation workflows, including ticket queues or incident tracking systems.
Familiarity with SIEM platforms, log analysis, and security monitoring tools.
Understanding of common attacker techniques and frameworks such as MITRE ATT&CK.
Experience with security tools such as EDR platforms, identity systems, cloud logging platforms, or similar technologies.
Familiarity with modern AI-enabled tools used in enterprise environments and understanding of associated risks.
Experience improving security operations through automation, scripting, or responsible use of AI to increase operational efficiency.
Strong analytical and investigative skills, including the ability to evaluate security events and determine potential impact.
Ability to coordinate investigations across multiple teams and communicate findings clearly to technical and non-technical stakeholders.
Strong written documentation skills for incident records, investigation notes, and operational procedures.
Preparedness to relocate if necessary to work out of WHOOP’s Boston, MA office.

Nice To Haves

Relevant security certifications such as Security+, CySA+, SSCP, GSEC, or GCIH.

Responsibilities

Triage and investigate security alerts from internal security tools and external security monitoring partners.
Monitor and manage the internal security operations ticket queue, ensuring alerts and investigations are prioritized, tracked, and resolved promptly.
Investigate security events across endpoint, identity, cloud, and SaaS platforms.
Support incident response, including investigation, coordination of containment, documentation, and post-incident analysis.
Respond to external threat intelligence and digital risk alerts concerning potential brand abuse, impersonation, or exposed credentials.
Collaborate with security engineering teams and external security partners to improve detection coverage and reduce false positives.
Identify gaps in logging, telemetry, or investigation workflows across security platforms.
Assist with threat hunting and security investigations using SIEM and other security tools.
Support vulnerability management by helping triage, prioritize, and track remediation activities.
Own and manage the security operations queue as a central intake point for organizational security questions, alerts, and reports, ensuring items are triaged, prioritized, and driven through investigation or resolution.
Operate the phishing simulation program, including managing campaigns and coordinating targeted remediation training for users with repeated failures.
Identify opportunities to improve security operations through process improvements, automation, and responsible use of AI to streamline investigation, triage, and reporting.
Maintain documentation for incident response procedures, investigation workflows, and operational playbooks.
Participate in the security team’s on-call rotation to support investigation and response when needed.