Security Analyst

Rover.com•Seattle, WA

8d•Hybrid

About The Position

Rover is seeking an innovative Security Analyst to join their Information Security team. This role will focus on driving the company's vulnerability management program and day-to-day security operations. The analyst will be responsible for identifying and prioritizing risks across corporate SaaS systems and AWS-hosted cloud applications, and working towards their remediation. The position involves utilizing tools like Splunk for monitoring, detection, and investigation, with an emphasis on applying AI and automation to improve efficiency and reduce manual tasks in security operations and vulnerability management. The role requires staying current with emerging security threats, standards, and technologies. This is a hybrid position requiring a minimum of two days per week in the Downtown Seattle Office (Mondays and Thursdays), and candidates must be based in the Greater Seattle Area or willing to relocate.

Requirements

BS in computer science, information systems, information security, or a related field, or equivalent work experience
3+ years of experience in information security, security operations, or vulnerability management, ideally spanning cloud computing and web applications
Demonstrated experience working with AWS or other cloud platform technologies
Experience with Splunk or similar SIEM/log analysis tooling
Strong communication skills with a proven track record of collaboration and teamwork
Demonstrated understanding of and experience with security-related technologies, systems, and tools

Nice To Haves

Proficiency with Python, Django, SQL, JavaScript, or mobile application development
Experience building Splunk searches, dashboards, or detections at scale
Practical experience applying AI or automation tools to streamline security operations, vulnerability management, or reporting workflows
Experience in threat modeling, vulnerability assessment, and scoring systems (e.g., CVSS)
Practical experience with IAM role and policy development and efficacy evaluation
Security certifications (CompTIA Security+, CEH, CISA, CGEIT, CRISC, etc.)

Responsibilities

Own and mature Rover's vulnerability management program: identify, prioritize, track, and drive remediation of vulnerabilities across corporate SaaS systems and AWS-hosted cloud applications
Support day-to-day security operations, including monitoring, triage, and investigation of security alerts and incidents
Build and refine Splunk searches, dashboards, and alerts that improve the speed, accuracy, and efficiency of security monitoring and investigations
Identify and implement opportunities to use AI and automation to increase the efficiency of security operations, vulnerability management, and compliance reporting
Work cross-functionally to prepare documentation and evidence for audits and regulatory frameworks (SOX, PCI, GDPR, CCPA)
Evaluate existing security plans, processes, and procedures, and propose enhancements
Develop analyses and reports on historical and potential security incidents, including root cause and business impact
Research emerging security trends and technologies to keep Rover's defenses current
Make recommendations to managers and senior leaders on security improvements to better protect company systems
Promote security awareness and best practices among Roverines to elevate company-wide security culture