Senior Security Analyst

CompassMSP•,

11d

About The Position

The Senior Security Analyst will monitor and manage alerts generated from various security tools and respond to and mitigate security threats for CompassMSP’s managed security service clients. They will also assist in deploying and managing the technology that enables our core security services, maximizing and bolstering our clients’ security with their technical expertise and knowledge of security industry best practices.

Requirements

5+ years of experience in a SOC/incident response role.
Demonstrated experience conducting alert and incident investigations end-to-end with minimal oversight and sound escalation judgment.
Execution-oriented: able to perform containment, blocking, isolation, and basic remediation in small and mid-sized business environments.
Experience monitoring and responding to threats impacting Windows, Microsoft 365 / Entra ID, and firewalls.
Familiarity and comfort working across EDR, firewall administration, identity and email security consoles, ticketing systems, RMM tools, and security telemetry sources.

Nice To Haves

Infrastructure Recovery & IT Engineering
Network, cloud, and endpoint recovery
Firewall, VPN, and zero-trust environments
Backup validation and isolated recovery environments
Active Directory, virtual hosts, domain controllers, migrations, and secure system restoration
Endpoint wipe-and-reload and related rebuild activities

Responsibilities

Investigate, manage, respond to, and escalate security alerts from various security platforms, such as EDR/XDR, SIEM, etc.
Analyze security events escalated from tier 1 to validate threats and respond accordingly.
Investigate and respond to reported phishing emails.
Analyze, prioritize, and track vulnerabilities detected by vulnerability scanners.
Research emerging threats and perform global threat hunts to support correlating industry data and threat feeds with our clients’ environments and attack surfaces.
Conduct incident response procedures, investigating indicators of compromise, identifying root causes, collecting evidence, and drafting incident response reports.
Collaborate with other security analysts, compliance analysts, Compass engineers, and vCISOs, lending your technical expertise in order to provide exceptional managed security services to our clients.
Interface directly with clients and end users when investigating threats and managing/troubleshooting managed security tools.
Assist in the deployment of the managed security services tool stack to new clients.
Assist with internal quality projects, including developing standards and security services for CompassMSP.
Stay current with the latest industry trends, best practices, and regulatory requirements to help continuously enhance our security services.
Hunt for emerging threats using a combination of methods and tools such as SIEM querying, software testing, sandboxing, etc. Translate the results of threat hunts into actionable alerts and analysis SOPs to aid the SOC in protecting clients.
Create and maintain internal standard operating procedures.
Participate in a flexible work schedule to include after hours/on-call shifts.