Senior Security Analyst
About The Position
Sola is seeking a Senior Security Analyst to join its DevSecOps team and own day-to-day security and compliance operations for its payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. This is a hands-on role focused on security log review, identity and access management, incident handling, and documented execution of recurring PCI DSS and SOC 2 controls. The senior analyst works independently, serves as an escalation point for security operations issues, and helps strengthen controls as the business grows. Success is measured by timely, documented control execution; detection coverage; access hygiene; incident handling; audit readiness; and keeping procedures and runbooks current. Daily security and compliance operations take priority. Engineering opportunities depend on interest, capacity, and mentorship. Application, infrastructure, network, and compliance owners provide support. Access and production changes require independent approval. Incident response coverage includes named backups for weekends, holidays, and leave.
Requirements
- 3–5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.
- Practical experience with AWS, including GuardDuty and Cognito, SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience is accepted.
- Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.
- Ability to work independently, manage recurring compliance deadlines, and prioritize competing demands.
- Strong ticket documentation skills and excellent written and verbal communication skills.
- Ability to participate in after-hours incident response coverage, including a weekend and holiday backup rotation.
Nice To Haves
- Experience in the payments industry or another PCI DSS-regulated environment.
- A bachelor’s degree in Information Security, Computer Science, or a related field.
- Relevant security certifications such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP.
- Hands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.
- Scripting experience in Python or Node.js.
Responsibilities
- Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls; retain ticket evidence of scope, results, coverage gaps, and linked incidents; and track exceptions through resolution.
- Own the assigned PCI DSS and SOC 2 control calendar, complete recurring control tasks, retain audit evidence, track overdue actions, coordinate ASV scans, remediation, rescans, and access reviews, and support auditors with evidence requests.
- Operate XDR and approved file integrity monitoring configurations; verify agent coverage, health, and updates; apply approved routine adjustments; and coordinate remediation with system owners.
- Monitor Cognito authentication failures, suspicious logins, and account takeover indicators; investigate findings and coordinate login availability issues with application owners.
- Verify GuardDuty coverage across AWS accounts and regions and monitor findings; check Sumo Logic log delivery, alerts, and dashboards; and escalate collection or monitoring failures.
- Provision, modify, and promptly revoke access based on approved requests; apply least privilege and MFA requirements; document approvals and changes; and coordinate periodic access certifications with system owners.
- Lead security incident triage and investigation, perform authorized containment, coordinate resolution with internal teams and vendors, and maintain incident timelines, post-incident reports, and root cause analyses.
- Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers.
- Maintain Confluence procedures and incident runbooks, reviewing them quarterly and after relevant changes or incidents; provide monthly metrics on control completion, coverage, incidents, access changes, and overdue actions.
- Identify gaps in detection coverage, controls, and processes and recommend improvements; share knowledge with and help guide less experienced team members.
- Participate in after-hours incident response coverage, including a weekend and holiday backup rotation.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
Education Level
No Education Listed
