Senior Security Analyst (Rapid 7)

Virtual Technologies Group•Maumee, OH

1d•Remote

About The Position

Virtual Technologies Group is seeking a Senior Security Analyst to act as a primary responder and technical specialist within a staff augmentation model. In this role, you will focus on the day-to-day monitoring, investigation, and refinement of a security stack centered on AWS/Azure, Rapid7, and Proofpoint. Your goal is to move beyond basic alert monitoring to provide deep-dive forensic analysis and proactive threat hunting, ensuring that our cloud infrastructure remains resilient against emerging threats. This role requires a sharp analytical mind to evaluate complex security events and the ability to mentor junior analysts in improving incident response workflows.

Requirements

5+ years of experience in Security Operations or Analysis.
At least 3 years focused on investigating Cloud Security alerts (AWS or Azure).
Proficiency in auditing cloud environments (VPC/VNet, S3/Blob access logs) and reviewing Identity & Access Management (IAM) permissions for anomalies.
2+ years of hands-on experience utilizing a SIEM or XDR platform (e.g., Rapid7, Splunk, or Sentinel) for event correlation and alert investigation.
Experience interpreting vulnerability scan results, assessing their real-world exploitability, and tracking remediation progress with technical teams.
Proven experience leading the "detect and analyze" phases of the IR lifecycle, including containment and detailed post-mortem documentation.
Experience performing internal audits or control testing related to frameworks such as SOX or PCI-DSS.
Ability to distill complex forensic findings into clear, concise reports for stakeholders and provide guidance to junior-level analysts.

Nice To Haves

Direct experience analyzing phishing and malware trends using Proofpoint (specifically TAP, TRAP, and IMD).
Experience helping engineers refine detection logic and reducing false positives within Rapid7 InsightIDR.
Ability to use Python or PowerShell to query logs, parse data sets, or automate common investigative steps.
Familiarity with Microsoft Defender for Cloud and using Microsoft Purview for investigating data leakage or sensitive data exposure.
Industry-recognized certifications such as GCIH, GCIA, CySA+, or Microsoft SC-200.
Experience developing hypotheses for proactive threat hunts based on current IOCs and MITRE ATT&CK techniques.
Previous experience working in a dedicated analyst capacity within a managed services or staff augmentation environment.

Responsibilities

Act as a primary responder and technical specialist.
Focus on day-to-day monitoring, investigation, and refinement of a security stack centered on AWS/Azure, Rapid7, and Proofpoint.
Provide deep-dive forensic analysis and proactive threat hunting.
Ensure cloud infrastructure remains resilient against emerging threats.
Evaluate complex security events.
Mentor junior analysts in improving incident response workflows.