Senior Security Analyst

Janus Henderson Investors•Denver, CO

5d•$110,000 - $120,000•Hybrid

About The Position

The Senior Security Analyst focuses on cyber incident response and vulnerability management. The role monitors security alerts and events, validates and prioritizes incidents, assesses severity and impact, investigates root causes, and supports threat containment. It also reviews identity and access management activity for permission abuse, monitors for policy violations, documents incident activity, and coordinates clear updates and handovers across SOC teams. The position supports daily vulnerability management operations by scanning systems, analyzing findings, prioritizing risks, and coordinating remediation across applications, infrastructure, and cloud environments. It works with development and operations teams to implement effective security controls and contributes to improvements in vulnerability management processes, policies, and procedures. The analyst participates in on-call rotations, provides triage and escalation support, handles security inbox inquiries, and stays current on threats, vulnerabilities, and attack techniques. The role is hybrid and may require scheduled weekend or holiday work.

Requirements

At least 2 years in an Information Security role, with proven experience in Security Operations or Threat Analysis.
Hands-on experience with SIEM and EDR platforms.
Analytical mindset and knowledge of TTPs, malware behavior, and incident handling methodologies.
Familiarity with IAM concepts and monitoring, including reviewing user permissions, detecting abuse, and flagging suspicious behavior or policy violations.
Experience performing alert triage and incident escalation within defined SLAs.
Experience using ITSM tools such as ServiceNow and documentation platforms such as Confluence.
Strong collaboration skills when working with application and infrastructure teams in a security context.
In-depth working knowledge of security best practices and frameworks such as MITRE ATT&CK, OWASP Top 10, and NIST.
Excellent written and verbal communication skills, including producing clear work notes, handover reports, and stakeholder updates.
Ability to manage multiple projects and tasks.
Ability to capture and summarize information, solve tactical and strategic problems, and prioritize work.
Exposure to public cloud infrastructure, including SaaS, IaaS, and PaaS.
Willingness to participate in on-call rotations; flexible hours may include scheduled weekends and holidays.
Willingness to adhere to the Investment Advisory Code of Ethics and applicable regulatory obligations and company policies.

Nice To Haves

At least 1 year of experience in Incident Response and/or Security Operations.
Scripting or automation experience, such as Python, PowerShell, or KQL, to enhance SOC playbooks, enrich alerts, or reduce manual triage.
Exposure to SOAR platforms and use-case development for automating repeatable response actions.
Experience working alongside an MSSP or within a co-managed SOC model.
Familiarity with Threat Intelligence platforms such as OpenCTI, Recorded Future, or MISP, and applying CTI to detection and hunting.
Relevant Information Security certifications, such as CompTIA Security+, CySA+, CEH, SANS, or cloud certifications.

Responsibilities

Triage security alerts to validate and prioritize incidents.
Determine incident severity, impact, and root cause using MSSP and internal tools.
Monitor and respond to alerts and events from SIEM, IDS/IPS, firewalls, email, and EDR systems within established SLAs.
Review IAM activity and permissions to identify abuse by authorized users.
Monitor policy violations and report suspicious user behavior.
Assist with isolating affected systems to contain threats under supervision.
Record work notes and incident artifacts in ITSM incident tickets and documentation platforms.
Facilitate end-of-shift handovers and provide updates to SOC members and escalation points.
Seek guidance from and escalate issues to Mid-level Tier 2 analysts when necessary.
Conduct vulnerability scans, analyze reports, triage findings, and coordinate timely remediation across applications, infrastructure, and cloud environments.
Work with development and operations teams to implement sustainable security controls.
Optimize vulnerability scanning profiles, dashboards, and reports, and provide actionable risk prioritization and remediation guidance.
Contribute to continuous improvement of vulnerability management processes, policies, and procedures.
Participate in incident response activities and apply industry best practices.
Stay up to date on cybersecurity threats, vulnerabilities, and attack techniques.
Participate in on-call rotations and provide triage and escalation support.
Handle security inbox queries and respond to security-related inquiries in a timely manner.
Carry out other duties as assigned.

Benefits

Hybrid working and reasonable accommodations.
Generous holiday policies.
Health and wellbeing benefits, including corporate membership to Wellhub.
Paid volunteer time.
Professional development courses and tuition or qualification reimbursement.
Maternal and paternal leave benefits and family services.
Employee events and programs, including a 14er challenge.
Complimentary beverages, snacks, and employee happy hours.
Potential eligibility for an annual discretionary bonus award from the profit pool.
Pension and retirement plans.
Career development services, leadership development programs, mentoring, regular training, and continuing education courses.