Senior Security Analyst

Success Academy Charter Schools•New York, NY

11d•$150,000 - $170,000•Hybrid

About The Position

Success Academy is seeking a Senior Security Analyst to join their Information Security & Privacy team. This role is responsible for designing, implementing, and improving security program components, leading complex security initiatives, and advising cross-functional teams. The position requires hands-on work in security operations, endpoint protection, cloud security, data loss prevention, compliance, and privacy, with a focus on embedding security across business and technology functions. This is a unique opportunity to address the specific security needs of a K-12 school environment during a period of rapid growth and expansion into Florida. The Senior Security Analyst will report to the head of Security & Privacy within the Technology department. The Technology team manages a modern, cloud and SaaS-based environment, operating networking and in-school technologies across 57 locations and supporting over 3,000 employees and 20,000 students. This position is based at the network office in Manhattan (10005) and requires 3 days a week onsite.

Requirements

8+ years of professional experience in cybersecurity, including experience independently leading security initiatives within cloud-first organizations.
Strong hands-on experience with Crowdstrike Falcon or similar endpoint security platforms.
Expertise in Google Workspace security administration (Gmail rules, DLP, monitoring).
Expertise in advanced email security platforms (Sublime, Mimecast, Proofpoint, Abnormal, etc.).
Expertise with identity access management platforms (Okta).
Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management (Wiz experience preferred).
Experience designing security controls rather than simply administering security tools.
Demonstrated ability to independently drive complex security initiatives from concept through implementation.
Experience implementing security controls aligned with SOC 2, ISO 27001, FERPA.
Meticulous and tenacious in identifying and resolving security risks.
Excellent written and verbal skills; ability to convey security concepts to both technical and non-technical audiences.

Nice To Haves

Wiz experience preferred

Responsibilities

Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities.
Own the organization's endpoint security strategy and operations using CrowdStrike, proactively identifying risks, leading investigations, driving remediation efforts, and continuously improving endpoint protections.
Lead the evolution of our email security program by designing advanced detection, DLP, and anti-phishing controls while continuously improving protection against emerging attack techniques.
Act as the security lead for cross-functional technology initiatives, providing technical guidance and ensuring security is incorporated into architecture, engineering, and operational decisions.
Design, implement, and continuously mature security processes across incident response, vulnerability management, identity and access management, data protection, and security monitoring.
Stay ahead of emerging threats and security trends, recommend and vet new tools as appropriate.