Senior Security Analyst

Ensono

20h • $100,000 - $125,000 • Hybrid

About The Position

Ensono is seeking a Senior Security Analyst to join its Security Operations team and support incident response for Ensono and its customers. The role investigates and responds to security events, analyzes threats across complex enterprise environments, and works with internal teams and customers to contain and remediate incidents. The Senior Security Analyst serves as a senior escalation point, helps distinguish real threats from noise, and provides operational coverage and support for customer security environments. After-hours and/or on-call duty is required.

The position also supports a global cybersecurity model through monitoring and administering information security solutions, maintaining response procedures and playbooks, gathering audit evidence, implementing security upgrades and patches, and supporting security metrics and alert tuning. The analyst provides guidance to junior team members and coordinates with product owners and other teams.

Requirements

• At least 5 years of progressive cybersecurity experience, including at least 3 years of hands-on SOC experience supporting security monitoring, alert triage, incident investigation, escalation management, and incident response.
• Experience leading or independently handling security investigations and incident response in a large enterprise, managed services, MSSP, MDR, or multi-customer environment.
• At least 2 years of hands-on Microsoft Sentinel experience in production, including alert investigation, log analysis, incident management, threat detection, and security monitoring.
• At least 2 years of hands-on experience with Microsoft Defender technologies, investigating and responding to endpoint, identity, email, and cloud security incidents.
• Experience with SIEM platforms and security monitoring tools to identify, investigate, and respond to security threats.
• Experience distinguishing true-positive security events from false positives and making risk-based operational decisions.
• Experience communicating security incidents, technical findings, business impact, and remediation recommendations to technical and non-technical stakeholders, including customers.
• Experience creating and maintaining incident documentation, investigation records, security procedures, runbooks, and response playbooks.
• Strong understanding of TCP/IP networking, DNS, firewalls, encryption technologies, security controls, and common attack vectors.
• Strong understanding of malware classification, attack methodologies, infection vectors, persistence mechanisms, and threat actor techniques.
• Experience with digital forensics concepts, evidence preservation, log analysis, and investigative methodologies.
• Experience evaluating vulnerability scan results and assessing vulnerability risks in enterprise environments.
• Working knowledge of Microsoft Entra ID, Microsoft 365, Azure, vulnerability management processes, and privileged access management concepts.
• Experience with DLP, endpoint security technologies, anti-malware solutions, and host-based intrusion detection/prevention concepts.
• Experience using KQL, PowerShell, Python, SQL, or similar tools to support security investigations and operational efficiency.
• Strong written and verbal communication skills and the ability to perform effectively during high-pressure security incidents.
• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Systems, Engineering, or a related field, or an equivalent combination of education and relevant professional experience.

Nice To Haves

• Experience with Trend Vision One, Trend Micro security technologies, or other XDR platforms.
• Experience with threat hunting, detection engineering, security automation, orchestration, and SOAR workflows.
• Experience with Security-as-a-Service (SECaaS) security platforms.
• Knowledge of network and cloud security concepts, including virtual firewalls, cloud-native security controls, and container technologies.
• Familiarity with file integrity monitoring (FIM) technologies.
• Experience supporting compliance and security frameworks such as PCI-DSS, SOC 1/SOC 2, GDPR, HIPAA, IRS Publication 1075, NIST, and ISO 27001.
• One or more highly desired certifications: Microsoft Certified: Security Operations Analyst Associate (SC-200), GIAC Certified Incident Handler (GCIH), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Intrusion Analyst (GCIA), CompTIA CySA+, Certified Ethical Hacker (CEH), or Certified Information Systems Security Professional (CISSP).

Responsibilities

• Write clear, detailed project reports for communication to leaders.
• Monitor and administer information security solutions.
• Serve in a senior role monitoring and responding to security incidents.
• Collect evidence to support internal and customer audit requirements.
• Create internal and customer-facing security playbooks and procedures.
• Follow procedures, processes, and security tools that support a single global cybersecurity model.
• Guide and mentor junior members of the Security Operations team.
• Perform incident response duties as needed under the Ensono Incident Response Plan.
• Implement security application upgrades and patches.
• Investigate security events, threats, and vulnerabilities.
• Follow project plans and meet timelines and milestones.
• Assist with creating and maintaining security metrics.
• Collaborate across the team to create and tune security alerts.
• Learn new technologies and tooling capabilities throughout the workday.
• Assist product owners in aligning solutions with security product offerings.
• Prioritize tasks independently and work effectively in a fast-paced enterprise environment with competing demands.

Benefits

• Unlimited paid days off.
• Three health plan options.
• 401(k) with company match.
• Eligibility for dental, vision, short- and long-term disability, life and AD&D coverage, and flexible spending accounts.
• Family Forming Benefit, including fertility coverage and adoption/surrogacy reimbursement.
• Paid childbearing and paternal leave.
• Education reimbursement, student loan assistance, or 529 college funding.
• Sabbatical leave.
• Wellness program.
• Flexible work schedule.
• Annual bonus plan based on company and individual performance, depending on eligibility.
• Equity grant under the Associate Equity Appreciation Program, depending on eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior