Senior Security Analyst

Janus Henderson•Denver, CO

4d•Hybrid

About The Position

This role focuses on cyber incident response and vulnerability management. The analyst monitors, triages, investigates, documents, and escalates security incidents, and coordinates vulnerability identification, assessment, prioritization, and remediation across applications, infrastructure, and cloud environments. The position collaborates with security, development, and operations teams and contributes to improving security processes and controls. The role includes on-call rotations and may require scheduled work on weekends or holidays. It is a hybrid position. The posting is open through November 15, 2026, and the position may be eligible for an annual discretionary bonus funded from the company profit pool.

Requirements

At least 2 years in an Information Security role, with proven experience in Security Operations or Threat Analysis roles.
Hands-on experience with SIEM and EDR platforms.
Analytical mindset and knowledge of TTPs, malware behavior, and incident handling methodologies.
Familiarity with IAM concepts and monitoring, including reviewing user permissions, detecting abuse, and flagging suspicious behavior or policy violations.
Experience performing alert triage and incident escalation within defined SLAs using ITSM tooling such as ServiceNow and documentation platforms such as Confluence.
Strong collaboration skills when working with application and infrastructure teams in a security context.
Working knowledge of security best practices and frameworks such as MITRE ATT&CK, OWASP Top 10, and NIST.
Excellent written and verbal communication skills, including producing clear work notes, handover reports, and stakeholder updates.
Ability to manage multiple projects and tasks.
Analytical ability to capture and summarize information, find solutions to tactical and strategic problems, and prioritize work.
Exposure to public cloud infrastructure, including SaaS, IaaS, and PaaS.
Willingness to adhere to the firm's Investment Advisory Code of Ethics and applicable disclosure and certification requirements, including those related to personal securities activities and political contributions or activities.
Ability to understand the firm's regulatory obligations and abide by applicable regulated-entity requirements and company policies.
Applicants are subject to background checks.

Nice To Haves

At least 1 year of experience in Incident Response and/or Security Operations.
Scripting or automation experience, such as Python, PowerShell, or KQL, to enhance SOC playbooks, enrich alerts, or reduce manual triage.
Exposure to SOAR platforms and use-case development for automating repeatable response actions.
Experience working alongside an MSSP or within a co-managed SOC model.
Familiarity with threat intelligence platforms such as OpenCTI, Recorded Future, or MISP, and applying cyber threat intelligence to detection and hunting.
Relevant Information Security certifications, such as CompTIA Security+, CySA+, CEH, SANS, or cloud certifications.

Responsibilities

Triage security alerts to validate and prioritize incidents, and determine their severity, impact, and root cause using MSSP and internal tools.
Monitor and respond within SLAs to security alerts and events from SIEM, IDS/IPS, firewalls, email, and EDR systems.
Conduct routine IAM reviews to identify and address abuse of permissions by authorized users; monitor policy violations and report suspicious behavior.
Assist with isolating affected systems to contain threats under supervision.
Document work notes and artifacts in ITSM incident tickets, including ServiceNow and Confluence.
Facilitate end-of-shift handovers and provide timely updates to SOC colleagues and escalation points; seek guidance from and escalate to Tier 2 analysts when needed.
Conduct regular vulnerability scans, analyze reports, and triage identified issues to support timely risk mitigation.
Lead the process of identifying, assessing, and coordinating remediation of vulnerabilities across applications, infrastructure, and cloud environments, collaborating with development and operations teams.
Optimize vulnerability scanning profiles, dashboards, and reports to improve coverage and provide actionable insights and remediation guidance.
Contribute to improvement of vulnerability management processes, policies, and procedures, support incident response, and align work with industry best practices.
Stay current on cybersecurity threats, vulnerabilities, and attack techniques.
Participate in on-call rotations and provide triage and escalation support.
Handle queries from the security inbox and respond to security-related inquiries in a timely manner.
Carry out other duties as assigned.

Benefits

Hybrid working and reasonable accommodations.
Generous holiday policies.
Health and wellbeing benefits, including corporate membership to Wellhub.
Paid volunteer time.
Professional development courses and tuition or qualification reimbursement.
Maternal and paternal leave benefits and family services.
Employee events and programs, including a 14er challenge.
Complimentary beverages and snacks, and employee happy hours.
Potential eligibility for an annual discretionary bonus award from the profit pool.
Competitive compensation, pension/retirement plans, and health, wellbeing, and lifestyle benefits.
Mentoring, leadership development programs, regular training, career development services, and continuing education courses.