Staff Security Analyst

Alkami Technology•Bentonville, AR

1d•$123,200 - $154,000•Remote

About The Position

The Staff Security Analyst is an advanced security operations professional who leads the design, execution, and continuous improvement of Alkami's threat detection and incident response capabilities across the enterprise. This role applies broad technical expertise to solve highly complex security challenges, strengthen detection engineering, and influence operational security strategy through cross-functional collaboration and technical leadership. Operating with significant independence, the incumbent partners with engineering, infrastructure, cloud, and technology leaders to improve organizational resilience, mature security operations capabilities, and enable rapid, effective response to evolving cyber threats.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or an equivalent combination of education and relevant experience.
6–10 years of experience in security operations, threat detection, incident response, digital forensics, cybersecurity engineering, or a related information security discipline, including broad experience leading complex enterprise security investigations and detection engineering initiatives across multiple technology domains.
Advanced incident response leadership and threat detection engineering
Expertise with SIEM, endpoint detection and response, cloud security monitoring, identity monitoring, and email security platforms
Advanced threat hunting, digital forensics, malware analysis, and adversary behavior analysis
Expert knowledge of MITRE ATT&CK, threat intelligence, detection engineering, and incident response frameworks
Security automation, orchestration, and operational workflow optimization
Ability to lead complex cross-functional security investigations and influence technical stakeholders
Strong analytical, investigative, and executive communication skills
Ability to independently solve highly complex operational security challenges

Nice To Haves

GCIA, GCIH, GCFA, SC-200, CISSP, or comparable advanced cybersecurity certification
Experience supporting regulated financial services environments
Experience with Microsoft Sentinel, Microsoft Defender, Splunk, CrowdStrike, Chronicle, or comparable enterprise security platforms
Experience developing enterprise detection engineering standards and security automation
Experience leading major incident response activities and security operations maturity initiatives

Responsibilities

Lead complex incident response activities, including containment, eradication, recovery, and post-incident improvements.
Design, implement, and mature enterprise threat detection capabilities using SIEM analytics, endpoint detection, cloud monitoring, behavioral analytics, and automated response workflows.
Conduct proactive threat hunting to identify advanced attacker behaviors, emerging threats, and indicators of compromise.
Develop and maintain enterprise detection engineering standards, playbooks, tuning methodologies, and quality practices.
Partner with Security Engineering, Infrastructure, Cloud Engineering, Identity, and Application Security teams to strengthen security controls and reduce organizational risk.
Lead forensic investigations across endpoint, network, cloud, identity, and application environments.
Evaluate emerging threats, adversary techniques, threat intelligence, and detection technologies to improve monitoring and response capabilities.
Develop automation and orchestration workflows to improve operational efficiency and response speed.
Establish and report on operational metrics related to detection effectiveness, incident response performance, and security operations maturity.
Advise technology teams on monitoring strategies, logging requirements, incident readiness, and detection coverage.
Mentor Security Analysts through technical guidance, investigation reviews, and knowledge sharing.
Contribute to enterprise security strategy, architecture reviews, and long-term cybersecurity planning.
Collaborate with Risk, Compliance, Internal Audit, and Legal teams to support regulatory, customer, and audit requirements.
Research emerging attack techniques, AI-enabled threats, and evolving security operations technologies to continuously enhance security capabilities.