Senior Security Analyst

Who you are

• 2–4 years of hands-on experience in security analysis, blue team/defensive security operations, and/or penetration testing/red team engagements
• Deep understanding of the lifecycle of network threats, common attack vectors, and exploitation methods, including familiarity with intrusion set tactics, techniques, and procedures (TTPs)
• Strong knowledge of TCP/IP protocols, network analysis, and network/security applications, including log and network traffic capture and analysis
• Experience with one or more vulnerability assessment and offensive security tools, such as Nmap, Nessus, Nexpose, Qualys, Burp Suite, Kali Linux, Metasploit, or similar
• Working knowledge of industry-standard security and risk frameworks (e.g., NIST CSF, ISO 27001, HIPAA, PCI DSS)
• Clear, confident interpersonal communication skills (verbal and written), with the ability to translate technical concepts for non-technical audiences
• Demonstrated ability to learn new technical concepts quickly and manage multiple tasks/projects in a fast-paced, dynamic environment
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience
• Experience securing cloud-based platforms (e.g., Microsoft Azure, Amazon Web Services), including system hardening procedures for Windows, Linux, and/or Unix
• Familiarity with forensic, log analysis, and network analysis tools such as EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, Wireshark, Zeek, or comparable open-source tools
• Knowledge of programming or scripting (e.g., Python, PowerShell, Bash) for developing security tools, automation, or implementing industry frameworks
• Experience with SCADA/ICS/control systems networks
• Background in cyber insurance, risk quantification, or working with underwriting/claims teams

What the job involves

• The Coalition Security team is a group of specialists across multiple cybersecurity domains, including Threat Intelligence, Cyber Risk Management, and Defensive Security Controls
• As a Senior Security Analyst, your mandate is to protect our customers from loss
• In this role, you’ll analyze data breaches and cyber insurance claims events, conduct client security gap analyses, and advise CISOs and security leaders on how to improve specific security controls
• You will work across our customer base on topics ranging from security architecture and cloud security to data protection and compliance
• You will also have the opportunity to partner with our product teams to codify security best practices into our underwriting algorithms, rating models, and risk management applications—directly shaping how we quantify and mitigate cyber risk at scale
• Review and analyze the security posture of insureds and prospective insureds quickly and efficiently
• Evaluate customer security programs, technologies, controls, and business environments; recommend and help develop enhancements to reduce risk
• Analyze the root cause of cyber insurance claims and loss events, and identify ways to detect and mitigate exposures that could have prevented those claims
• Triage security incidents and claims, understand root cause, and develop detection tradecraft informed by threat intelligence and real-world attacks
• Provide practical, prioritized recommendations to help customers manage information security risk and strengthen their security programs
• Track emerging security practices, threat trends, and vulnerabilities and contribute those insights to internal processes, playbooks, and product capabilities
• Stay current on the regulatory landscape and industry standards (e.g., NIST, ISO, HIPAA, PCI) and interpret their implications for Coalition and our customers
• Collaborate cross-functionally with underwriting, claims, product, and engineering teams to translate security insights into scalable solutions and customer value

Benefits

• Paid parental leave
• 401k plan
• Stock option plan
• Open vacation days
• Flexible working hours
• Work from home opportunities
• Health insurance