The cloud ☁️ of choice for developers, startups, and growing digital businesses around the world.
Senior Security Analyst
Location
Massachusetts
Posted
2 days ago
Salary
$140.8K - $176K / year
Seniority
Senior
Job Description
Senior Security Analyst
DigitalOcean
• Lead real-time monitoring, triage, and analysis of complex security events, providing verifiable assessments of threats and incident severity. • Engineer and automate advanced detection use cases across DigitalOcean's cloud and corporate environments, leveraging deep knowledge of adversary TTPs to design and implement scalable alerting solutions. • Develop, track, and report on key metrics for security monitoring effectiveness and incident response performance, using data to drive improvements. • Own and evolve the security monitoring program strategy, ensuring alignment with evolving threat landscapes and business priorities. • Work closely with Infrastructure Security Engineers to identify log sources, integrate, and maintain data pipelines (e.g., log sources, forwarders, parsing, enrichment). • Perform proactive threat hunting and hypothesis-driven investigations and investigate anomalous activity to uncover hidden or emerging threats within DigitalOcean’s environments. • Mentor and guide lower level analysts, reviewing escalated incidents and providing technical leadership during incident response. • Coordinate threat analysis using historical data and architecture diagrams to identify attack vectors. • Collaborate with multiple teams to close monitoring gaps and improve overall security. • Optimize security tools and processes to reduce false positives, improve detection fidelity, and automate response workflows where appropriate. • Lead the creation and maintenance of detailed playbooks, runbooks, and documentation to standardize detection and response efforts.
Job Requirements
- 5+ years of hands-on experience with SIEM platforms and endpoint detection tools, with proven impact on security monitoring programs.
- Demonstrated expertise in designing and tuning complex detection rules and alerting logic across diverse environments.
- Deep understanding of network and endpoint security, attack methodologies, threat actor tactics, and mitigation strategies.
- Experience in proactive threat hunting, vulnerability management, and coordinating with red teams or penetration testers.
- Proven leadership in driving security program initiatives, setting metrics, and influencing cross-team security strategy.
- Excellent communication skills for technical documentation, incident reporting, and mentoring less experienced analysts.
- Proven experience with scripting and query languages (Python, Bash, SQL) to automate detection and response workflows.
- Demonstrated proficiency in Linux, Windows, and macOS.
Benefits
- Employee Assistance Program
- Local Employee Meetups
- Flexible time off policy
- Reimbursement for relevant conferences, training, and education
- Access to LinkedIn Learning's 10,000+ courses
- Competitive array of benefits
Related Guides
Related Categories
Related Job Pages
More Security Analyst Jobs
End Point Security Analyst
A.T. Still University - ATSUA.T. Still University - ATSU is a health sciences university. Andrew Taylor Still founded the school in 1892 as the American School of Osteopathy. Today, A.T. S
End Point Security Analyst (remote) Job Type Full-time Description A.T. Still University (ATSU) is seeking a full-time exempt Endpoint Security Analyst. This is a fully remote position. This position will plan, implement, upgrade, or monitor security measures for the protection of computer networks and information, specializing in endpoint security, vulnerability management, and application security. In addition, ensure that appropriate security controls are in place and safeguard digital files and vital electronic infrastructure. May respond to computer security incidents and malware. Duties & Responsibilities: - Windows endpoint administration: Windows patches, 3rd Party Patches, Firewall, Vulnerability management - Manage Active Directory / Group Policy infrastructure - Mobile device management: Encryption, Multi-Factor authentication - Provide computer security consulting support for the university - Monitor security logs on all systems and address any incidents or anomalies recorded - Document computer security and emergency measures, policies, procedures, and testing protocols - Assure end-point protection software is kept current in accordance with departmental policy - Analysis of applications/software/polices in enterprise environment and the effects of workflows to the end-user - Ability to use powershell to automate security processes, parse security logs, and secure the environment - Confer with users to discuss issues such as computer data access needs, security violations, and programming changes - Coordinate implementation of computer system plan with establishment personnel and outside vendors - Monitor use of data files and regulate access to safeguard information in computer files - Desktop architecture - Microsoft Server and Active Directory administration - Group policy management - Building and deploying secure golden OS images Requirements - 4 year Degree Computer Science or a related degree plus ability to acquire CCNA Security 3-5 years experience in: - Ivanti, Computer hardware, Microsoft Windows Server, TCP/IP, Google e-mail systems, ethernet, fastethernet and Cisco equipment, Nessus, ISE, and endpoint protection - Network and computer forensic analysis, data security, electronic threat identification and mitigation - PCI/DSS, HIPAA, FERPA, copyright laws - Management of monitoring software/service, ie. Orion - Management of asset/inventory/patching software/service, ie. Ivanti and Ordr - Management of password management software/service, ie. Secret Server The salary for this position is $70,000 to $87,523 based on experience and location. ATSU offers a comprehensive benefits package including medical, dental, and vision coverages, among more. If eligible, employee-elected benefits would begin the first of the month following hire date. For more information, please visit: atsu.edu/employment/benefits. A.T. Still University (ATSU) does not discriminate on the basis of race, color, religion, ethnicity, national origin, sex (including pregnancy), sexual orientation, age, disability, or veteran status in admission or access to, or treatment or employment in its programs and activities.
• Manage the full lifecycle of vulnerabilities in operating systems, applications, and other assets • Identify, analyze, and prioritize vulnerabilities using industry-recognized methodologies • Assess the impact, severity, and risk of vulnerabilities, converting this information into clear indicators to support decision-making • Route vulnerabilities to the responsible teams and monitor remediation plans and deadlines • Provide technical support to teams during the vulnerability remediation process • Monitor metrics, track SLAs, and escalate to leadership when necessary • Support the continuous improvement of Vulnerability Management processes and the organization’s security posture
• Lead cyber operations planning and cybersecurity evaluation • Conduct cybersecurity testing using automated vulnerability scanning tools • Analyze system configurations and remediate findings • Develop and maintain cybersecurity frameworks across various systems • Provide comprehensive system administration support across multiple platforms • Design, deploy, and maintain cybersecurity tools and technologies • Collaborate with engineering and cybersecurity teams to ensure effective system performance • Provide technical guidance and troubleshooting support to customers and stakeholders
Analista Sênior de Governança de Tecnologia e Cibersegurança
ExperianWe're unlocking the power of data to help create a better tomorrow.
• Coordenar atividades de governança relacionadas a programas estratégicos de Tecnologia e Cibersegurança. • Facilitar reuniões de governança, fóruns executivos e sessões de acompanhamento com equipes multidisciplinares. • Monitorar riscos, dependências, marcos, entregas e planos de ação dos programas sob sua responsabilidade. • Desenvolver, manter e evoluir KPIs, dashboards, scorecards e relatórios executivos. • Garantir a qualidade, consistência e atualização da documentação e dos artefatos de governança. • Apoiar processos de priorização e tomada de decisão baseados em riscos. • Apoiar a governança do Programa de Gestão de Vulnerabilidades da LATAM. • Coordenar o acompanhamento das ações de remediação junto às equipes de tecnologia e negócio. • Monitorar indicadores de exposição, desempenho de remediação e aderência aos SLAs estabelecidos. • Apoiar processos de avaliação e priorização de vulnerabilidades com base em riscos. • Identificar oportunidades de melhoria contínua para aumentar a maturidade e eficácia do programa. • Apoiar avaliações de tecnologia, segurança e governança durante processos de aquisição de empresas. • Coordenar atividades de governança relacionadas à integração tecnológica pós-aquisição. • Acompanhar workstreams de integração envolvendo infraestrutura, aplicações, identidade e acessos, controles de segurança e processos operacionais. • Apoiar a adequação de ambientes adquiridos aos padrões corporativos de tecnologia e segurança. • Consolidar indicadores, riscos, dependências, status de integração e reportes executivos. • Manter documentação, evidências e registros relacionados aos programas de integração. • Utilizar recursos de Inteligência Artificial (IA) e automação para aumentar a eficiência operacional, a qualidade dos relatórios e a tomada de decisão. • Promover iniciativas de melhoria contínua nos processos de governança, acompanhamento e gestão de programas.
