Senior Security Analyst

The role

You will build detections, triage alerts, respond to incidents, and hunt threats across cloud infrastructure, security tooling, and data pipelines. You will also mentor junior analysts and partner with leadership to drive security posture.

What you will do

• Build, tune, and maintain detection rules and alerts in SIEM
• Own incident response execution end-to-end
• Monitor and investigate security events across endpoints, cloud, identity, and network telemetry
• Assist with security audits and regulatory examinations
• Analyze systems, applications, and networks for security configurations
• Manage log pipelines including ingestion, parsing, normalization, and enrichment
• Triage and prioritize vulnerability findings and track remediation SLAs
• Collaborate with Engineering on IaC and CI/CD security reviews
• Contribute to runbooks and playbooks
• Perform all other duties as assigned

Required qualifications

• 5+ years in information security or security operations
• Hands-on SIEM experience with query writing, detection building, and alert tuning
• Strong working knowledge of cloud security concepts and services
• Proficiency working with logs across endpoint, cloud, network, identity, and application sources
• Understanding of CI/CD pipelines and IaC (Terraform, CloudFormation) from a security perspective
• Solid grasp of Windows, macOS, and Linux internals
• Demonstrated IR experience, including leading or contributing to investigations
• Familiarity with data normalization, log parsing, and ETL concepts
• Strong written and verbal communication skills

Nice to have

• Experience with log routing, transformation, and enrichment
• Hands-on experience with an enterprise EDR/XDR platform and its ecosystem tooling
• Experience with network security tools and interpreting proxy or web traffic logs
• Background in a regulated industry (financial services, healthcare) with familiarity with NIST CSF, GLBA, or FFIEC
• Scripting or automation experience (Python, Bash)
• Relevant certifications: CISSP, GCIH, GCIA, GCED, CEH, GDSA, or equivalent
• Detection as Code experience using version-controlled detection content
• Exposure to identity security tooling

Benefits

• Medical
• Dental
• Vision
• Life
• 401k Matching
• Wellness benefits, including FSA, HSA and HRA
• Paid parental leave
• Flexible vacation policy, including PTO and paid holidays

About the company

Lead is a banking infrastructure platform that enables fintechs to offer compliant, programmable services. It is an API-first, developer-focused partner bank.