Senior Security Support Analyst

Responsibilities

• Assess the security posture of insureds and prospective insureds across programs, technologies, controls, and business environments.
• Investigate security incidents and cyber insurance claims to identify root causes, attack vectors, control gaps, and prevention opportunities.
• Advise customers and security leaders on practical, prioritized improvements in architecture, cloud security, data protection, and compliance.
• Translate threat intelligence and attacker behavior into detection tradecraft and actionable security recommendations.
• Partner with Product and cross-functional teams to improve risk models, underwriting approaches, and security-focused applications.
• Track emerging practices, regulatory developments, and industry trends to inform customers, processes, and products.

Requirements

• 2–4 years of experience in security analysis, blue-team or defensive security, penetration testing, red-team operations, incident response, or a related discipline.
• Experience assessing security programs, investigating incidents, or analyzing control effectiveness in complex business environments.
• Strong understanding of network threat lifecycles, attack vectors, exploitation methods, and attacker tactics, techniques, and procedures.
• Practical knowledge of TCP/IP, network analysis, security technologies, logs, and network traffic captures.
• Ability to investigate incidents and claims, determine root cause, and recommend effective preventive or detective controls.
• Familiarity with NIST, ISO, HIPAA, and PCI frameworks and their practical application.
• Strong written and verbal communication skills, including the ability to communicate recommendations to technical, executive, customer, and CISO audiences.
• Ability to turn ambiguous technical evidence into clear conclusions and prioritized business recommendations.
• Collaborative, self-directed judgment and initiative in a fast-paced, evolving environment.

Nice-to-Haves

• Experience analyzing cyber insurance claims or translating security findings into underwriting, rating, or risk-scoring inputs.
• Hands-on experience with cloud security, security architecture, data protection, or security control assessments.
• Background in threat intelligence and developing detection tradecraft from observed attacker behavior.
• Experience advising CISOs or customers on prioritizing security improvements based on risk, feasibility, and business context.
• Experience creating or improving internal security processes, products, or analytical methodologies.

Compensation and Benefits

• US base salary: $94,000–$140,000 per year, depending on geographic market and qualifications.
• 100% medical, dental, and vision coverage.
• Flexible paid time off.
• Annual home office stipend and WeWork access.
• Mental and physical health wellness programs.