Senior Security Analyst – Proactive Threat Detection

About the role

The Senior Security Analyst drives proactive security engineering and continuous improvement of detection capabilities across client environments. Using the NIST Cybersecurity Framework, the role aligns security tooling, standards, and risk reduction initiatives to deliver measurable outcomes.

Key responsibilities

• Operate and maintain proactive security capabilities, including monitoring, signal validation, and configuration improvement.
• Deliver Security-as-a-Service operations, reporting on security posture and tool health.
• Improve detection quality by tuning correlation logic, dashboards, and alert thresholds.
• Perform advanced Windows and Microsoft 365 log analysis to uncover suspicious patterns and early compromise indicators.
• Advance hardening and baseline-aligned implementations for endpoints, servers, identity, and cloud configurations.
• Support end-user risk reduction through security awareness training and phishing simulation platforms (e.g., Huntress SAT, Breach Secure Now).
• Ensure security tooling and practices meet vertical requirements and service model specifications.
• Evaluate new security solutions for service viability, including feature comparison and standardization.
• Contribute to internal AI and automation initiatives by defining requirements, validating outputs, and scaling workflows.
• Act as senior technical escalation point, collaborating with cross-functional teams to resolve complex issues and standardize processes.
• Provide consultative client communication on security posture, risk exposure, and prioritized recommendations.
• Participate in compliance discussions and evidence preparation for frameworks such as CMMC 2.0 and SOC reports.

Required profile

• Professionalism with strong written communication skills to explain complex security concepts.
• Excellent time management, detail orientation, and ability to work independently in a fast-paced MSP environment.
• Strong collaboration and stakeholder management abilities.

Required skills

• Windows operating system expertise.
• Microsoft 365 administration and log analysis.
• Security monitoring and detection tuning.
• Endpoint hardening and baseline configuration.
• Cloud security and identity management.
• Phishing simulation platforms (Huntress SAT, Breach Secure Now).
• Knowledge of NIST Cybersecurity Framework (CSF) 2.0.
• Familiarity with CMMC 2.0 and SOC compliance requirements.
• Experience with AI-driven automation workflows.