Cybersecurity Analyst

Trupanion

. Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, vulnerability, and data-protection technologies .

Posted 11/4/2026full-timeRemote • Georgia • United StatesMid-LevelSenior💰 $120,000 - $140,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, incident response, and threat intelligence analysis, with a strong focus on vulnerability management and automation. Proficient in utilizing security tools and methodologies to investigate and respond to security incidents effectively.

Highest-signal resume keywords

Cybersecurity OperationsIncident ResponseThreat Intelligence AnalysisVulnerability ManagementSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEMEDR/XDRThreat HuntingVulnerability ScanningDigital ForensicsIncident TelemetryPhishing InvestigationMalware AnalysisScriptingCase Management

Soft Skills

Confidential Information HandlingCollaborationProblem SolvingCommunication

Tools & Technologies

Microsoft DefenderMicrosoft SentinelMicrosoft 365AzureIdentity SecurityCloud SecurityEndpoint Security

Industry Keywords

NIST CSFISO 27001PCI DSSNYDFS Cybersecurity RequirementsMITRE ATT&CK

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, vulnerability, and data-protection technologies
Validate, enrich, classify, prioritize, and investigate security events
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider-threat, and third-party events
Execute approved containment actions and coordinate infrastructure-level or production changes with Technology Operations
Collect and preserve evidence and support eradication, recovery validation, heightened monitoring, and incident closure
Collect and evaluate threat intelligence from commercial, government, industry, open-source, MDR, vendor, and internal sources
Analyze threat actors, campaigns, TTPs, indicators, exploited vulnerabilities, and targeted technologies
Create intelligence products and operationalize findings through investigations, detections, hunting queries, watchlists, blocking actions, phishing simulations, and runbook updates
Conduct MITRE ATT&CK-based threat hunts across identity, endpoint, email, network, cloud, and application telemetry
Validate vulnerability findings, assess risk and business exposure, prioritize remediation, identify exploitation, and escalate urgent vulnerabilities
Partner with Security Engineering and coordinate remediation with technology and application owners
Maintain vulnerability ticket flow, track service levels, report overdue exposure, and escalate ownership or delivery issues
Develop and maintain approved automation workflows, scripts, and playbooks
Preserve digital evidence under forensic, legal-hold, integrity, and chain-of-custody procedures
Maintain complete case records and validate containment and corrective actions
Support breach, identity, third-party, supply-chain, and AI-related security investigations
Provide technical evidence to Legal and Privacy without independently determining legal privilege, regulatory interpretation, or notification obligations
Execute MDR monitoring, security metrics and reporting, case documentation, and authorized security-tool actions
Provide structured handovers across operating regions

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field, or equivalent practical experience
3+ years of experience in cybersecurity operations, incident response, IT operations, system administration, network security, or a related area
Experience investigating alerts using SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies
Knowledge of attacker techniques, phishing, malware, account compromise, privilege misuse, lateral movement, exfiltration, and vulnerability exploitation
Experience applying threat intelligence and incident telemetry to vulnerability prioritization and exploitation assessment
Experience with security automation or scripting, digital-evidence handling, identity investigations, third-party incident analysis, and structured case management
Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments
Familiarity with MITRE ATT&CK and detection, threat-hunting, and incident-response methodologies
Understanding of vulnerability scanning and remediation workflows and ownership responsibilities
Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach-response obligations
Ability to support defined US business-hour coverage and participate in an escalation or on-call rotation
Availability to assist with high-severity incidents outside normal working hours when required
Ability to handle confidential, legally sensitive, and security-restricted information appropriately
Applicants must be authorized to work for any employer in the U.S.; visa sponsorship is unavailable

Benefits

Comp & perks

Monthly bonuses
Restricted Stock Units for all new team members, vesting over 4 years
Full medical, dental, and vision benefits at no cost to the employee
Four weeks of paid time off
9 paid float holidays
Five-week sabbatical after five years of employment
Pet medical insurance for one dog or cat at no cost
Paid time off to volunteer at nonprofit organizations
Free on-site gym
Free dog walking services for office pets during business hours
Free parking
Paid ORCA cards