Security Analyst II

UserTesting

. Act as the initial point of contact for the Security queue by triaging, prioritizing, routing and resolving tickets, escalating complex requests, and automating recurring request types .

Posted 11/3/2026full-timeRemote • United KingdomMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations, including incident response, alert triage, and automation of workflows using AI. Proficient in managing customer interactions and refining security documentation while maintaining operational metrics.

Highest-signal resume keywords

Security OperationsIncident ResponseAI AutomationCustomer CommunicationOperational Metrics Tracking

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Alert TriageIncident Response FundamentalsEndpoint SecurityIdentity And Access ManagementDLPSIEMSecurity QuestionnairesAutomation ScriptingAPI IntegrationTechnical Writing

Soft Skills

Strong Communication SkillsHighly OrganizedSelf-StarterCustomer-Facing SkillsInitiative

Tools & Technologies

JiraJira Service ManagementCompliance ToolsVantaAI Agents

Certifications & Qualifications

CompTIA Security+ISC2 CC

Industry Keywords

SOC 2ISO 27001NIST CSFThird-Party Risk ManagementTrust Center

About the role

Key responsibilities & impact

Act as the initial point of contact for the Security queue by triaging, prioritizing, routing and resolving tickets, escalating complex requests, and automating recurring request types
Triage endpoint and security alerts and DLP events using runbooks and AI-assisted analysis
Analyze alert volumes and false-positive rates, tune detections, and automate enrichment and first-pass triage
Participate in incident response, including phishing and social-engineering triage and drafting internal security notices
Conduct post-incident reviews, update runbooks, and implement process or tooling changes
Review and refine AI-drafted responses to security questionnaires, RFPs and due-diligence requests for Sales
Maintain the answer library, standard responses and Trust Center documents, and handle Trust Center access requests
Join customer calls to explain Auros’s security posture with support from senior team members
Conduct first-pass vendor security reviews for third-party risk management
Review requests for new software, browser extensions and AI tools against the approval process
Support access checks, customer data deletion requests, impersonation or fraudulent-domain reporting, and internal and external audits
Build and maintain automations, AI agents and integrations across security tools
Keep runbooks current as executable documents for people and AI tooling
Define and track operational metrics such as time to triage, time to resolve and questionnaire turnaround
Use metrics to prioritize improvements, pilot tools or working methods, and demonstrate impact
Demonstrate Auros’s values through work product and daily team interactions

Requirements

What you’ll need

Strong written and verbal communication skills, including writing clear, accurate customer answers and explaining technical topics to non-technical audiences
Comfortable working directly with customers and internal teams
Highly organized, able to manage multiple requests and deadlines and complete work
Self-starter who works independently, follows runbooks, knows when to escalate, and takes initiative to improve processes
Experience using AI to automate work, ideally including building AI agents or agent-like workflows that improve team efficiency
Technical foundation in security operations, including alerting, endpoint, identity and access management, and incident response fundamentals
3 years of experience in security, IT, compliance, or a customer-facing technical role
Familiarity with SOC 2, ISO 27001 or NIST CSF is desirable but not required
Experience completing security questionnaires such as SIG or CAIQ, or using compliance tools such as Vanta, is desirable but not required
Experience with Jira or Jira Service Management is desirable but not required
Exposure to DLP, endpoint security or SIEM/alerting tools, including detection or alert tuning, is desirable but not required
Experience building AI agents, automations or integrations, or scripting against security tool APIs, is desirable but not required
CompTIA Security+ or ISC2 CC certification is desirable but not required

Benefits

Comp & perks

Equal Opportunity Employer
Inclusive and accessible candidate experiences
Interview-process accommodations available
Diverse perspectives and backgrounds welcomed