Security Analyst

• Monitor and triage security alerts across identity, endpoint, email, network, cloud, application, vulnerability, and data-protection technologies
• Validate, enrich, classify, prioritize, and investigate security events
• Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exposure, insider-threat, and third-party events
• Execute approved containment actions and coordinate infrastructure-level or production changes with Technology Operations
• Collect and preserve evidence and support eradication, recovery validation, heightened monitoring, and incident closure
• Collect and evaluate threat intelligence from commercial, government, industry, open-source, MDR, vendor, and internal sources
• Analyze threat actors, campaigns, TTPs, indicators, exploited vulnerabilities, and targeted technologies
• Create intelligence products and operationalize findings through investigations, detections, hunting queries, watchlists, blocking actions, phishing simulations, and runbook updates
• Conduct MITRE ATT&CK-based threat hunts across identity, endpoint, email, network, cloud, and application telemetry
• Validate vulnerability findings, assess risk and business exposure, prioritize remediation, identify exploitation, and escalate urgent vulnerabilities
• Partner with Security Engineering and coordinate remediation with technology and application owners
• Maintain vulnerability ticket flow, track service levels, report overdue exposure, and escalate ownership or delivery issues
• Develop and maintain approved automation workflows, scripts, and playbooks
• Preserve digital evidence under forensic, legal-hold, integrity, and chain-of-custody procedures
• Maintain complete case records and validate containment and corrective actions
• Support breach, identity, third-party, supply-chain, and AI-related security investigations
• Provide technical evidence to Legal and Privacy without independently determining legal privilege, regulatory interpretation, or notification obligations
• Execute MDR monitoring, security metrics and reporting, case documentation, and authorized security-tool actions
• Provide structured handovers across operating regions

Explore Cybersecurity Analyst at Trupanion. Review requirements and application details.