Senior Security Analyst ( second is F2F Interview) || New York City, NY (Hybrid) || C2H

Qual Call Notes from manager

• Has not seen many strong candidates in the market so far.
• Looking for candidates with approximately 8+ years of experience.
• Focused on many of the same initiatives as the Security Analyst role, including:
  • Vulnerability management within engineering
  • Cloud and code base security
  • AI governance and security awareness
  • Management of security platforms such as CrowdStrike and Wiz
  • Automation, alerting, and incident triage
• Key difference is that this person should have experience leading security initiatives and programs, not just participating in them.
  • Looking for someone who has owned and driven similar efforts at previous organizations.
  • Expected to take ownership of the vulnerability management initiative and help mature related security programs.
• Despite the seniority, the team is small and everyone is expected to be hands-on.
  • Needs a blend of strategic thinking and day-to-day execution.
• Industry Preferences
  • Industry background is fairly open.
  • Google Workspace experience is highly desirable.
  • Non-financial services backgrounds are often a better fit, but no industries are being ruled out.
  • Preference for candidates from larger, more mature organizations rather than startup environments.

Job description:

A New York City-based education network is actively seeking an experienced Security Analyst for a great Senior-level opportunity with their team. In this role, the Senior Security Analyst will be responsible for strengthening security across cloud, endpoint, email, and identity environments while helping mature core security programs.

About the Opportunity:

• Shift: Day
• Schedule: Monday to Friday
• Hours: Standard business
• Setting: Hybrid (at least 3 days onsite; Tuesday to Thursday are mandatory)

Responsibilities:

• Lead security initiatives across cloud, endpoint, email, identity, and data protection environments
• Own and improve vulnerability management efforts, including remediation tracking and program maturity
• Manage endpoint security operations and investigations using security platforms such as CrowdStrike
• Support cloud security for AWS and Google Cloud Platform environments in partnership with engineering teams
• Develop and enhance security controls, monitoring, alerting, incident response, and phishing defense capabilities

Qualifications:

• 8+ years of experience in Cybersecurity
• Experience independently leading security initiatives in cloud-first organizations
• Hands-on experience with endpoint security platforms such as CrowdStrike
• Experience with Google Workspace security administration, including Gmail rules, DLP, and monitoring
• Experience with advanced email security platforms
• Cisco Meraki device experience 
• Experience with identity and access management platforms such as Okta
• Strong understanding of AWS security architecture, IAM, cloud networking, workload protection, and vulnerability management
• Experience designing security controls and driving complex security initiatives from concept through implementation
•