Senior Security Analyst

Job summary

The Senior Security Analyst will analyze data breaches and cyber insurance claims to protect customers from loss. They will also collaborate with cross-functional teams to translate security insights into scalable solutions and advise security leaders on improving controls.

Job details

ABOUT US Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks. Opportunities to make an impact with bold thinking are real—and happening daily at Coalition. ABOUT THE ROLE The Coalition Security team is comprised of bright minds across many cybersecurity domains, with expertise in Threat Intelligence, Cyber Risk Management and Defensive Security Controls. In the Security Analyst role, your mandate is to protect our policyholders from loss. As a part of this mandate, you might find yourself analyzing data breaches and claims events, conducting client security gap analyses or advising a CISO on how to improve specific security controls. You will work across our client base on topics ranging from security architecture and cloud security, to data protection and compliance. You will also have an opportunity to work with our product team to codify security best practices into our underwriting algorithms, rating models and risk management apps. RESPONSIBILITIES * Review and analyze the security posture of insureds or potential insureds quickly and efficiently * Evaluate customer security programs, technologies, controls, and business environments; recommend and develop enhancements * Analyze the root cause of specific cyber insurance claims and identify ways to detect exposures that could have prevented those claims. * Triage security incidents and claims, understand the root cause, and develop detection tradecraft from threat intelligence. * Provide recommendations on solutions to help customers manage information security risk * Track emerging security practices and contribute to building internal processes, and our various products * Stay abreast of the current regulatory environment, industry trends and related implications SKILLS AND QUALIFICATIONS * Minimum of 2-4 years of security analysis, defender/blue team or penetration testing/red team experience * Demonstrated expert understanding of the life cycle of network threats, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures * Knowledge of TCP/IP Protocols, network analysis and network/security applications, including log and network traffic capture analysis * Knowledge of industry standard frameworks – NIST, ISO, HIPAA, PCI * Self-motivated with an entrepreneurial spirit and comfortable working in a fast-paced, dynamic environment * Strong interpersonal communication skills (verbal & written) * Aptitude to learn technical concepts/terms and ability to manage multiple tasks/projects simultaneously * Bachelor’s Degree in Computer Science, Information Security, Engineering or equivalent work experience Bonus Points * Securing cloud based platforms (Microsoft Azure, Amazon AWS, etc.) - experience with system hardening procedures for Windows, Linux and Unix is helpful * Knowledge or experience with EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, WireShark, Zeek, or other open source forensic/log analysis/network analysis tools * Experience with Nmap, Nessus, Nexpose, Qualys, Burp, Kali, Metasploit, Meterpreter or other scanning and/or offensive tools * Knowledge of programming and scripting for development of security tools and industry frameworks is helpful * SCADA / Control systems network knowledge/experience a plus COMPENSATION As a remote-first organization, our compensation reflects the cost of labor across several Canadian geographic markets. In Alberta, British Columbia & Ontario the base salary for this position ranges from $118,600/year up to $163,075/year. For all other locations, the base salary for this position ranges from $106,700/year up to $146,763/year. Consistent with applicable laws, an employee's pay within this range is based on a number of factors, which include but are not limited to relevant education, skills, job-related knowledge, qualifications, work experience, credentials, and/or geographic location. Your Recruiter can share more on the specific target salary range for your location during the interview process. Coalition, Inc. reserves the right to modify this range as needed. Vacancy Status: This posting is for an existing vacancy. Use of AI: We utilize AI-assisted tools to help us organize and review the high volume of applications we receive. However, our human recruiting team makes all final hiring decisions and interview selections, valuing personal connection over algorithms. Application Updates: Consistent with our commitment to transparency, if you are interviewed for this role, we will provide a status update on your application within 45 days of your final interview. PERKS * 100% medical, dental, and vision coverage * Flexible PTO * Annual home office stipend and WeWork access * Mental & physical health wellness programs like Headspace, Lumino, and more! * Competitive compensation and opportunity for advancement WHY COALITION? Work at Coalition is centered on the joint mission to Protect the Unprotected. We have built a remote-first, highly inclusive culture that welcomes people from diverse backgrounds. We trust each other to take responsibility, share ownership of outcomes, and put in the work together to protect businesses from digital risk. Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes while remaining true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion. We’re always looking for collaborative, inquisitive individuals to join #OurCoalition. Visit our Newsroom > [https://www.coalitioninc.com/newsroom] PRIVACY NOTICE Coalition is committed to protecting your privacy and handling your personal information responsibly. We collect, use, and store personal information as necessary for the recruitment process and in compliance with applicable privacy laws and regulations in all regions where we operate. We want you to understand what personal information we collect, how we use it, and your rights regarding access, correction, and deletion of your data where applicable. Information submitted, collected, and processed as part of your application is subject to Coalition's Privacy Policy. For further details, please review our full Privacy Policy or contact us with any questions regarding how your information is handled. Our Privacy Policy > [https://www.coalitioninc.com/legal/privacy] SAFE HIRING NOTICE All legitimate communication from Coalition comes from @coalitioninc.com emails, and open roles are listed only on our Careers page [https://www.coalitioninc.com/careers]. We never ask for payment, banking details, or personal identification before an offer is accepted through our secure systems. If you believe you’ve been a victim of fraudulent recruiting, follow guidance from the Federal Trade Commission [https://consumer.ftc.gov/articles/what-do-if-you-were-scammed] (FTC). ANTI-DISCRIMINATION NOTICE Coalition is proud to be an Equal Opportunity employer. Our policy is to provide equal employment opportunities to all individuals, without discrimination or harassment on the basis of any characteristic protected by applicable laws in each country where we operate. This commitment includes, but is not limited to, ensuring equal treatment in recruitment, selection, training, promotion, transfer, compensation, and all other aspects of employment. Coalition does not tolerate discrimination or harassment of any kind, and we are dedicated to fostering an inclusive and supportive workplace. ACCOMMODATIONS Coalition is committed to providing reasonable accommodations to qualified individuals with disabilities, including applicants and employees, in accordance with applicable laws and regulations in each country where we operate. Our policy is to support equal opportunity in the hiring process by considering qualified applicants regardless of disability or other protected characteristics, unless providing accommodation would impose an undue hardship or disproportionate burden. If you require accommodation to complete an application, interview, pre-employment testing, or participate in the selection process, please contact us at candidateaccommodations@coalitioninc.com [candidateaccommodations@coalitioninc.com]. We also consider all qualified applicants, including those with criminal histories, in line with applicable laws and regulations in each jurisdiction. To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.

What you’ll do

The Senior Security Analyst will analyze data breaches and cyber insurance claims to protect customers from loss. They will also collaborate with cross-functional teams to translate security insights into scalable solutions and advise security leaders on improving controls.

Requirements

Candidates must have 2–4 years of experience in security analysis, defensive operations, or penetration testing. A bachelor's degree in a related field or equivalent practical experience is required, along with strong knowledge of security frameworks and network protocols.

Benefits

• Medical coverage • Dental coverage • Vision coverage • Flexible PTO • Annual home office stipend • WeWork access • Mental health wellness programs • Physical health wellness programs

Listed skills

• Metasploit · Preferred
• Burp Suite · Preferred
• Nmap · Preferred
• Nessus · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Security analysis
• Blue team
• Defensive security operations
• Penetration testing
• Red team
• Network security
• Vulnerability assessment
• Nmap
• Nessus
• Burp Suite
• Kali Linux
• Metasploit
• NIST CSF
• ISO 27001
• HIPAA
• PCI DSS
• Qualys
• Attack Vectors
• Client Security
• Security Tools
• Intellectual Curiosity
• Industry Standards
• Cyber Threat Intelligence
• Nexpose (Vulnerability Scanning Software)
• NIST Cybersecurity Framework (CSF)
• EnCase (Digital Intelligence Software)
• Cyber Risk
• IT Security Architecture
• Security Risk
• Artificial Intelligence
• Algorithms
• Amazon Web Services
• Data Analysis
• Penetration Testing
• Automation
• Underwriting
• Microsoft Azure
• Bash (Scripting Language)
• Management
• Unix
• Network Analysis
• Cloud Security
• Communication
• Computer Science
• Control Systems
• Security Controls
• Cyber Security
• Information Privacy
• Linux
• Digital Forensics

Job areas

• Security & Safety
• Technology
• Finance & Accounting
• Software
• Engineering
• Security Analyst
• Vulnerability Analyst / Penetration Tester
• Database and Network Professionals Not Elsewhere Classified
• Penetration Testers
• Computer Occupations, All Other