[Remote] Senior Security Analyst

Note: The job is a remote job and is open to candidates in USA. Sola is seeking a Senior Security Analyst to own day-to-day security and compliance operations for its payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. The role focuses on security monitoring, identity and access management, incident response, and recurring PCI DSS and SOC 2 control execution.

Responsibilities

• Security Log Review: Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls. Retain ticket evidence of scope, results, coverage gaps, and linked incidents, and track exceptions through resolution
• Compliance Control Execution: Own the assigned PCI DSS and SOC 2 control calendar. Complete recurring control tasks, retain audit evidence, track overdue actions, and coordinate ASV scans, remediation, rescans, and access reviews. Support internal and external auditors with evidence requests
• XDR and File Integrity Monitoring: Operate XDR and approved file integrity monitoring configurations. Verify agent coverage, health, and updates; apply approved routine adjustments; and coordinate remediation with system owners
• Authentication Monitoring: Monitor Cognito authentication failures, suspicious logins, and account takeover indicators. Investigate findings and coordinate login availability issues with application owners
• Cloud and SIEM Monitoring: Verify GuardDuty coverage across AWS accounts and regions and monitor findings. Check Sumo Logic log delivery, alerts, and dashboards, and escalate collection or monitoring failures
• Identity and Access Management: Provision, modify, and promptly revoke access based on approved requests. Apply least privilege and MFA requirements, document approvals and changes, and coordinate periodic access certifications with system owners
• Incident Response: Lead the triage and investigation of security incidents, perform authorized containment, and coordinate resolution with internal teams and vendors. Maintain incident timelines, post-incident reports, and root cause analyses
• Firewall Management: Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers
• Documentation and Reporting: Maintain Confluence procedures and incident runbooks, reviewing them quarterly and after relevant changes or incidents. Provide monthly metrics on control completion, coverage, incidents, access changes, and overdue actions
• Continuous Improvement: Identify gaps in detection coverage, controls, and processes and recommend improvements. Share knowledge with and help guide less experienced team members

Skills

• 3-5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration
• Practical experience with AWS (including GuardDuty and Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted
• Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response
• Proven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands
• Strong ticket documentation skills and excellent written and verbal communication skills
• Ability to take part in after-hours incident response coverage, including a weekend and holiday backup rotation
• Experience in the payments industry or another PCI DSS regulated environment
• A bachelor's degree in Information Security, Computer Science, or a related field
• Relevant security certifications, such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP
• Hands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic
• Scripting experience in Python or Node.js

Benefits

• Remote

Company Overview

Company H1B Sponsorship