Senior Security Analyst monitoring and responding to EDR/XDR/SIEM alerts, conducting incident response and threat hunting, and deploying managed security tooling for MSSP clients.
The Senior Security Analyst will monitor and manage alerts generated from various security tools and respond to and mitigate security threats for CompassMSP’s managed security service clients. They will also assist in deploying and managing the technology that enables our core security services, maximizing and bolstering our clients’ security with their technical expertise and knowledge of security industry best practices.
Responsibilities
Investigate, manage,respond to,and escalatesecurity alerts from various security platforms, such as EDR/XDR, SIEM, etc.
Analyze security events escalated from tier 1 tovalidatethreats and respond accordingly.
Investigate and respond to reported phishing emails.
Analyze, prioritize, and track vulnerabilitiesdetected by vulnerability scanners.
Researchemerging threatsand perform global threat huntsto support correlating industrydata and threat feeds with our clients’ environments andattack surfaces.
Interface directly with clients and end users wheninvestigating threats and managing/troubleshooting managed security tools.
Assistin the deployment of the managed security services toolstackto new clients.
Assistwithinternal quality projects, including developing standardsandsecurityservicesforCompassMSP.
Stay current with the latest industry trends, best practices, and regulatory requirements tohelpcontinuously enhance our securityservices.
Hunt for emerging threats using a combination ofmethods and tools such as SIEM querying, software testing, sandboxing, etc.Translate the results of threat hunts into actionable alerts andanalysisSOPs to aid the SOC in protecting clients.
Create andmaintaininternal standard operating procedures.
Participate in a flexible work schedule to includeafter hours/ on-call shifts.
Requirements
5+ years of experience in a SOC/incident response role.
Demonstrated experience conducting alert and incident investigationsend-to-end with minimal oversight and sound escalation judgment
Execution-oriented: able to perform containment, blocking, isolation, and basic remediation in small and mid-sized business environments.
Experience monitoring and responding to threatsimpactingWindows, Microsoft 365 / Entra ID, and firewalls.
Familiarity and comfort working acrossEDR,firewalladministration, identity and email security consoles, ticketing systems, RMM tools, and security telemetry sources.
Preferred Additional Experience:
Infrastructure Recovery & IT Engineering
Network, cloud, and endpoint recovery
Firewall, VPN, and zero-trust environments
Backup validation and isolated recovery environments
Active Directory, virtual hosts, domain controllers, migrations, and secure system restoration
Endpoint wipe-and-reload and related rebuild activities
Benefits
Competitive pay
Quarterly Bonuses
Progressive PTO
Medical/Dental/Vision/Life/Disability available
Tax deferred retirement plan with company match
Career Development and Coaching
Fun work environment!
Our Commitment to Inclusion: Step into a role that respects your individuality and supports your growth. CompassMSP is proud to be an Equal Opportunity Employer.
CompassMSP is committed to fair and equitable compensation practices. Salary range will reflect experience, location and other factors. This position is eligible for an annual bonus.