Senior Security Analyst

Senior Security AnalystRemote - United StatesJR014188

At Ensono, our Purpose is to be a relentless ally, disrupting the status quo and unleashing our clients to Do Great Things We enable our clients to achieve key business outcomes that reshape how our world runs. As an expert technology adviser and managed service provider with cross-platform certifications, Ensono empowers our clients to keep up with continuous change and embrace innovation.

We can Do Great Things because we have great Associates. The Ensono Core Values unify our diverse talents and are woven into how we do business. These five traits are the key to achieving our purpose: Honesty, Reliability, Curiosity, Collaboration, and Passion.

About the role and what you'll be doing: At Ensono, security is more than monitoring alerts. It is about protecting our business and our clients through proactive detection, rapid response, and informed decision-making. We're looking for a Senior Security Analyst to join our Security Operations team and serve as a critical member of our incident response capability.

In this role, you'll investigate and respond to security events, analyze threats across a complex enterprise environment, and work closely with both internal teams and customers to contain and remediate security incidents. You'll act as a senior escalation point for security investigations, helping to distinguish real threats from noise while ensuring incidents are resolved quickly and effectively. This role is part of a broader incident response function and plays a key role in providing operational coverage and support for customer security environments.

After-hours and/or on-call duty is required.

Responsibilities include:

• Strong technical writing skills to include the ability to provide clearly written and detailed reports on projects for communication to leaders

• The monitoring and administration of information security solutions

• Fill a Senior role in monitoring and responding to security incidents

• Collect evidence to support internal and customer audit requirements

• Create internal and customer facing security playbooks and procedures

• Align to procedures, processes, and security tools to support a single global cybersecurity model

• Provide guidance to and mentorship to junior members of the Security Operations team

• Perform incident response roles as necessary per the Ensono Incident Response Plan

• Implement security application upgrades and patches

• Investigate security events, threats, and vulnerabilities

• Follow project plans and meet timelines and milestones

• Assist with the creation and maintenance of security metrics

• Collaborate across team to create and tune security alerts

• Proactively learn new technologies and tooling capabilities throughout the workday

• Assist product owners to ensure alignment of solutions to security product offerings

• Operate effectively in a fast‑paced enterprise environment, independently prioritizing tasks to meet competing demands

We want all new Associates to succeed in their roles at Ensono. That's why we've outlined the job requirements below. To be considered for this role, it's important that you meet all Required Qualifications. If you do not meet all of the Preferred Qualifications, we still encourage you to apply.

Required Qualifications

• 5+ years of progressive cybersecurity experience, including at least 3 years of hands-on Security Operations Center (SOC) experience supporting security monitoring, alert triage, incident investigation, escalation management, and incident response.

• Experience leading or independently handling security investigations and incident response activities within a large enterprise, managed services, MSSP, MDR, or multi-customer environment.

• 2+ years of hands-on experience with Microsoft Sentinel in a production environment, including alert investigation, log analysis, incident management, threat detection, and security monitoring.

• 2+ years of hands-on experience with Microsoft Defender technologies, including the investigation and response of endpoint, identity, email, and cloud security incidents.

• Experience working with Security Information and Event Management (SIEM) platforms and security monitoring tools to identify, investigate, and respond to sec