Note: The job is a remote job and is open to candidates in USA. RR Software Solutions LLC is seeking a Senior Security Analyst to lead security monitoring, incident response, compliance, and security operations. The role owns SIEM administration, vulnerability management, security awareness, SOC 2 activities, security technology implementation, vendor management, and endpoint and access security programs.
Responsibilities
- Lead security monitoring and response operations leveraging SIEM and integrated security
- Own SIEM platform management, including onboarding new log sources, correlation rule development, and integration with endpoint, cloud, and network security tools
- Develop, implement, and enforce security policies, standards, and procedures aligned with SOC 2 and industry best practices
- Lead incident response activities, including investigation, containment, root cause analysis, and documentation; coordinate with internal and external stakeholders as required
- Manage vulnerability management program, including scanning, prioritization, remediation tracking, and reporting to leadership
- Own and administer the security awareness program, including KnowBe4 rollout, phishing simulations, reporting, and targeted training campaigns
- Serve as primary owner for SOC 2 compliance activities, including control documentation, evidence collection, audit coordination, and continuous control monitoring
- Develop and maintain security documentation, including policies, procedures, runbooks, and audit artifacts
- Partner with IT Operations to implement and enforce secure configurations, access controls, and endpoint protection strategies
- Lead evaluation, selection, and implementation of new security technologies, including cost analysis and operational integration planning
- Manage third-party security services and vendors (e.g., MDR/eSOC providers) and ensure contractual and operational expectations are met
- Oversee BYOD and endpoint security programs, including MDM enforcement and secure access policies
- Support client and regulatory security inquiries, including RFP responses and due diligence requests
- Stay current with evolving threat landscape, compliance requirements, and security best practices
Skills
- Relevant experience may be considered equivalent
- SIEM platforms (Microsoft Sentinel, SUMO)
- Endpoint protection and EDR tools
- Vulnerability management platforms
- Identity and access management controls
- Cloud and SaaS security monitoring
- Note: GC or Citizens only
- Microsoft 365 security ecosystem preferred
- CISSP, CISM, or similar advanced security certification
- Microsoft Security certifications (e.g., SC-200, SC-300)
- SOC 2 / compliance-related training or certifications
- Bachelor's degree in Info Tech, Cybersecurity, Computer Science, or related field is preferred but not required
Company Overview