Note: The job is a remote job and is open to candidates in USA. Sola is seeking a Senior Security Analyst to own day-to-day security and compliance operations for its payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. The role focuses on security monitoring, identity and access management, incident response, and recurring PCI DSS and SOC 2 control execution.
Responsibilities
- Security Log Review: Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls. Retain ticket evidence of scope, results, coverage gaps, and linked incidents, and track exceptions through resolution
- Compliance Control Execution: Own the assigned PCI DSS and SOC 2 control calendar. Complete recurring control tasks, retain audit evidence, track overdue actions, and coordinate ASV scans, remediation, rescans, and access reviews. Support internal and external auditors with evidence requests
- XDR and File Integrity Monitoring: Operate XDR and approved file integrity monitoring configurations. Verify agent coverage, health, and updates; apply approved routine adjustments; and coordinate remediation with system owners
- Authentication Monitoring: Monitor Cognito authentication failures, suspicious logins, and account takeover indicators. Investigate findings and coordinate login availability issues with application owners
- Cloud and SIEM Monitoring: Verify GuardDuty coverage across AWS accounts and regions and monitor findings. Check Sumo Logic log delivery, alerts, and dashboards, and escalate collection or monitoring failures
- Identity and Access Management: Provision, modify, and promptly revoke access based on approved requests. Apply least privilege and MFA requirements, document approvals and changes, and coordinate periodic access certifications with system owners
- Incident Response: Lead the triage and investigation of security incidents, perform authorized containment, and coordinate resolution with internal teams and vendors. Maintain incident timelines, post-incident reports, and root cause analyses
- Firewall Management: Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers
- Documentation and Reporting: Maintain Confluence procedures and incident runbooks, reviewing them quarterly and after relevant changes or incidents. Provide monthly metrics on control completion, coverage, incidents, access changes, and overdue actions
- Continuous Improvement: Identify gaps in detection coverage, controls, and processes and recommend improvements. Share knowledge with and help guide less experienced team members
Skills
- 3-5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration
- Practical experience with AWS (including GuardDuty and Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted
- Working knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response
- Proven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands
- Strong ticket documentation skills and excellent written and verbal communication skills
- Ability to take part in after-hours incident response coverage, including a weekend and holiday backup rotation
- Experience in the payments industry or another PCI DSS regulated environment
- A bachelor's degree in Information Security, Computer Science, or a related field
- Relevant security certifications, such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP
- Hands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic
- Scripting experience in Python or Node.js
Benefits
- Remote
Company Overview
Company H1B Sponsorship