Senior Security Analyst

• Oversee monitoring and investigation of security alerts from tools such as SIEM, EDR, and WAF.
• Coordinate with the MSSP to tune and enhance detection capabilities, ensuring threats are identified and contained promptly.
• Act as an escalation lead for high-severity incidents, ensuring effective containment, remediation, and lessons learned.

• Serve as an escalation point during critical incidents, providing technical direction and coordinating with internal and external teams.
• Support after-hours response for priority IT security events as part of an on-call rotation when required.
• Ensure incidents are fully documented with root cause analysis and recommendations for process improvement.

• Lead deployment, configuration, and optimization of security technologies, including PAM, SIEM, EDR, and micro-segmentation solutions.
• Work closely with IT and Infrastructure teams to operationalize new security tools and ensure proper control implementation.

• Oversee vulnerability scanning using various vulnerability management tools, analyze results, and coordinate remediation efforts with relevant teams.
• Ensure vulnerabilities are tracked, prioritized, and resolved in a timely manner.

• Act as the primary coordinator for all PCI-DSS compliance activities, including evidence collection, control validation, and audit readiness.
• Track control owners and compliance status, ensuring timely remediation of any gaps.
• Coordinate with vendors, auditors, and internal stakeholders to ensure successful audit outcomes.

• Own and maintain GRC tooling, procedures, and associated documentation.
• Draft, update, and enforce IT Security policies, SOPs, and user guides to align with industry frameworks.
• Track open risks, maintain a risk register, and follow up on remediation activities to closure.

• Conduct and coordinate third-party vendor security assessments, evaluating compliance with Longo's security requirements.
• Track findings from assessments, penetration tests, and risk reviews, ensuring remediation is completed.

• Support monthly phishing simulations and awareness campaigns using security awareness and training tools.
• Track user awareness metrics, follow up on findings, and recommend improvements to enhance the program's effectiveness.

• Prepare detailed security reports, including threat analysis, compliance metrics, and incident trends.
• Provide regular updates and, when required, present project and compliance status directly to the Senior Manager Cybersecurity.
• Offer technical insights to support leadership decision-making.

• Mentor junior analysts by providing technical guidance, sharing expertise, and supporting their development in detection, response, and compliance tasks.
• Promote a collaborative environment and a culture of continuous improvement within the Cybersecurity team.

• Experience: 4-7 years in cybersecurity or technical security-related roles, with proven experience leading security projects and compliance activities.
• Technical Expertise:
• Advanced knowledge of Cybersecurity frameworks, Windows, Active Directory, and Cloud security controls.
• Hands-on experience with SIEM, EDR, PAM, WAF, vulnerability management, and other security solutions.
• Strong working knowledge of PCI-DSS controls and evidence management.
• Framework Knowledge: Familiarity with NIST CSF 2.0, CIS Controls, ISO 27001.
• Soft Skills: Excellent collaboration, communication, and documentation skills; ability to prepare and present findings to leadership when needed.
• Undergraduate or College Degree in IT/Computer Science/Engineering/Cybersecurity (or equivalent experience).
• Certifications: Security+, CISSP, or CISA preferred. PCIP and cloud security certifications are an asset.

• Hybrid (remote and on-site)
• On-call responsibilities on a rotating schedule.

Longo's