Job description

About us Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks. Opportunities to make an impact with bold thinking are real—and happening daily at Coalition. About the role The Senior Security Analyst helps protect Coalition policyholders from cyber loss by assessing security risk, investigating incidents and claims, and translating technical findings into practical recommendations. The role sits within Coalition’s Security team, working across threat intelligence, cyber risk management, and defensive security controls. This role connects security analysis to business and product execution. In addition to advising customers and security leaders, the analyst partners with Product and internal stakeholders to codify security best practices into underwriting algorithms, rating models, risk-management applications, and internal processes. Responsibilities Assess the security posture of insureds and prospective insureds across programs, technologies, controls, and business environments. Investigate incidents and cyber insurance claims to identify root cause, attack vectors, control gaps, and opportunities for prevention. Advise customers and security leaders on practical, prioritized improvements across architecture, cloud security, data protection, and compliance. Translate threat intelligence and observed attacker behavior into detection tradecraft and actionable security recommendations. Partner with Product and cross-functional teams to improve risk models, underwriting approaches, and security-focused applications. Track emerging practices, regulatory developments, and industry trends to inform Coalition’s customers, processes, and products. Ideal Candidate Profile Background & Domain 2–4 years of experience in security analysis, defensive or blue-team operations, penetration testing, red-team work, incident response, or cyber risk consulting. Experience assessing security programs, investigating incidents, or analyzing control effectiveness in complex business environments. Exposure to cloud security, security architecture, data protection, threat intelligence, or cyber insurance is particularly relevant. Technical & Regulatory Strong understanding of network threats, attack vectors, exploitation methods, and intrusion-set tactics, techniques, and procedures. Practical knowledge of TCP/IP, network analysis, security technologies, logs, and network traffic captures. Familiarity with NIST, ISO, HIPAA, and PCI frameworks, and the ability to connect requirements to real-world controls. Collaboration & Influence Able to turn ambiguous technical evidence into clear conclusions and prioritized business recommendations. Comfortable communicating with security practitioners, business stakeholders, customers, and executive audiences, including CISOs. Collaborative and self-directed, with the judgment and initiative expected at the P4 level. Effective in a fast-paced, evolving environment where they can help improve processes and products. Skills and Qualifications 2–4 years of experience in security analysis, blue-team or defensive security, penetration testing, red-team operations, incident response, or a related discipline. Expert understanding of network threat lifecycles, attack vectors, exploitation methods, and attacker TTPs. Knowledge of TCP/IP protocols, network analysis, and network and security applications, including log analysis and network traffic capture analysis. Ability to investigate incidents and claims, determine root cause, and recommend effective preventive or detective controls. Familiarity with NIST, ISO, HIPAA, and PCI frameworks and their practical application. Strong written and verbal communication skills, with the ability to provide clear recommendations to technical and executive audiences. Bonus Points Experience analyzing cyber insurance claims or translating security findings into underwriting, rating, or risk-scoring inputs. Hands-on experience with cloud security, security architecture, data protection, or security control assessments. Background in threat intelligence and developing detection tradecraft from observed attacker behavior. Experience advising CISOs or customers on prioritizing security improvements based on risk, feasibility, and business context. Demonstrated ability to create or improve internal security processes, products, or analytical methodologies. Compensation Our compensation reflects the cost of labor across several US geographic markets. The US base salary for this position ranges from $94,000/year in our lowest geographic market up to $140,000/year in our highest geographic market. Consistent with applicable laws, an employee's pay within this range is based on a number of factors, which include but are not limited to relevant education, skills, job-related knowledge, qualifications, work experience, credentials, and/or geographic location. Your recruiter can share more on target salary for your location during the interview process. Coalition, Inc. reserves the right to modify this range as needed. Perks 100% medical, dental and vision coverage Flexible PTO policy Annual home office stipend and WeWork access Mental & physical health wellness programs (One Medical, Headspace, Wellhub, and more)! Competitive compensation and opportunity for advancement Why Coalition? Work at Coalition is centered on the joint mission to Protect the Unprotected. We have built a remote-first, highly inclusive culture that welcomes people from diverse backgrounds. We trust each other to take responsibility, share ownership of outcomes, and put in the work together to protect businesses from digital risk. Coalition’s exceptional growth stems from its ability to address real-world problems for organizations of all sizes while remaining true to our founding values of character, humility, responsibility, purpose, authenticity, and inclusion. We’re always looking for collaborative, inquisitive individuals to join #OurCoalition. Visit our Newsroom > Privacy Notice Coalition is committed to protecting your privacy and handling your personal information responsibly. We collect, use, and store personal information as necessary for the recruitment process and in compliance with applicable privacy laws and regulations in all regions where we operate. We want you to understand what personal information we collect, how we use it, and your rights regarding access, correction, and deletion of your data where applicable. Information submitted, collected, and processed as part of your application is subject to Coalition's Privacy Policy. For further details, please review our full Privacy Policy or contact us with any questions regarding how your information is handled. Our Privacy Policy > Safe Hiring Notice All legitimate communication from Coalition comes from @coalitioninc.com emails, and open roles are listed only on our Careers page . We never ask for payment, banking details, or personal identification before an offer is accepted through our secure systems. If you believe you’ve been a victim of fraudulent recruiting, follow guidance from the Federal Trade Commission (FTC). Anti-Discrimination Notice Coalition is proud to be an Equal Opportunity employer. Our policy is to provide equal employment opportunities to all individuals, without discrimination or harassment on the basis of any characteristic protected by applicable laws in each country where we operate. This commitment includes, but is not limited to, ensuring equal treatment in recruitment, selection, training, promotion, transfer, compensation, and all other aspects of employment. Coalition does not tolerate discrimination or harassment of any kind, and we are dedicated to fostering an inclusive and supportive workplace. Accommodations Coalition is committed to providing reasonable accommodations to qualified individuals with disabilities, including applicants and employees, in accordance with applicable laws and regulations in each country where we operate. Our policy is to support equal opportunity in the hiring process by considering qualified applicants regardless of disability or other protected characteristics, unless providing accommodation would impose an undue hardship or disproportionate burden. If you require accommodation to complete an application, interview, pre-employment testing, or participate in the selection process, please contact us at candidateaccommodations@coalitioninc.com . We also consider all qualified applicants, including those with criminal histories, in line with applicable laws and regulations in each jurisdiction. To all recruitment agencies: Coalition does not accept unsolicited agency resumes. Do not forward resumes to our email alias, employees, or other physical or virtual organization locations. Coalition is not responsible for any fees related to unsolicited resumes.

Requirements

Must-haves

Assess the security posture of insureds and prospective insureds across programs, technologies, controls, and business environments.
Investigate incidents and cyber insurance claims to identify root cause, attack vectors, control gaps, and opportunities for prevention.
Advise customers and security leaders on practical, prioritized improvements across architecture, cloud security, data protection, and compliance.
Translate threat intelligence and observed attacker behavior into detection tradecraft and actionable security recommendations.
Partner with Product and cross-functional teams to improve risk models, underwriting approaches, and security-focused applications.
Track emerging practices, regulatory developments, and industry trends to inform Coalition’s customers, processes, and products.
Ideal Candidate Profile
Background & Domain
2–4 years of experience in security analysis, defensive or blue-team operations, penetration testing, red-team work, incident response, or cyber risk consulting.
Experience assessing security programs, investigating incidents, or analyzing control effectiveness in complex business environments.
Exposure to cloud security, security architecture, data protection, threat intelligence, or cyber insurance is particularly relevant.
Technical & Regulatory
Strong understanding of network threats, attack vectors, exploitation methods, and intrusion-set tactics, techniques, and procedures.
Practical knowledge of TCP/IP, network analysis, security technologies, logs, and network traffic captures.
Familiarity with NIST, ISO, HIPAA, and PCI frameworks, and the ability to connect requirements to real-world controls.
Collaboration & Influence
Able to turn ambiguous technical evidence into clear conclusions and prioritized business recommendations.
Comfortable communicating with security practitioners, business stakeholders, customers, and executive audiences, including CISOs.
Collaborative and self-directed, with the judgment and initiative expected at the P4 level.

Nice-to-haves

Experience analyzing cyber insurance claims or translating security findings into underwriting, rating, or risk-scoring inputs.
Hands-on experience with cloud security, security architecture, data protection, or security control assessments.
Background in threat intelligence and developing detection tradecraft from observed attacker behavior.
Experience advising CISOs or customers on prioritizing security improvements based on risk, feasibility, and business context.
Demonstrated ability to create or improve internal security processes, products, or analytical methodologies.

Application prep

Use the role’s language and application details while tailoring your materials.

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

Pto

Wellness