Sr. Security Analyst at Critical Start

Job description

Ready to make a real impact in cybersecurity? At Critical Start, we're not just protecting organizations; we're redefining how it's done. We're a team united by an inspiring purpose: to stop breaches, simplify security, and shape the future of cyber defense. If you're passionate about cutting-edge technology, thrive in a collaborative environment, and want your work to truly matter, you've found your home.   We deliver 24x7 AI-accelerated, human-validated detection, investigation, and response across IT and OT. This means we cut through the noise, investigate real threats, and take trusted, SLA-backed action—all powered by the brightest minds and the latest AI. Since 2012, we've been helping organizations outpace evolving attacks with faster response , fewer escalations, and measurable risk reduction.   Innovation isn't just a buzzword here; it's our DNA. We pioneered the first MOBILESOC app for on-the-go detection and response, infused AI into automated alert resolution to eliminate noise, and slashed investigation time by an astounding 99.3%. We're transforming how security teams work, and you could be a part of it. From AI-assisted triage to analyst copilots that elevate human expertise, we combine machine intelligence with human judgment to deliver outcomes our customer’s trust.   If you're looking for a high-trust, high-impact team where your ideas are amplified by AI and valued by colleagues and customers alike, Critical Start is the place for you. Come build the future of cybersecurity with us! The ideal candidate for the Senior Security Analyst role possesses at least 6 months of SOC experience, and a Security+ certification. They excel in triaging MDR alerts, analyzing events, and recommending or implementing response actions to mitigate threats effectively. As a Subject Matter Expert in our platform and proficient with EDR, SIEM, and security platforms like Microsoft Sentinel, Splunk, and CrowdStrike Falcon, they ensure accurate escalations and orchestration. They also contribute to creating and reviewing playbooks and automations to enhance efficiency and accuracy. With strong analytical and communication skills, they handle client communications for high-severity incidents and maintain operational integrity through meticulous review and verification processes. This candidate demonstrates technical expertise, attention to detail, and a commitment to ensuring robust cybersecurity measures. • Initial Triage of MDR Alerts • Participate in shift-based teams performing 24x7 monitoring of customer networks to detect and stop attacks. • Analyze Events, Alerts, and Threat Intelligence data used in investigations of potential attacks against customer networks. • Recommend response actions for active attacks • Implement response actions to stop attackers with approval of Supervisor/Sr. Analysts • Approval of Security Analyst Escalations • Senior Security Analysts review post investigation Analyst escalations for response accuracy, protection actions, recommendations, and grammar before sending them to the customer. • Orchestration creation & approval for MDR alerts • Create playbooks, knowledge objects, and other automations within the MDR SOAR platform • Review Security Analyst created orchestration for decision accuracy, sound logic, and proper documentation prior to adding it to the Trusted Behavior Registry. • Client communications related to High & Critical investigations • Written and verbal when required • Subject Matter Expert (SME) within our platform • Able to clearly navigate and articulate all aspects of the ZTAP console to both Security Analysts and customers • Mid-level competence within MDR tool suite (13 total vendors) • EDR: Microsoft Defender for Endpoint, CrowdStrike Falcon, Palo Alto Cortex XDR, VMWare Enterprise Endpoint (Formerly CB-Response and CB-Defense), Trend Micro Vision One • SIEM: Microsoft Sentinel, Splunk, Devo • Other: Microsoft Defender Suite (M365D, Outlook, Identity, Cloud) • Verifier for Console Actions • Able to verify correct execution of Lead and Principal console protection actions to provide two-person integrity. • At least 6 months of SOC Tenure (Beginning your first day on shift) or equivalent experience • Security+ Certification or Equivalent Imagine a dynamic, enjoyable, and rewarding work environment. We are professionals, and the work we do holds immense significance, like saving our customers from potential disasters. However, we believe in not taking ourselves too seriously.     Prefer a casual dress code every day? No problem, as we find comfort enhances our thinking.     Our workplace in Plano, TX offers open offices, collaborative meeting spaces, phone rooms, and wellness rooms. In the breakroom, friendly competition arises with games like ping-pong, bubble hockey machine, foosball, or the gaming machine. What harm does a little healthy competition among friends do?    What does our Compensation and Benefits package entail?  • Competitive salary with bonus potential  • Comprehensive health benefits with generous employer contributions for medical, dental, and visio n • Additional Ancillary Benefits offered at 100% employee contribution • Unlimited PTO (Paid Time Off) policy • Paid Parental and Military Leave  • Dental and Vision Plan  • Employer-provided Life Insurance, Long-Term Disability, and Short-Term Disability coverage  • Additional Voluntary Life Insurance coverage  • 401(k) Plan with Matching Program  • Mines Employee Assistance Program • Monthly Wellness Initiatives  • Optional Pet Benefits Discount Plan    We prioritize your privacy and security. Please note that Critical Start will never request financial information or sensitive personal data during the interview process. If you encounter any suspicious requests, do not respond and contact us directly at recruiting@criticalstart.com. Thank you for helping us maintain a safe and trustworthy hiring experience.    Critical Start welcomes people from all backgrounds and walks of life . One of our core values is to “Do what’s best for our employees,” and that starts with the hiring process by finding the best candidates and providing an environment that upholds equal employment opportunities for all employees and applicants, strictly prohibiting any form of discrimination or harassment based on race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws.     This policy encompasses all aspects of employment, including recruitment, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.    Mental and Physical Requirements     It's important to note that specific physical and mental requirements may vary depending on the nature of the office job, organization, and individual responsibilities.    Physical:    • Stationary position for extended periods of time.   • Constantly operate a computer.   • Occasionally you may be required to move equipment or other items up to 20 lbs.  • The ability to communicate information and ideas so others will understand. Must be able to exchange accurate information in these situations.    Mental:    • Must be able to apply established protocols in a timely manner .  • Make timely decisions in the context of workflow.  • Ability to complete tasks and perform in situations requiring speed deadlines, or productivity quota.  • Ability to work effectively and efficiently in high stress situations.  • Ability to simultaneously address multiple complex problems.    For positions that can or will be performed, in whole or in part, remotely within the U.S., range and benefits information for this position are being included in accordance with requirements of various state/local pay transparency legislation. Please note that salaries may vary for different individuals in the same role based on several factors, including but not limited to location of the role, individual competencies, education/professional certifications, experience, performance in the role and potential for revenue generation (sales roles only).   Compensation: The total compensation range (base) being offered for this role is [$60,000 - $70,000 USD].   Additional Compensation: This role is not eligible for additional or other forms of compensation.   Employment Benefits: Comprehensive health benefits with generous employer contributions for medical, dental, and vision , unlimited PTO (Paid Time Off) policy, paid Parental and Military Leave, dental and vision plan, Employer-provided Life Insurance (up to $100K coverage), Long-Term Disability, and Short-Term Disability coverage, 401(k) Plan with Matching Program, 24/7/365 availability of Employee Assistance Program.   Application Deadline: The application deadline for this position is Oct 26, 2026.   How to Apply: Interested candidates are invited to visit our career site and apply for the position: criticalstart.com #LI-CV1 #LI-Remote

Requirements

Must-haves

If you're looking for a high-trust, high-impact team where your ideas are amplified by AI and valued by colleagues and customers alike, Critical Start is the place for you. Come build the future of cybersecurity with us!
Initial Triage of MDR Alerts
Participate in shift-based teams performing 24x7 monitoring of customer networks to detect and stop attacks.
Analyze Events, Alerts, and Threat Intelligence data used in investigations of potential attacks against customer networks.
Recommend response actions for active attacks
Implement response actions to stop attackers with approval of Supervisor/Sr. Analysts
Approval of Security Analyst Escalations
Senior Security Analysts review post investigation Analyst escalations for response accuracy, protection actions, recommendations, and grammar before sending them to the customer.
Orchestration creation & approval for MDR alerts
Create playbooks, knowledge objects, and other automations within the MDR SOAR platform
Review Security Analyst created orchestration for decision accuracy, sound logic, and proper documentation prior to adding it to the Trusted Behavior Registry.
Client communications related to High & Critical investigations
Written and verbal when required
Subject Matter Expert (SME) within our platform
Able to clearly navigate and articulate all aspects of the ZTAP console to both Security Analysts and customers
Mid-level competence within MDR tool suite (13 total vendors)
EDR: Microsoft Defender for Endpoint, CrowdStrike Falcon, Palo Alto Cortex XDR, VMWare Enterprise Endpoint (Formerly CB-Response and CB-Defense), Trend Micro Vision One
SIEM: Microsoft Sentinel, Splunk, Devo
Other: Microsoft Defender Suite (M365D, Outlook, Identity, Cloud)
Verifier for Console Actions
Able to verify correct execution of Lead and Principal console protection actions to provide two-person integrity.
At least 6 months of SOC Tenure (Beginning your first day on shift) or equivalent experience
Security+ Certification or Equivalent

Nice-to-haves

Competitive salary with bonus potential

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aigo

Platform: icims
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Wellness