Senior Security Analyst at NuHarbor Security

Job description

Cybersecurity for the public good At nuHarbor, we help organizations navigate an increasingly complex cybersecurity landscape with confidence. By combining expert guidance, innovative technology, and trusted partnerships, we make security stronger, more effective, and easier to understand. We're looking for talented individuals who are passionate about solving meaningful challenges, helping clients succeed, and continuously improving alongside a team that values curiosity, collaboration, and impact. The Opportunity As a Senior Security Analyst, you'll serve as a senior technical contributor within nuHarbor's Security Operations Center (SOC). You'll lead complex investigations, guide incident response efforts, mentor fellow analysts, and help elevate the quality of our security operations through technical expertise and continuous improvement. This role combines advanced threat analysis, client communication, technical leadership, and operational excellence. You'll be trusted to independently tackle the most challenging security problems while helping shape the growth and effectiveness of the team around you. What Success Looks Like In this role, you will: Live by nuHarbor's core values: Help Clients Win, Always Improve, and Protect the House Lead investigations from initial alert through root cause analysis, attack chain reconstruction, and final client reporting Correlate data across SIEM, EDR, identity, and security telemetry sources to identify threats and uncover risks that automated tooling may miss Independently pursue complex, high-priority, or ambiguous investigations with minimal direction Support Security Analysts with alert triage, classification, escalation, and incident response activities Identify security gaps and provide actionable recommendations aligned to client risk and business objectives Communicate proactively with leadership regarding active threats, escalations, and emerging concerns Facilitate client-facing discussions, including incident reviews, threat briefings, and security consultations Produce high-quality documentation that clearly communicates findings, evidence, analyst reasoning, and client impact Stay current on emerging threats, attacker tactics, vulnerabilities, and industry trends Support the onboarding and operational success of new managed security clients Mentor and train analysts on investigation methodology, documentation standards, and client communication best practices Review analyst escalations and ensure investigative completeness and quality prior to client delivery Contribute to automation initiatives that improve analyst efficiency and reduce operational noise Partner with Detection Engineering teams to improve alert fidelity, tuning, and threat detection effectiveness Develop recommendations that help clients mature their cybersecurity programs and security operations capabilities Coordinate with clients and internal stakeholders throughout incident response and post-incident activities Your Foundation We're looking for someone who brings these minimum qualifications: Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications. In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required. Demonstrated experience with SOC operations, executing security event triaging and tuning. Demonstrated experience writing runbooks and support procedures. Demonstrated experience executing Monitoring and Response across multiple phases, containment, eradication, and recovery, in a SOC or MSSP environment. Demonstrated experience with security event triaging and threat hunting executed through both a SIEM and EDR toolset. Hands on experience with at least two of the following Endpoint Detection and Response (EDR) and Security Orchestration Automation and Response solutions. CrowdStrike Microsoft Defender Microsoft Sentinel Splunk Enterprise Security Demonstrated experience with scripting in at least one language (Python, PowerShell, or equivalent) in a manner that supports automation solutions. Excellent written and verbal communication skills. Previous experience in technical support or security-focused role. Must be willing and able to work Monday - Friday 8:30 - 5:00 ET. Must be authorized to work within the United States. Stand out With You may stand out if you have experience with: 7+ years of progressive responsibility within SOC, MDR, MSSP, or incident response environments Industry certifications such as CISSP, GCIH, GCFA, CEH, or similar Presenting technical findings and strategic recommendations to executive stakeholders Technical writing, reporting, and client-facing communications SOAR platforms and automated response workflows Linux, macOS, and Windows operating systems, including command-line and system administration experience Memory forensics, disk forensics, and malware analysis Static and dynamic malware analysis techniques Translating complex technical findings into business-focused narratives Data analysis techniques such as anomaly detection, clustering, and normalization General systems administration and infrastructure experience Applying the MITRE ATT&CK framework during investigations, reporting, and threat analysis Experience across multiple cybersecurity disciplines including threat detection, incident response, penetration testing, security engineering, or information assurance Why nuHarbor? At nuHarbor, you'll find more than a job - you'll find a team committed to helping each other grow, solve meaningful problems, and make a measurable impact. You can expect: A collaborative, high-performing team environment Leaders who are invested in your success and development Meaningful work that helps organizations protect critical services and missions The encouragement to bring your authentic self to work every day Competitive pay, performance-based bonus opportunities, generous paid time off, and comprehensive benefits Compensation This position has an anticipated base salary range of $110,000–$135,000 annually , plus eligibility for nuHarbor's annual bonus program with a target opportunity of 10%. Actual compensation is based on factors including experience, skills, certifications, and geographic location. Join Us At nuHarbor, we believe great security starts with great people. We're looking for curious problem-solvers, trusted advisors, and continuous learners who are passionate about helping clients win. If you're ready to make an impact while growing alongside a team that values people as much as technology, we'd love to hear from you. AAP/EEO Statement The Equal Employment Opportunity Policy of nuHarbor is to provide a fair and equal employment opportunity for all associates and job applicants regardless of race, color, religion, national origin, gender, sexual orientation, age, marital status or disability. nuHarbor hires and promotes individuals solely based on their qualifications for the job to be filled. nuHarbor believes that employees should be provided with a working environment which enables each associate to be productive and to work to the best of his or her ability. We do not condone or tolerate an atmosphere of intimidation or harassment based on race, color, religion, national origin, gender, sexual orientation, age, marital status, or disability. We expect and require the cooperation of all employees in maintaining a discrimination and harassment-free atmosphere.

Requirements

Must-haves

Cybersecurity for the public good
What Success Looks Like
Live by nuHarbor's core values: Help Clients Win, Always Improve, and Protect the House
Lead investigations from initial alert through root cause analysis, attack chain reconstruction, and final client reporting
Correlate data across SIEM, EDR, identity, and security telemetry sources to identify threats and uncover risks that automated tooling may miss
Independently pursue complex, high-priority, or ambiguous investigations with minimal direction
Support Security Analysts with alert triage, classification, escalation, and incident response activities
Identify security gaps and provide actionable recommendations aligned to client risk and business objectives
Communicate proactively with leadership regarding active threats, escalations, and emerging concerns
Facilitate client-facing discussions, including incident reviews, threat briefings, and security consultations
Produce high-quality documentation that clearly communicates findings, evidence, analyst reasoning, and client impact
Stay current on emerging threats, attacker tactics, vulnerabilities, and industry trends
Support the onboarding and operational success of new managed security clients
Mentor and train analysts on investigation methodology, documentation standards, and client communication best practices
Review analyst escalations and ensure investigative completeness and quality prior to client delivery
Contribute to automation initiatives that improve analyst efficiency and reduce operational noise
Partner with Detection Engineering teams to improve alert fidelity, tuning, and threat detection effectiveness
Develop recommendations that help clients mature their cybersecurity programs and security operations capabilities
Coordinate with clients and internal stakeholders throughout incident response and post-incident activities
Your Foundation
We're looking for someone who brings these minimum qualifications:
Bachelor’s Degree and five (5) years of experience. Experience should be in a cybersecurity field and should include relevant industry certifications.
In lieu of a degree, two (2) years of experience in a related technology field and relevant industry certifications are required.
Demonstrated experience with SOC operations, executing security event triaging and tuning.

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Paid Time Off