Job description

Solairus Aviation is seeking a Senior Security Analyst to help protect the people, systems, and data behind its business aviation operations. Working as a peer alongside a second Security Analyst, this role shares responsibility for day-to-day security operations, including monitoring, alert triage, incident response, identity and access hygiene, and continuous improvement of the security program. The two analysts divide workload, cover for each other, and rotate after-hours responsibilities so the function runs consistently. This is a full-time, on-site position that works primarily standard business hours with participation in a shared after-hours on-call rotation for security incidents. This position follows a hybrid schedule, with four days per week in the office and one day working from home. Essential Duties • Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures. • Participate in incident response, including containment, evidence collection, documentation, and post-incident review. • Support identity and access management by reviewing access, maintaining role-based group assignments, and enforcing least-privilege and privileged access controls. • Administer and tune security tooling to reduce noise and improve detection quality. • Support email security, phishing response, and security awareness training. • Assist with vulnerability management by tracking remediation of identified risks with IT partners. • Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics. • Support compliance, audit, and eDiscovery requests as needed. • Share an on-call rotation with the other Security Analyst and provide mutual coverage during absences. • Partner with the Help Desk and broader IT team on security-related tickets and user guidance. Required Qualifications • 2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities. • Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign-on (SSO), and email security platforms. • Understanding of incident response fundamentals, common attack techniques, and log analysis. • Strong written communication skills, including the ability to clearly document findings for technical teams and leadership. • Ability to work independently while collaborating closely with a peer. • Willingness to participate in a shared after-hours on-call rotation for security incidents. Preferred Qualifications • Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms. • Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne. • Scripting or query experience using KQL, PowerShell, or Python. • Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH. • Experience in aviation or another regulated environment with 24/7 operations.

Requirements

Must-haves

This position follows a hybrid schedule, with four days per week in the office and one day working from home.
Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures.
Participate in incident response, including containment, evidence collection, documentation, and post-incident review.
Support identity and access management by reviewing access, maintaining role-based group assignments, and enforcing least-privilege and privileged access controls.
Administer and tune security tooling to reduce noise and improve detection quality.
Support email security, phishing response, and security awareness training.
Assist with vulnerability management by tracking remediation of identified risks with IT partners.
Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics.
Support compliance, audit, and eDiscovery requests as needed.
Share an on-call rotation with the other Security Analyst and provide mutual coverage during absences.
Partner with the Help Desk and broader IT team on security-related tickets and user guidance.
2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities.
Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign-on (SSO), and email security platforms.
Understanding of incident response fundamentals, common attack techniques, and log analysis.
Strong written communication skills, including the ability to clearly document findings for technical teams and leadership.
Ability to work independently while collaborating closely with a peer.
Willingness to participate in a shared after-hours on-call rotation for security incidents.

Nice-to-haves

Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms.
Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne.
Scripting or query experience using KQL, PowerShell, or Python.
Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH.
Experience in aviation or another regulated environment with 24/7 operations.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: icims
Effort: medium