Security Analyst

Solairus Aviation is seeking a Senior Security Analyst to help protect the people, systems, and data behind its business aviation operations.

Responsibilities

• Working as a peer alongside a second Security Analyst, this role shares responsibility for day-to-day security operations, including monitoring, alert triage, incident response, identity and access hygiene, and continuous improvement of the security program.
• The two analysts divide workload, cover for each other, and rotate after-hours responsibilities so the function runs consistently.
• This is a full-time, on-site position that works primarily standard business hours with participation in a shared after-hours on-call rotation for security incidents.
• This position follows a hybrid schedule, with four days per week in the office and one day working from home.
• Responsibilities/Duties Essential Duties Monitor, triage, and investigate security alerts across email, endpoint, identity, and cloud environments, escalating confirmed incidents according to established procedures.
• Participate in incident response, including containment, evidence collection, documentation, and post-incident review.
• Support identity and access management by reviewing access, maintaining role-based group assignments, and enforcing least-privilege and privileged access controls.
• Administer and tune security tooling to reduce noise and improve detection quality.
• Support email security, phishing response, and security awareness training.
• Assist with vulnerability management by tracking remediation of identified risks with IT partners.
• Maintain and improve security operations documentation, including SOPs, runbooks, and reporting metrics.
• Support compliance, audit, and eDiscovery requests as needed.
• Share an on-call rotation with the other Security Analyst and provide mutual coverage during absences.
• Partner with the Help Desk and broader IT team on security-related tickets and user guidance.

Requirements

• Required Qualifications 2–4 years of experience in security operations, IT security, or a related systems administration role with substantial security responsibilities.
• Working knowledge of security information and event management (SIEM), endpoint detection and response (EDR), identity provider/single sign-on (SSO), and email security platforms.
• Understanding of incident response fundamentals, common attack techniques, and log analysis.
• Strong written communication skills, including the ability to clearly document findings for technical teams and leadership.
• Ability to work independently while collaborating closely with a peer.
• Willingness to participate in a shared after-hours on-call rotation for security incidents.

Preferred

• Qualifications Experience with Microsoft Sentinel, CrowdStrike Falcon, Okta, Microsoft Entra ID, Microsoft Purview, Delinea Secret Server/Privilege Manager, and Mimecast or comparable email security platforms.
• Familiarity with ticketing and incident management tools such as Zendesk and incident.io, as well as remote monitoring and management (RMM) platforms such as NinjaOne.
• Scripting or query experience using KQL, PowerShell, or Python.
• Industry certifications such as CompTIA Security+, CySA+, Microsoft SC-200, or GIAC GSEC/GCIH.
• Experience in aviation or another regulated environment with 24/7 operations.