> Markdown version of [/jobs/ext/1215920-senior-security-analyst](https://www.wearedevelopers.com/jobs/ext/1215920-senior-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Analyst

- **Company:** OutSystems
- **Location:** United States (Remote available)
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Microsoft Azure, Continuous Integration, Query Languages, Python (Programming Language), Log Analysis, Windows PowerShell, Kusto Query Language, Service-Oriented Architecture, Security Information and Event Management, Web Applications, Scripting, Cloud Platform System, Outsystems, Mitre Att&ck, QRadar, Cybercrime, Web Technologies, Splunk, Software Version Control, Devsecops
- **Published:** July 9, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=2740141a6985496f

## About the Role

* 4-6+ years of experience in a SOC, MDR, or enterprise security team with hands-on IR, TI, or Threat Hunting focus.
 * In-depth knowledge of the MITRE ATT&CK Framework, Cyber Kill Chain, and adversary TTPs.
 * Strong understanding of SIEM tools (e.g., Splunk, Sentinel, QRadar), EDR, and other detection technologies.
 * Proficiency with scripting or query languages (e.g., Python, PowerShell, KQL, YARA).
 * Familiarity with AWS, Azure, and/or other cloud environments.
 * Familiarity with web technologies and protocols (web applications, APIs, service-oriented architectures) and the threats against them.
 * Experience with log analysis, forensic tools, and threat intelligence platforms (e.g., MISP, ThreatConnect).
 * Ability to translate technical findings into clear, actionable insights for technical and non-technical audiences.
 * Strong written and verbal communication skills, with experience presenting to stakeholders or executive teams.

Nice to have

 * Relevant certifications (e.g., GCIA, GCIH, GNFA, GCFA, GCTI, OSCP) or a degree in a cybersecurity-related field.
 * Experience with detection-as-code, version control, and CI/CD for security content.

## Description

* Own complex incident investigations end-to-end, from detection to containment and remediation. Conduct root cause analysis and post-incident reviews.
 * Continuously hunt for anomalies and threats across on-prem and cloud environments using threat intelligence, analytics, and behavioral patterns.
 * Monitor global threat actor activity, transform raw intel into actionable defense strategies, and collaborate with internal teams to harden security posture of OutSystems.
 * Work with engineering and DevSecOps teams to improve detection coverage, enrich SIEM use cases, and automate response processes.
 * Develop, optimize, and maintain incident response and threat hunting playbooks, ensuring operational excellence and consistency.
 * Identify gaps, suggest improvements, and contribute to capability building for detection, response, and threat modeling.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [DevSecOps: Security in DevOps](https://www.wearedevelopers.com/videos/36-devsecops-security-in-devops)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)