Senior Security Analyst

Abby Care
San Francisco, CA, United States
1 day ago
Apply on www.indeed.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Working hours
Regular working hours
Job source

Tech stack

Application Programming Interfaces (APIs) Artificial Intelligence Amazon Web Services Software System Penetration Testing Microsoft Azure Bash Shell Cloud Computing Security Cyber Security Information Systems Information Leak Prevention Identity and Access Management Python (Programming Language)
+15 more
PCI Data Security Standards Role-Based Access Control Security Information and Event Management Software Vulnerability Management Scripting Okta Large Language Models Information Technology Cybercrime Casper Suite Machine Learning Operations Gsuite Terraform SentinelOne Expertise Vulnerability Analysis

Job description

  • Lead end-to-end incident response, threat hunting, and root cause analysis across SIEM, EDR (SentinelOne), and cloud security tooling.
  • Develop and maintain incident response playbooks, runbooks, and tabletop exercises.

Vulnerability & Risk Management

  • Own the vulnerability management lifecycle, partnering with IT and Engineering to remediate scan, pen test, and audit findings.
  • Maintain the risk register, conduct third-party/vendor risk assessments, and communicate technical risks to business stakeholders.

Identity, Endpoint & Compliance Oversight

  • Partner with IT to audit and enforce security controls across Okta (RBAC/MFA), Google Workspace (DLP/logs), JAMF, and SentinelOne.
  • Drive evidence collection and remediation for compliance audits (SOC 2, ISO 27001, HIPAA, PCI DSS) while aligning policies with NIST CSF and CIS frameworks.

Security Engineering & Automation

  • Automate detection, response, and reporting workflows via SOAR, scripting, and APIs to improve alert quality and efficiency.
  • Mentor team members and contribute to cross-functional security knowledge sharing.

AI Security & Governance

  • Establish guardrails and acceptable-use policies for enterprise AI tools (e.g., GenAI, Claude), mitigating shadow AI, data leakage, and third-party vendor risks alongside IT, Legal, and Compliance.
  • Partner with Product and Engineering to assess and remediate AI/LLM-specific vulnerabilities, including prompt injection, model abuse, and data exposure.
  • Pilot and evaluate AI-powered security capabilities (e.g., AI-assisted SIEM/EDR triage and anomaly detection) to boost response speed and operational efficiency.

Requirements

  • 8+ years of experience in security operations, leading incident response end-to-end from detection through remediation.
  • Associate’s or Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field, or equivalent practical experience
  • Hands-on experience with SIEMs, EDR/XDR (e.g., SentinelOne), vulnerability scanners, cloud security, and core IAM concepts (SSO, MFA, RBAC).
  • Working knowledge of security frameworks (SOC 2, ISO 27001, NIST, CIS) with strong analytical skills to translate technical risk to business stakeholders.
  • Familiarity with emerging AI/LLM risks and an interest in evaluating AI capabilities for security use cases.
  • Excellent communication skills with the ability to prioritize competing incidents and operate calmly under pressure.

Nice to have:

  • Hands-on experience with Okta, JAMF, or Google Workspace, alongside Infrastructure as Code (Terraform) for access/security policy management.
  • Scripting experience (Python, Bash), SOAR exposure, and familiarity with CSPM tools or native cloud security platforms (AWS/GCP/Azure).
  • Practical experience securing AI/ML pipelines and GenAI deployments, or operating AI-driven security tools.
  • Relevant credentials such as CISSP, GCIH, GCIA, OSCP, or Security+.

Benefits & conditions

This is a Full-Time Remote opportunity based in the United States, with the expectation to work PST hours., * Competitive compensation packages that reflect the value you bring. We reward our team for the impact of their work.

  • Comprehensive health coverage that works for you. Choose from high-quality medical dental and vision options, including a $0 deductible PPO and a company-funded HSA, alongside employer-paid life and disability insurance.
  • Generous paid time off. We provide policies that allow you to recharge along with 10 paid company holidays.
  • Financial savings benefits to support your future. We support your financial well-being with HSA contributions, optional FSA and commuter benefits, and full coverage of all 401(k) account fees (employer match not currently offered).
  • Paid parental leave to support your growing family. We provide up to 10 weeks of paid parental leave based on tenure, so you can focus on bonding and adjusting to life as your family grows., Redefining healthcare starts with how we treat the parents and children we serve. We go above and beyond for every family, building strong, lasting relationships. We continually ask ourselves, “Would we want this for our own families?”
  • Urgency with Precision Millions of families are waiting for care, and they cannot wait, therefore this is not your typical 9 to 5 job. We match their urgency with our own, delivering exceptional care without compromise. Here, speed and excellence go hand in hand.

  • Relentlessly Resourceful As an ambitious startup, we adapt quickly and make the most of limited time and resources. We solve challenges with creativity to deliver results without unnecessary complexity.

  • Purpose with Positivity We take our mission seriously while never losing sight of the people behind the work. Respect, kindness, memes, and coffee make us stronger as a team and better for the families we serve.

  • Driven to Redefine What’s Possible We are here to make healthcare better, which means asking hard questions, challenging outdated systems, and finding smarter, more compassionate ways to deliver care.

About the company

About Abby Care: Powering the future of care at home for all of America.

Abby Care is building the leading AI-native platform for family-led care. America is facing a growing care crisis. Millions more people need care at home than ever. Over 50 million family caregivers support loved ones without the tools, training, or recognition they deserve.

We believe families are the largest untapped caregiving workforce in America, and that technology can help them deliver better care while driving stronger outcomes and greater transparency across the healthcare system.

Abby Care combines clinical oversight with an AI-powered platform to train, enable, and support family caregivers in delivering high-quality care at home. Our platform helps health plans and government partners better understand, verify, and improve care in the home. We expand access to care, reduce reliance on higher-cost settings, and help ensure public dollars are spent effectively.

We are proud to partner with leading health plans, providers, and community organizations and are backed by top VCs. We envision a future where family-led care is a core part of the healthcare system. Abby Care is building that future.

Join us in solving one of the most important challenges of our time.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.indeed.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Defining application, pipeline, and security operations roles

Aarno Aukia · LIVE

2:33 min

Introduction to security advocacy and automation testing

Chris Heilmann Chris Heilmann +2 · LIVE

1:04 min

Introduction to Bitcoin script parsing tools

Steve Shadders · LIVE

4:37 min

Architecting single sign-on flows across multiple application domains

Gift Egwuenu · World Congress 2023

1:53 min

Evaluating traditional scripting languages for modern development tasks

Jens Knipper Jens Knipper · Europe 2026 Virtual

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all