[Hiring] Security Analyst @Power Digital

Role Description

As a Security Analyst at Power Digital, you protect the systems, data, and client information that power our business. You monitor for threats, investigate incidents, and work cross-functionally with IT and engineering to keep our security posture strong as we grow.

Key Responsibilities

• You monitor security systems, logs, and alerts to detect, investigate, and respond to potential threats and incidents.
• You run vulnerability scans and assessments, then coordinate remediation with IT and engineering teams.
• You maintain and improve compliance with security frameworks and certifications, including SOC 2.
• You employ AI technologies to enhance and optimize business processes.
• You utilize and leverage Power Digital's Nova ecosystem as it relates to your department.
• You support security awareness training and phishing simulation programs across the company.
• Other applicable or related duties as assigned.

Qualifications

• 2+ years of experience in information security, IT security, or a related analyst role.
• Working knowledge of security monitoring tools, SIEM platforms, and endpoint detection systems.
• Familiarity with compliance frameworks such as SOC 2, GDPR, or CCPA.
• Understanding of network fundamentals, cloud environments (AWS, GCP, or Azure), and common attack vectors.
• Strong written communication skills to document incidents and explain risk to non-technical teams.
• Ability to prioritize and stay calm under time pressure during active incidents.

Requirements

• Maintain Mean Time to Detect (MTTD) ≤ 15 minutes and Mean Time to Respond (MTTR) ≤ 60 minutes for priority security incidents.
• Remediate ≥95% of critical and high-severity vulnerabilities within their defined SLA each quarter.
• Achieve a phishing simulation click rate ≤5% and an employee phishing report rate ≥50% per campaign.
• Achieve ≥98% completion of required security awareness training within the assigned deadline each quarter.
• Close ≥95% of audit and compliance findings within the agreed target timeframe each quarter.

Most Important Things (MITs)

• Review overnight security alerts and triage anything flagged as high priority.
• Close out remediation tickets assigned for the week.
• Check in with IT and engineering on any in-progress incident response.
• Prepare or update documentation ahead of upcoming audits or compliance reviews.
• Run and review this week's phishing simulation and training results.