[Hiring] Senior Security Analyst @Coalition, Inc.

Role Description

The Coalition Security team is a group of specialists across multiple cybersecurity domains, including Threat Intelligence, Cyber Risk Management, and Defensive Security Controls. As a Senior Security Analyst, your mandate is to protect our customers from loss.

• Analyze data breaches and cyber insurance claims events.
• Conduct client security gap analyses.
• Advise CISOs and security leaders on improving specific security controls.
• Work across our customer base on topics including security architecture, cloud security, data protection, and compliance.
• Partner with product teams to codify security best practices into underwriting algorithms, rating models, and risk management applications.

Responsibilities

• Review and analyze the security posture of insureds and prospective insureds quickly and efficiently.
• Evaluate customer security programs, technologies, controls, and business environments; recommend and help develop enhancements to reduce risk.
• Analyze the root cause of cyber insurance claims and loss events; identify ways to detect and mitigate exposures that could have prevented those claims.
• Triage security incidents and claims; understand root cause and develop detection tradecraft informed by threat intelligence and real-world attacks.
• Provide practical, prioritized recommendations to help customers manage information security risk and strengthen their security programs.
• Track emerging security practices, threat trends, and vulnerabilities; contribute insights to internal processes, playbooks, and product capabilities.
• Stay current on the regulatory landscape and industry standards (e.g., NIST, ISO, HIPAA, PCI) and interpret their implications for Coalition and our customers.
• Collaborate cross-functionally with underwriting, claims, product, and engineering teams to translate security insights into scalable solutions and customer value.

Qualifications

• 2–4 years of hands-on experience in security analysis, blue team/defensive security operations, and/or penetration testing/red team engagements.
• Deep understanding of the lifecycle of network threats, common attack vectors, and exploitation methods, including familiarity with intrusion set tactics, techniques, and procedures (TTPs).
• Strong knowledge of TCP/IP protocols, network analysis, and network/security applications, including log and network traffic capture and analysis.
• Experience with one or more vulnerability assessment and offensive security tools, such as Nmap, Nessus, Nexpose, Qualys, Burp Suite, Kali Linux, Metasploit, or similar.
• Working knowledge of industry-standard security and risk frameworks (e.g., NIST CSF, ISO 27001, HIPAA, PCI DSS).
• Clear, confident interpersonal communication skills (verbal and written), with the ability to translate technical concepts for non-technical audiences.
• Demonstrated ability to learn new technical concepts quickly and manage multiple tasks/projects in a fast-paced, dynamic environment.
• Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.

Bonus Points

• Experience securing cloud-based platforms (e.g., Microsoft Azure, Amazon Web Services), including system hardening procedures for Windows, Linux, and/or Unix.
• Familiarity with forensic, log analysis, and network analysis tools such as EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, Wireshark, Zeek, or comparable open-source tools.
• Knowledge of programming or scripting (e.g., Python, PowerShell, Bash) for developing security tools, automation, or implementing industry frameworks.
• Experience with SCADA/ICS/control systems networks.
• Background in cyber insurance, risk quantification, or working with underwriting/claims teams.

Compensation

• In Alberta, British Columbia & Ontario, the base salary for this position ranges from $118,600/year up to $163,075/year.
• For all other locations, the base salary for this position ranges from $106,700/year up to $146,763/year.
• Compensation is based on factors including relevant education, skills, job-related knowledge, qualifications, work experience, credentials, and/or geographic location.

Perks

• 100% medical, dental, and vision coverage.
• Flexible PTO.
• Annual home office stipend and WeWork access.
• Mental & physical health wellness programs like Headspace, Lumino, and more!
• Competitive compensation and opportunity for advancement.