[Hiring] Senior Security Support Analyst @Coalition, Inc.

Role Description

The Senior Security Analyst helps protect Coalition policyholders from cyber loss by assessing security risk, investigating incidents and claims, and translating technical findings into practical recommendations. The role sits within Coalition’s Security team, working across threat intelligence, cyber risk management, and defensive security controls.

This role connects security analysis to business and product execution. In addition to advising customers and security leaders, the analyst partners with Product and internal stakeholders to codify security best practices into underwriting algorithms, rating models, risk-management applications, and internal processes.

Responsibilities

• Assess the security posture of insureds and prospective insureds across programs, technologies, controls, and business environments.
• Investigate incidents and cyber insurance claims to identify root cause, attack vectors, control gaps, and opportunities for prevention.
• Advise customers and security leaders on practical, prioritized improvements across architecture, cloud security, data protection, and compliance.
• Translate threat intelligence and observed attacker behavior into detection tradecraft and actionable security recommendations.
• Partner with Product and cross-functional teams to improve risk models, underwriting approaches, and security-focused applications.
• Track emerging practices, regulatory developments, and industry trends to inform Coalition’s customers, processes, and products.

Qualifications

• 2–4 years of experience in security analysis, defensive or blue-team operations, penetration testing, red-team work, incident response, or cyber risk consulting.
• Experience assessing security programs, investigating incidents, or analyzing control effectiveness in complex business environments.
• Exposure to cloud security, security architecture, data protection, threat intelligence, or cyber insurance is particularly relevant.
• Strong understanding of network threats, attack vectors, exploitation methods, and intrusion-set tactics, techniques, and procedures.
• Practical knowledge of TCP/IP, network analysis, security technologies, logs, and network traffic captures.
• Familiarity with NIST, ISO, HIPAA, and PCI frameworks, and the ability to connect requirements to real-world controls.
• Able to turn ambiguous technical evidence into clear conclusions and prioritized business recommendations.
• Comfortable communicating with security practitioners, business stakeholders, customers, and executive audiences, including CISOs.
• Collaborative and self-directed, with the judgment and initiative expected at the P4 level.
• Effective in a fast-paced, evolving environment where they can help improve processes and products.

Requirements

• 2–4 years of experience in security analysis, blue-team or defensive security, penetration testing, red-team operations, incident response, or a related discipline.
• Expert understanding of network threat lifecycles, attack vectors, exploitation methods, and attacker TTPs.
• Knowledge of TCP/IP protocols, network analysis, and network and security applications, including log analysis and network traffic capture analysis.
• Ability to investigate incidents and claims, determine root cause, and recommend effective preventive or detective controls.
• Familiarity with NIST, ISO, HIPAA, and PCI frameworks and their practical application.
• Strong written and verbal communication skills, with the ability to provide clear recommendations to technical and executive audiences.

Bonus Points

• Experience analyzing cyber insurance claims or translating security findings into underwriting, rating, or risk-scoring inputs.
• Hands-on experience with cloud security, security architecture, data protection, or security control assessments.
• Background in threat intelligence and developing detection tradecraft from observed attacker behavior.
• Experience advising CISOs or customers on prioritizing security improvements based on risk, feasibility, and business context.
• Demonstrated ability to create or improve internal security processes, products, or analytical methodologies.

Compensation

Our compensation reflects the cost of labor across several US geographic markets. The US base salary for this position ranges from $94,000/year in our lowest geographic market up to $140,000/year in our highest geographic market. Consistent with applicable laws, an employee's pay within this range is based on a number of factors, which include but are not limited to relevant education, skills, job-related knowledge, qualifications, work experience, credentials, and/or geographic location. Your recruiter can share more on target salary for your location during the interview process. Coalition, Inc. reserves the right to modify this range as needed.

Benefits

• 100% medical, dental and vision coverage
• Flexible PTO policy
• Annual home office stipend and WeWork access
• Mental & physical health wellness programs (One Medical, Headspace, Wellhub, and more)!
• Competitive compensation and opportunity for advancement