Security Analyst III

Lead security monitoring and response operations leveraging SIEM and integrated security platforms; tune alerts, develop use cases, and drive continuous improvement in detection capabilities. Own SIEM platform management, including onboarding new log sources, correlation rule development, and integration with endpoint, cloud, and network security tools. Develop, implement, and enforce security policies, standards, and procedures aligned with SOC 2 and industry best practices. Lead incident response activities, including investigation, containment, root cause analysis, and documentation; coordinate with internal and external stakeholders as required. Manage vulnerability management program, including scanning, prioritization, remediation tracking, and reporting to leadership. Own and administer the security awareness program, including KnowBe4 rollout, phishing simulations, reporting, and targeted training campaigns. Serve as primary owner for SOC 2 compliance activities, including control documentation, evidence collection, audit coordination, and continuous control monitoring. Partner with IT Operations to implement and enforce secure configurations, access controls, and endpoint protection strategies. Lead evaluation, selection, and implementation of new security technologies, including cost analysis and operational integration planning. Manage third-party security services and vendors and ensure contractual and operational expectations are met. Oversee BYOD and endpoint security programs, including MDM enforcement and secure access policies. Support client and regulatory security inquiries, including RFP responses and due diligence requests. Stay current with evolving threat landscape, compliance requirements, and security best practices.