Senior Security Analyst - Remote

Our employees take personal responsibility for ensuring our merchants and vendor partners have the tools and guidance they need to be successful. If you are driven to help us create next-generation payment solutions, eager to effect change, and passionate about protecting the data our merchants trust us with, we want to talk to you!
Security Analyst to join our DevSecOps team and own day-to-day security and compliance operations for our payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. This hands-on role focuses on security log review, identity and access management, incident handling, and the documented execution of recurring PCI DSS and SOC 2 controls. As a senior member of the team, you will work independently, serve as the escalation point for security operations issues, and help strengthen our controls as the business grows.
Security Log Review:

Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls. Complete recurring control tasks, retain audit evidence, track overdue actions, and coordinate ASV scans, remediation, rescans, and access reviews. Support internal and external auditors with evidence requests.
XDR and File Integrity Monitoring:

Operate XDR and approved file integrity monitoring configurations. Authentication Monitoring:

Monitor Cognito authentication failures, suspicious logins, and account takeover indicators. Investigate findings and coordinate login availability issues with application owners.
Cloud and SIEM Monitoring:

Verify GuardDuty coverage across AWS accounts and regions and monitor findings. Check Sumo Logic log delivery, alerts, and dashboards, and escalate collection or monitoring failures.
Apply least privilege and MFA requirements, document approvals and changes, and coordinate periodic access certifications with system owners.
Incident Response:

Lead the triage and investigation of security incidents, perform authorized containment, and coordinate resolution with internal teams and vendors. Maintain incident timelines, post-incident reports, and root cause analyses.
Firewall Management:

Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers.
Identify gaps in detection coverage, controls, and processes and recommend improvements. Share knowledge with and help guide less experienced team members.
Success in this role will be measured through a combination of control execution, detection coverage, access hygiene, and incident handling, including:
Daily log reviews completed on schedule, with documented evidence for every review.
Clean quarterly ASV scans, with remediation and rescans completed within required windows.
XDR, FIM, and GuardDuty coverage maintained across all in-scope systems, accounts, and regions, with gaps escalated promptly.
Incidents triaged within defined response times, with timelines, post-incident reports, and root cause analyses completed for all qualifying events.
Audit evidence delivered without findings attributable to missed or undocumented controls.
3-5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.
~ Practical experience with AWS (including GuardDuty and Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; Ability to take part in after-hours incident response coverage, including a weekend and holiday backup rotation.

A bachelor’s degree in Information Security, Computer Science, or a related field.
Relevant security certifications, such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP.
Scripting experience in Python or Node.js.
The successful candidate brings sound judgment, strong attention to detail, and a sense of ownership over daily security and compliance operations, which take priority in this role. Application, infrastructure, network, and compliance owners provide support. Access and production changes require independent approval, and response coverage includes named backups for weekends, holidays, and leave.
Remote

With strong partnerships across key verticals and a deep integration with ISV platforms, we deliver innovative and scalable solutions that help businesses of all sizes manage their payments efficiently. Headquartered in New York, our company is known for its customer-first approach, cutting-edge technology, and commitment to driving seamless transactions.
Equal Employment Opportunity Policy
Sola provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.