Senior Security Analyst - Coalition

About Coalition

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks.

About the Role

The Coalition Security team is comprised of bright minds across many cybersecurity domains, with expertise in Threat Intelligence, Cyber Risk Management and Defensive Security Controls. In the Security Analyst role, your mandate is to protect our policyholders from loss. As a part of this mandate, you might find yourself analyzing data breaches and claims events, conducting client security gap analyses or advising a CISO on how to improve specific security controls. You will work across our client base on topics ranging from security architecture and cloud security, to data protection and compliance.

You will also have an opportunity to work with our product team to codify security best practices into our underwriting algorithms, rating models and risk management apps.

Responsibilities

• Review and analyze the security posture of insureds or potential insureds quickly and efficiently.
• Evaluate customer security programs, technologies, controls, and business environments; recommend and develop enhancements.
• Analyze the root cause of specific cyber insurance claims and identify ways to detect exposures that could have prevented those claims.
• Triage security incidents and claims, understand the root cause, and develop detection tradecraft from threat intelligence.
• Provide recommendations on solutions to help customers manage information security risk.
• Track emerging security practices and contribute to building internal processes, and our various products.
• Stay abreast of the current regulatory environment, industry trends and related implications.

Skills and Qualifications

• Minimum of 2-4 years of security analysis, defender/blue team or penetration testing/red team experience.
• Demonstrated expert understanding of the life cycle of network threats, attack vectors, and methods of exploitation with an understanding of intrusion set tactics, techniques, and procedures.
• Knowledge of TCP/IP Protocols, network analysis and network/security applications, including log and network traffic capture analysis.
• Knowledge of industry standard frameworks – NIST, ISO, HIPAA, PCI.
• Self-motivated with an entrepreneurial spirit and comfortable working in a fast-paced, dynamic environment.
• Strong interpersonal communication skills (verbal & written).
• Aptitude to learn technical concepts/terms and ability to manage multiple tasks/projects simultaneously.
• Bachelor’s Degree in Computer Science, Information Security, Engineering or equivalent work experience.

Bonus Points

• Securing cloud based platforms (Microsoft Azure, Amazon AWS, etc.) - experience with system hardening procedures for Windows, Linux and Unix is helpful.
• Knowledge or experience with EnCase, FTK, SIFT, Volatility, Splunk, Graylog, ELK/Logstash, WireShark, Zeek, or other open source forensic/log analysis/network analysis tools.
• Experience with Nmap, Nessus, Nexpose, Qualys, Burp, Kali, Metasploit, Meterpreter or other scanning and/or offensive tools.
• Knowledge of programming and scripting for development of security tools and industry frameworks is helpful.
• SCADA / Control systems network knowledge/experience a plus.

Compensation & Perks

As a remote-first organization, our compensation reflects the cost of labor across several Canadian geographic markets.

• Alberta, British Columbia & Ontario: $118,600/year up to $163,075/year CAD
• Other Canadian Locations: $106,700/year up to $146,763/year CAD

Perks

• 100% medical, dental, and vision coverage
• Flexible PTO
• Annual home office stipend and WeWork access
• Mental & physical health wellness programs like Headspace, Lumino, and more
• Competitive compensation and opportunity for advancement