Senior Information Security Analyst

StackAdapt is the leading technology company that empowers marketers to reach, engage, and convert audiences with precision. With 465 billion automated optimizations per second, the AI-powered StackAdapt Marketing Platform seamlessly connects brand and performance marketing to drive measurable results across the entire customer journey. The most forward-thinking marketers choose StackAdapt to orchestrate high-impact campaigns across programmatic advertising and marketing channels.

As a Senior Information Security Analyst, you will play a key role in establishing, guiding, and maintaining StackAdapt’s security monitoring program and overall defense posture. You will safeguard digital assets, lead incident response efforts, mentor junior team members, and oversee security operations and telemetry analysis across the organization.

You will drive major security investigations, direct root cause analysis for complex incidents, and architect preventative frameworks to mitigate future threats. In addition, you will spearhead threat intelligence initiatives, reporting security metrics to leadership and engineering teams to support strategic risk management and mitigate emerging cyber threats.

You will collaborate with members of the Information Security Team and wider engineering teams for the investigation and resolution of information security events / incidents to ensure that these are managed in a timely and effective manner.

StackAdapt is a 'Remote First' company, therefore we are open to candidates located anywhere in North America for this position.

What you'll be doing

• Performing threat hunting activities in order to identify malicious activity, as well as identifying and mitigating risks before cyber incidents occur.
• Providing technical leadership, mentorship, and guidance to mid-level and junior Security Analysts on threat detection, incident response, and security best practices.
• Analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity, including logs and alerts generated from user endpoints, cloud-based resources, email logs, internet traffic, etc.
• Regularly assessing security threat feeds to stay informed on emerging threats and vulnerabilities, as well as continually assessing the level of risk posed to StackAdapt.
• Documenting key activities, procedures, response plans and playbooks, as well as disseminating key procedural information to other members of the Information Security Team.
• Preparing and delivering security awareness training material for staff with varying backgrounds and domain knowledge.
• Leading major incident response operations and technical forensics investigations, serving as an escalation point and directing containment and remediation strategies.
• Providing specialist advice and guidance to internal teams on technical and forensic matters.
• Supporting efforts to provide assurance about internal security controls and processes to clients.
• Supporting StackAdapt's continuous efforts to meet compliance requirements, for example detailing and evidencing key security controls and mechanisms to external auditors.

What we're looking for

• Experience analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity.
• Experience working effectively in cross-functional teams with both business and technical stakeholders.
• Experience working in incident response, digital forensics and/or security operations.
• Skilled in examining Window, Linux, and MacOS hosts for indicators of compromise (IOCs), including forensic acquisition and analysis of data from endpoints.
• Strong communication skills and an ability to influence senior stakeholders, as well as an ability to communicate information to audiences with varying backgrounds and domain knowledge.
• Knowledge of different cyber security solutions and toolsets is beneficial (e.g. SIEM, EDR, SOAR, vulnerability scanning, email security gateways, internet proxies / gateways, etc.).
• Exposure to simulated real-world cyber attacks (i.e. 'Red Teaming' exercises) is beneficial.
• Experience with cloud computing services is beneficial (e.g. AWS, Azure, GCP, etc.).
• Experience creating, maintaining and delivering training and awareness material.