Senior Security Operations Analyst

Position Summary As a Senior Security Operations Analyst, you will protect Litera’s systems, data, and customers from evolving cyber threats. By leading security monitoring, incident response, vulnerability management, and continuous security improvements, you will help ensure a resilient and compliant security posture. Your work will support business continuity, safeguard enterprise assets, and strengthen trust internally and with customers.  Key Responsibilities  Monitor, investigate, and respond to security threats and incidents across cloud and on-prem environments.  Scope, design, and build automation to solve recurring security and compliance problems, reducing manual effort and improving consistency and scalability.  Develop automated security controls and audits, such as validating security group membership and access against requirements, identifying access anomalies, and producing actionable findings.  Build automated checks that evaluate internal systems and content against security criteria, including detecting exposed credentials, passwords, sensitive information, and other security or compliance conditions.  Translate security and compliance requirements into repeatable technical solutions by defining the problem, identifying data sources, implementing detection or validation logic, validating results, and producing actionable output for remediation.  Maintain and improve security automation as requirements, systems, and risks change.  Lead vulnerability management, including risk assessment, remediation, and escalation.  Implement and maintain security controls aligned with Zero Trust and security best practices.  Partner with IT, DevOps, Engineering, and Infrastructure teams to strengthen security posture.  Support compliance initiatives, including ISO 27001, SOC 2, audit readiness, and policy management.  Drive continuous improvement through security automation, measurable control validation, cloud security enhancements, and emerging technology adoption.  Stay current on evolving cyber threats and recommend security improvements.  Qualifications   Must Haves:  5+ years of cybersecurity experience, including hands-on Security Operations Center (SOC) experience.  Experience operating and investigating security events in cloud environments such as Microsoft Azure and AWS.  Hands-on experience with SIEM and SOAR platforms. Experience with Microsoft Sentinel and Defender is preferred.  Demonstrated experience scoping and building automation to solve security or compliance problems using Python, PowerShell, APIs, or similar technologies.  Ability to take a security requirement from problem definition through implementation, including identifying data sources, developing logic, validating results, handling exceptions, and producing actionable output.