Monitor, investigate, and respond to security alerts, phishing, vulnerabilities, and incidents for managed security clients. Conduct threat hunts, collect evidence, identify root causes, perform containment and remediation, and create incident reports and SOPs. Support deployment of security toolsets, collaborate with analysts and engineers, communicate with clients, and participate in after-hours or on-call coverage.
The Senior Security Analyst will monitor and manage alerts generated from various security tools and respond to and mitigate security threats for CompassMSP’s managed security service clients. They will also assist in deploying and managing the technology that enables our core security services, maximizing and bolstering our clients’ security with their technical expertise and knowledge of security industry best practices.
Job requirements
Preferred Additional Experience:
Job responsibilities
Benefits
CompassMSP is committed to fair and equitable compensation practices. Salary range will reflect experience, location and other factors. This position is eligible for an annual bonus.
Job requirements
- 5+ years of experience in a SOC/incident response role.
- Demonstrated experience conducting alert and incident investigationsend-to-end with minimal oversight and sound escalation judgment
- Execution-oriented: able to perform containment, blocking, isolation, and basic remediation in small and mid-sized business environments.
- Experience monitoring and responding to threatsimpactingWindows, Microsoft 365 / Entra ID, and firewalls.
- Familiarity and comfort working acrossEDR,firewalladministration, identity and email security consoles, ticketing systems, RMM tools, and security telemetry sources.
Preferred Additional Experience:
- Infrastructure Recovery & IT Engineering
- Network, cloud, and endpoint recovery
- Firewall, VPN, and zero-trust environments
- Backup validation and isolated recovery environments
- Active Directory, virtual hosts, domain controllers, migrations, and secure system restoration
- Endpoint wipe-and-reload and related rebuild activities
Job responsibilities
- Investigate, manage,respond to,and escalatesecurity alerts from various security platforms, such as EDR/XDR, SIEM, etc.
- Analyze security events escalated from tier 1 tovalidatethreats and respond accordingly.
- Investigate and respond to reported phishing emails.
- Analyze, prioritize, and track vulnerabilitiesdetected by vulnerability scanners.
- Researchemerging threatsand perform global threat huntsto support correlating industrydata and threat feeds with our clients’ environments andattack surfaces.
- Conduct incident response procedures, investigatingindicators of compromise,identifyingroot causes, collecting evidence, anddrafting incident response reports.
- Collaborate with othersecurityanalysts,compliance analysts,Compassengineers,andvCISOs,lendingthem yourtechnicalexpertisein ordertoprovide exceptional managed security services toour clients.
- Interface directly with clients and end users wheninvestigating threats and managing/troubleshooting managed security tools.
- Assistin the deployment of the managed security services toolstackto new clients.
- Assistwithinternal quality projects, including developing standardsandsecurityservicesforCompassMSP.
- Stay current with the latest industry trends, best practices, and regulatory requirements tohelpcontinuously enhance our securityservices.
- Hunt for emerging threats using a combination ofmethods and tools such as SIEM querying, software testing, sandboxing, etc.Translate the results of threat hunts into actionable alerts andanalysisSOPs to aid the SOC in protecting clients.
- Create andmaintaininternal standard operating procedures.
- Participate in a flexible work schedule to includeafter hours/ on-call shifts.
Benefits
- Competitive pay
- Quarterly Bonuses
- Progressive PTO
- Medical/Dental/Vision/Life/Disability available
- Tax deferred retirement plan with company match
- Career Development and Coaching
- Fun work environment!
CompassMSP is committed to fair and equitable compensation practices. Salary range will reflect experience, location and other factors. This position is eligible for an annual bonus.
Similar Jobs
HR Tech
Leads major cyber incident response and command activities, performing digital forensics, threat hunting, containment, recovery, and malware triage across endpoint, cloud, network, identity, Windows, and Linux environments. Coordinates technical teams, mentors analysts, briefs executives, develops response playbooks and training, automates investigations with scripting, and partners with detection engineering and threat intelligence teams to improve SOC capabilities.
Top Skills:
BashCloud SecurityDigital ForensicsEdrGenaiLinuxMalware AnalysisPowershellPythonSIEMSoarWindows
Fintech • Analytics
Conduct red and purple team engagements, breach and attack simulations, and adversary emulation to identify security gaps and improve cyber resilience. Develop custom attack tools and methodologies, provide remediation guidance, and collaborate with defensive, infrastructure, and development teams. The role requires expertise in offensive security, cloud and enterprise environments, scripting, threat intelligence, MITRE ATT&CK, AI-enabled attack techniques, and security control evasion.
Top Skills:
Active DirectoryArtificial IntelligenceAWSAzureBashCdrCi/CdCyber Threat IntelligenceDatabasesDevsecopsEdrEmail ApplicationsEntra IdGoogle Cloud PlatformIdentity And Access ManagementIds/IpsJavaScriptLinuxmacOSMiddlewareMitre Att&CkNext-Generation FirewallsPowershellProxiesPythonRed Teaming FrameworksSIEMWafWeb ApplicationsWindows
.png)
Retail
Conduct AI red-team testing of connectors and platforms using AI security harnesses and Prisma AIRS. Assess compliance with hardening requirements, perform threat modeling, analyze results, create dashboards, document findings, and provide remediation guidance. Partner with engineering teams and business units to explain risks and drive issue resolution across the AI security program.
Top Skills:
Ai Red Teaming HarnessesBashOwasp Top 10 For Llm ApplicationsPowershellPrisma Airs Ai Red TeamingPython
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
