Security Analyst

Job Description

Job Description

We are looking for a Security Analyst to join our aviation client in a contract position based onsite in Petaluma, California. This role is ideal for an experienced security specialist who can strengthen daily security operations, investigate threats, and help protect cloud, identity, and endpoint environments. You will work closely with technical partners across IT and security to reduce risk, improve response readiness, and support compliance-focused initiatives.

Responsibilities:

• Lead the response to security events by containing threats, gathering evidence, escalating issues when needed, and documenting outcomes for follow-up review.

• Oversee identity and access activities, including user access reviews, permission governance, and control validation across enterprise systems.

• Analyze suspicious authentication activity, compromised accounts, phishing attempts, and other indicators of malicious behavior to determine impact and next steps.

• Coordinate vulnerability follow-up efforts with IT teams to drive remediation progress and reduce exposure across the environment.

• Track endpoint protection health, device compliance status, and broader security posture to identify gaps requiring attention.

• Examine privileged account usage, network security logs, and web access controls to detect abnormal or unauthorized activity.

• Maintain and enhance operational security documents such as incident procedures, playbooks, standard operating guidance, and response runbooks.

• Prepare recurring security reports and metrics covering incidents, threat trends, vulnerabilities, and operational performance.

• Support audit requests, compliance reviews, eDiscovery efforts, and third-party security assessments as part of ongoing governance activities.

• Partner with security, infrastructure, and support teams on daily operations, tabletop exercises, and continuous improvements informed by incident findings.

• Proven experience in enterprise security operations, including incident handling, threat investigation, and alert triage.
• Strong knowledge of securing Microsoft 365, cloud services, identity platforms, and endpoint environments.
• Hands-on background with identity and access management, access governance, and privileged access controls.
• Demonstrated ability to investigate phishing, account takeover, risky sign-in activity, and authentication-related threats.
• Experience with vulnerability management practices, remediation coordination, and endpoint compliance monitoring.
• Familiarity with tools such as CrowdStrike Falcon, Microsoft Sentinel, Okta, Microsoft Entra ID, or comparable security platforms.
• Working knowledge of compliance support, audits, eDiscovery, data protection initiatives, and regulated operating environments.
• Solid documentation, reporting, and communication skills, with the ability to participate in on-call security incident response as needed.