Security Operations Engineer

Cybersecurity Analyst

Reserv is an InsurTech company creating and incubating cutting-edge AI and automation technology to bring efficiency and simplicity to claims. We're stripping away the "mundane" to set a new global standard for the insurance industry!

Founded by industry veterans, with deep experience in SaaS and digital claims, Reserv is venture-backed by Bain Capital and Altai Ventures and began operations in May 2022. We're focused on automating highly manual tasks to tackle long-standing problems in claims while setting the new standard for TPAs, insurance technology providers and adjusters alike.

As our Cybersecurity Analyst you won't just be watching a dashboard; you'll be helping to build the shield that protects our digital assets and our customers. You'll be responsible for executing tactical daily tasks and participating in broader planning efforts. If you thrive on novel problem-solving and adapt quickly to new technologies, you'll fit right in!

This is a hands-on technical role focused on protecting the organization's digital assets from cyber threats by monitoring networks, identifying vulnerabilities, implementing security measures, threat hunting, responding to breaches and developing security policies & procedures. No day will be the same and you will continuously learn & grow! Successful candidates will bring experience utilizing and configuring various security tools such as IDP, EDR/XDR, SIEM, SOAR, IDS/IPS and secure email gateways.

What to expect

• Continuously monitor security telemetry to identify potential threats, malicious activity, or unauthorized access. Sniff out threats before they become a headline!
• Investigate, analyze, classify, prioritize and contain security breaches in real-time, providing detailed reporting and post-incident analysis. Build a secure plan, not a work around, so it never happens again!
• Conduct vulnerability assessments to identify system weaknesses before they are exploited
• Coordinate and assist with penetration testing activities
• Install, configure and maintain security software and systems such as endpoint security, intrusion detection, prevention systems and logging platforms
• Install and fine-tune our arsenal—from EDR/XDR and SIEM to SOAR and IDS/IPS.
• Research, analyze and stay up to date on the latest security trends, hacking techniques, emerging cyber threats
• Educate employees and stakeholders on security protocols, phishing threats and data protection
• Develop SOPs, playbooks/runbooks to consistently respond to common incidents that allow our security posture to scale as fast as our business
• Hunt for unknown threats in the environment by analyzing logs based on current and emerging threat intelligence. Be the hero who identifies potential threats before they happen!

Does this sound like you?

• Minimum of 3 years of experience in the trenches of a dedicated cybersecurity role
• Working understanding of NIST Cybersecurity Framework
• Technical proficiency with MacOS, Windows, Unix/Linux
• Experience securing and monitoring mobile devices
• Knowledge of current threat actors, TTPs, and MITRE ATT&CK framework
• Fluent in SIEM, EDR/XDR, and Vulnerability Scanners
• Experience with cloud-based productivity platforms such as Google Workspace and/or Microsoft 365
• Demonstrated experience working with SIEM tools, vulnerability scanners, endpoint protection, email security and threat intelligence platforms
• Experience with penetration testing
• Experience performing risk assessments, drafting/maintaining cybersecurity policies and procedures, and constructing after-action reports with precise details
• Familiarity with SSO and identity and access management systems
• Security+, CySA+ or similar industry-standard security certifications
• Strong written and verbal communication skills
• You possess a relentless technological curiosity where "sniffing out" anomalies is becoming second nature
• Experience working in a cloud-first or startup environment

Icing on the cake

• Bachelors degree in Cybersecurity, IT, or related field
• Automation experience with various scripting languages (e.g. Bash, Python, PowerShell)
• AWS and/or GCP certifications or demonstrated experience
• Deep understanding of at least two major operating systems
• Familiarity with the concepts of secure software development (SSDLC)

What we offer

• Generous health-insurance package with nationwide coverage, vision, & dental
• 401(k) retirement plan with employer matching
• Competitive PTO policy – we want our employees fresh, healthy, happy and energized
• Generous family leave policy
• Work from almost anywhere to facilitate your work life balance
• Cool, functional swag
• Apple laptop, large second monitor, and other quality-of-life equipment you may want

Technology is something that should make your life easier, not harder! At Reserv, we value diversity and believe that a variety of perspectives leads to innovation and success. We are actively seeking candidates who will bring unique perspectives and experiences to our team. We welcome applicants from all backgrounds and encourage those from underrepresented groups to apply. If you believe you are a good fit for this role, we would love to hear from you!