安全运营分析师
Security Operation Analyst
在 Flexspring，你将拥有自主权和灵活性，以适合你的方式完成工作。我们营造一种学习文化，使你能够发展新技能并推动职业成长。
我们是谁
Flexspring 是一家 iPaaS（集成平台即服务）公司，专注于人力资源数据集成。我们与人力资源团队和人力资源软件公司合作，设计并交付定制的集成方案，连接人力资源、薪酬和业务系统，减少手动工作，提高数据准确性，并帮助人员运营更高效地运行。
职位描述
作为我们的安全分析师，你将为 Flexspring 的云基础设施和集成平台提供持续的安全监控、检测和事件响应。你将与我们的安全与合规主管密切合作，弥合治理/审计准备与日常操作安全之间的差距，作为团队的前线眼睛应对威胁，同时支持漏洞管理和合规证据收集。你还将作为安全事件响应的第二负责人，确保部门在安全问题上永远不会成为单一故障点。
你将负责
· 持续监控安全警报和检测工具（SIEM/EDR）；对确认的安全事件进行分类、调查和升级。
· 全流程负责漏洞管理：跟踪扫描和渗透测试的结果直至修复，跟进 IT 运维、云工程和 SRE 的相关技术负责人。
· 维护和优化检测规则和警报逻辑，以减少误报并填补监控覆盖的空白。
· 作为安全事件响应的第二负责人，与安全与合规主管协作，遵循部门已建立的升级协议（通过 Jira 路由，不使用临时直接消息）。
· 在 SOC 2 / ISO 27001 审计中协助安全与合规主管收集证据，当需要操作或技术证据（日志、监控配置、事件记录）时。
· 在活跃的安全事件中与云工程和集成支持/SRE 团队协调，确定根本原因和影响范围。
· 关注与云基础设施和 SaaS/iPaaS 平台相关的新兴威胁、漏洞和安全最佳实践。
· 确保用于分类或检测的任何 AI 辅助工具符合 Flexspring 的 AI 与研发安全沙盒政策（只读服务账户，无权限提升）。
查看英文原文
At Flexspring, you will have the autonomy and flexibility to tackle your role in a way that is right for you. We foster a learning culture that will allow you to develop new skills and progress in your career.
Who We Are
Flexspring is an iPaaS (Integration Platform as a Service) company specializing in HR data integrations. We partner with HR teams and HR software companies to design and deliver custom integrations that connect HR, payroll, and business systems, reduce manual work, improve data accuracy, and help people's operations run more efficiently.
The Role
As our Security Analyst, you will provide continuous security monitoring, detection, and incident response for Flexspring's cloud infrastructure and integration platform. You will work closely with our Security & Compliance Lead to close the gap between governance/audit readiness and day-to-day operational security, acting as the team's frontline eyes on threats while supporting vulnerability management and compliance evidence gathering. You will also serve as the secondary owner for security incident response, ensuring the department is never a single point of failure on security matters.
What You'll Do
- Monitor security alerting and detection tooling (SIEM/EDR) on an ongoing basis; triage, investigate, and escalate confirmed security incidents.
- Own vulnerability management end to end: track findings from scans and penetration tests through to remediation, following up with the relevant technical owners across IT Ops, Cloud Engineering, and SRE.
- Maintain and tune detection rules and alert logic to reduce false positives and close monitoring coverage gaps.
- Act as secondary owner for security incident response, working alongside the Security & Compliance Lead, following the department's established escalation protocols (routed through Jira, no ad hoc direct messaging).
- Support the Security & Compliance Lead with evidence collection for SOC 2 / ISO 27001 audits where operational or technical evidence (logs, monitoring configurations, incident records) is required.
- Coordinate with Cloud Engineering and Integration Support/SRE teams during active security incidents to determine root cause and scope.
- Stay current on emerging threats, vulnerabilities, and security best practices relevant to cloud infrastructure and SaaS/iPaaS platforms.
- Ensure any AI-assisted tooling used for triage or detection complies with Flexspring's AI & R&D Safe Sandbox Policy (read-only service accounts, sandboxed environments, no unauthorized use of customer data).
What You Get
- Work from home with flexible hours.
- 4 weeks of paid vacation annually.
- Comprehensive health benefits package for you and your family.
- Team events and opportunities to connect with colleagues.
- Opportunity to work with cutting-edge technologies.
- Competitive base salary.
What You Bring
Must Have
- Bachelor's degree or College Diploma in Information Technology, Computer Security, Computer Science, or equivalent experience.
- Practical experience with security monitoring tools (SIEM, EDR, or equivalent) and incident triage/investigation.
- Working knowledge of vulnerability management processes (scanning, prioritization, remediation tracking).
- Familiarity with cloud infrastructure security fundamentals (AWS preferred): networking, IAM, logging.
- Understanding of compliance frameworks such as SOC 2 and/or ISO 27001.
- Strong analytical and documentation skills; comfortable working through Jira-based ticketing and escalation processes.
Nice to Have
- Security certifications (Security+, GSEC, GCIH, or equivalent).
- Experience with AWS-native security tooling (GuardDuty, Security Hub, CloudTrail).
- Exposure to SaaS/iPaaS environments or HR technology platforms.
- Scripting/automation experience (Python, or similar) to support detection tuning or reporting.
- Experience supporting external audits or penetration test coordination.
For more information about Flexspring, visit:
Equal Opportunity Employer Statement
Flexspring is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at Flexspring are based on business needs, job requirements and individual qualifications, without regard to race, color, religion or belief, national, social or ethnic origin, sex (including pregnancy), age, physical, mental or sensory disability, HIV Status, sexual orientation, gender identity and/or expression, marital, civil union or domestic partnership status, past or present military service, family medical history or genetic information, family or parental status, or any other status protected by the laws or regulations in the locations where we operate. Flexspring does not tolerate discrimination or harassment based on any of these characteristics. Flexspring encourages applicants of all ages.
Originally posted on Himalayas