{"id":3596081,"url":"https://alion.io/job/sola-senior-security-analyst","title":"Senior Security Analyst","company":{"id":2746914,"name":"Sola","domain":"solapayments.com","url":"https://alion.io/company/solapayments-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":125000,"max":150000,"currency":"USD","period":"year","gross":null,"usd_annual":150000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Confluence","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Least Privilege","optional":false},{"name":"Linux","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Sumo Logic","optional":false},{"name":"Trend Micro","optional":false},{"name":"Windows","optional":false},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"Python","optional":true}],"status":"live","first_seen_at":"2026-10-20T16:36:26Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-11-03T23:39:36Z","board_verified":true,"closed_at":null,"days_open":14,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":14},"description":"Job Summary:\nWe believe in empowering our employees to think outside the box and meet challenges head-on because, at Sola, everyone is a leader. Our employees take personal responsibility for ensuring our merchants and vendor partners have the tools and guidance they need to be successful. If you are driven to help us create next-generation payment solutions, eager to effect change, and passionate about protecting the data our merchants trust us with, we want to talk to you!\nWe are looking for a Sr. Security Analyst to join our DevSecOps team and own day-to-day security and compliance operations for our payment gateway and switch, including a PCI DSS 4.0.1 cardholder data environment. This hands-on role focuses on security log review, identity and access management, incident handling, and the documented execution of recurring PCI DSS and SOC 2 controls. As a senior member of the team, you will work independently, serve as the escalation point for security operations issues, and help strengthen our controls as the business grows.\nDuties and Responsibilities:\nSecurity Log Review: Complete daily security log reviews across Trend Micro/CrowdStrike, Feroot, Cognito, GuardDuty, databases, and firewalls. Retain ticket evidence of scope, results, coverage gaps, and linked incidents, and track exceptions through resolution.\n\nCompliance Control Execution: Own the assigned PCI DSS and SOC 2 control calendar. Complete recurring control tasks, retain audit evidence, track overdue actions, and coordinate ASV scans, remediation, rescans, and access reviews. Support internal and external auditors with evidence requests.\n\nXDR and File Integrity Monitoring: Operate XDR and approved file integrity monitoring configurations. Verify agent coverage, health, and updates; apply approved routine adjustments; and coordinate remediation with system owners.\n\nAuthentication Monitoring: Monitor Cognito authentication failures, suspicious logins, and account takeover indicators. Investigate findings and coordinate login availability issues with application owners.\n\nCloud and SIEM Monitoring: Verify GuardDuty coverage across AWS accounts and regions and monitor findings. Check Sumo Logic log delivery, alerts, and dashboards, and escalate collection or monitoring failures.\n\nIdentity and Access Management: Provision, modify, and promptly revoke access based on approved requests. Apply least privilege and MFA requirements, document approvals and changes, and coordinate periodic access certifications with system owners.\n\nIncident Response: Lead the triage and investigation of security incidents, perform authorized containment, and coordinate resolution with internal teams and vendors. Maintain incident timelines, post-incident reports, and root cause analyses.\n\nFirewall Management: Review firewall anomalies, maintain rule justifications and approval records, and coordinate monthly rule reviews and approved routine changes with network engineers.\n\nDocumentation and Reporting: Maintain Confluence procedures and incident runbooks, reviewing them quarterly and after relevant changes or incidents. Provide monthly metrics on control completion, coverage, incidents, access changes, and overdue actions.\n\nContinuous Improvement: Identify gaps in detection coverage, controls, and processes and recommend improvements. Share knowledge with and help guide less experienced team members.\n\nSuccess in this role will be measured through a combination of control execution, detection coverage, access hygiene, and incident handling, including:\nDaily log reviews completed on schedule, with documented evidence for every review.\n\nPCI DSS and SOC 2 control tasks completed by their due dates, with overdue actions tracked to closure.\n\nClean quarterly ASV scans, with remediation and rescans completed within required windows.\n\nXDR, FIM, and GuardDuty coverage maintained across all in-scope systems, accounts, and regions, with gaps escalated promptly.\n\nAccess revocations completed within defined SLAs, and periodic access certifications completed on time.\n\nIncidents triaged within defined response times, with timelines, post-incident reports, and root cause analyses completed for all qualifying events.\n\nMonthly firewall rule reviews completed with current justifications and approval records.\n\nAudit evidence delivered without findings attributable to missed or undocumented controls.\n\nProcedures and runbooks reviewed quarterly and kept current.\n\nRequirements and Qualifications:\n3-5 years of hands-on security operations or related IT security experience, including independent alert investigation, incident triage, and identity administration.\n\nPractical experience with AWS (including GuardDuty and Cognito), SIEM queries, XDR, Windows/Linux logs, and network security; comparable product experience accepted.\n\nWorking knowledge of PCI DSS and SOC 2 control execution and evidence, least privilege, change control, and incident response.\n\nProven ability to work independently, manage recurring compliance deadlines, and prioritize competing demands.\n\nStrong ticket documentation skills and excellent written and verbal communication skills.\n\nAbility to take part in after-hours incident response coverage, including a weekend and holiday backup rotation.\n\nPreferred Qualifications:\nExperience in the payments industry or another PCI DSS regulated environment.\n\nA bachelor’s degree in Information Security, Computer Science, or a related field.\n\nRelevant security certifications, such as CompTIA Security+ or CySA+, GIAC (GCIH, GCIA), SSCP, or CISSP.\n\nHands-on experience with Trend Micro, CrowdStrike, Feroot, or Sumo Logic.\n\nScripting experience in Python or Node.js.\n\nLeadership Profile:\nThe successful candidate brings sound judgment, strong attention to detail, and a sense of ownership over daily security and compliance operations, which take priority in this role. Engineering opportunities depend on interest, capacity, and mentorship. Application, infrastructure, network, and compliance owners provide support. Access and production changes require independent approval, and response coverage includes named backups for weekends, holidays, and leave.\nLocation:\nRemote\n\nSalary:\n$125,000 - $150,000 annually\n\nAbout Sola\nSola is a leading payments provider offering a full suite of merchant services, including payment processing, gateway solutions, and payfac capabilities. With strong partnerships across key verticals and a deep integration with ISV platforms, we deliver innovative and scalable solutions that help businesses of all sizes manage their payments efficiently. Headquartered in New York, our company is known for its customer-first approach, cutting-edge technology, and commitment to driving seamless transactions.\nEqual Employment Opportunity Policy\nSola provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training.","description_format":"text","description_chars":7376,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-11-02T03:51:08Z"}],"visa":[],"liveness":{"score":77,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.851,"p_room":0.9,"age_days":13,"expected_fill_days":36,"reasons":["conf:4","win:mid"],"computed_at":"2026-11-03T05:54:40Z"},"pay":{"stated_usd_annual":150000,"is_top_pay":false},"html_url":"https://alion.io/job/sola-senior-security-analyst","json_url":"https://alion.io/job/sola-senior-security-analyst.json","meta":{"generated_at":"2026-11-04T01:29:11Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2256,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2746914},"rest":"https://alion.io/mcp/rest/get_company?id=2746914"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsola-senior-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsola-senior-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsola-senior-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sola-senior-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsola-senior-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3596081}},{"tool":"search_jobs","arguments":{"company":"solapayments.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3596081},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}