Senior Security Analyst
Share
Job Location:
Monthly Salary:
Posted on:
2 hours ago
Vacancies:
1 Vacancy
Job Summary
The Company Youll Join
Carta connects founders investors and limited partners through world-class software purpose-built for everyone in venture capital private equity and private credit. Trusted by 65000 companies in 160 countries Cartas platform of software and services lays the groundwork so you can build invest and scale with confidence.
Cartas Fund Administration platform supports 9000 funds and SPVs representing nearly $185B in assets under management with tools designed to enhance the strategic impact of fund CFOs. Recognized by Fortune Forbes Fast Company Inc. and Great Places to Work Carta is shaping the future of private market infrastructure.
Together Carta is creating the end-to-end ERP platform for private markets. Traditional ERP solutions dont work for Private Funds. Private capital markets need a comprehensive software solution to replace outdated spreadsheets and fragmented service providers. Cartas software for the Office of the Fund CFO does just that - its a new category of software to make private markets look more like public markets - a connected ERP for private capital.
For more information about our offices and culture check out our Carta careers page.
The Problems Youll Solve
At Carta our employees set out on a mission to unlock the power of equity ownership for more people in more places. We believe that the problems we solve today unlock the opportunities of tomorrow.
As a Senior Security Analyst youll directly shape and strengthen our detection and response capabilities help mature our security operations and ultimately protect the organization from evolving threats. Youll play a critical role in leading incidents developing internal tools and playbooks and reducing response times through automation and continuous improvement. Youll serve as a point-of-contact for incidents and collaborate with stakeholders to shape the future of Cartas security posture.
Here are some problems wed love for you to help us solve:
- Lead investigation and response efforts for security incidents and coordinate with internal stakeholders and external partners when necessary.
- Own detection use-case development and write and tune alerts to improve signal-to-noise ratio across our environments.
- Maintain and continually improve security incident response plans playbooks and related documentation.
- Apply Terraform to ensure consistent secure and scalable infrastructure deployment and detection pipelines.
- Develop and maintain internal tooling and automations to improve analyst efficiency for alert triage IOC enrichment and evidence collection.
- Elevate the Security team by coaching peers mentoring junior analysts and setting high standards for detection quality and incident handling.
- Own and execute technical security projects including scoping building testing deploying and iterating.
- Conduct threat hunting and utilize threat intelligence to proactively identify and mitigate emerging risks.
- Participate in on-call rotation and continuously improve readiness and handovers.
The Team Youll Work With
You will be part of a security-minded team that believes in progress over perfection and where security culture and mindset is key. Our team is rethinking how detection and response activities can be accomplished in innovative ways. We focus on solving business problems while minimizing and managing risk exposure for Carta.
About You
Were looking for candidates who have:
- Deep experience in triaging investigating and remediating security events and incidents across multiple technology stacks.
- Strong experience with SIEM (e.g. Splunk Panther Sentinel) EDR (e.g. SentinelOne CrowdStrike) and other security tooling (e.g. CASB SSE SWG).
- Working knowledge of Terraform and Infrastructure as Code principles to secure and scale detection/response infrastructure.
- Solid understanding and a proven ability to apply detection engineering and threat modeling concepts using MITRE ATT&CK or similar frameworks.
- Excellent judgement and the ability to handle ambiguity and make balanced decisions when working with complex situations.
- Demonstrated ability to mentor peers raise technical standards and influence team maturity.
- Proven ability to proactively collaborate with cross-functional teams to influence security priorities and guide risk-based decisions.
- Excellent written and verbal communication skills including the ability to effectively communicate cybersecurity risk across technical and non-technical audiences.
- 6 years of experience in incident management detection engineering and security operations.
At Carta youre not just an employee. Youre a builder who is creating infrastructure that accelerates innovation and empowers more ownership. Cartans are helpful relentless unconventional and kind; representing Cartas Identity Traits. They work collaboratively and cross functionally to challenge the status quo; working towards a common goal of creating more owners in the private markets.
Salary
Cartas compensation package includes a market competitive salary equity for all full time roles exceptional benefits and for applicable roles commissions plans. Our expected cash compensation (salary commission if applicable) range for this role is:
- $151810 - $178600 in Seattle WA
- $159800 - $188000 in San Francisco CA; Santa Clara CA; New York NY
We are hiring for multiple levels and locations so final offers may vary from the amounts listed based on geography experience and expertise and other factors.
Disclosures:
- We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. If accommodations due to a disability or medical condition are needed please connect with the talent partner via email.
- Carta uses E-Verify in the United States for employment authorization. See the E-Verify and Department of Justice websites for more details.
- For information on our data privacy policies seePrivacyCA Candidate Privacy and Brazil Transparency Report.
- Please note that all official communications from us will come from an @ or @ domain. Report any contact from unapproved domains to
Required Experience:
Senior IC
Key Skills
- Security Management
- Sensitive Information Management
- Pressure Management
- Risk Analysis
- Access Control
- Safety Procedures
- Security Measures
- Security Training
- Risk Assessment
- Access Point
- Security Checks
- Detect Signs
- Safe Environment
- Security System
- Security Reports
About Company
Carta’s platform of software and services helps people manage equity, build businesses, and invest in the companies of tomorrow. Learn more.
