Senior Information Security Analyst

StackAdapt is the leading technology company that empowers marketers to reach, engage, and convert audiences with precision. With 465 billion automated optimizations per second, the AI-powered StackAdapt Marketing Platform seamlessly connects brand and performance marketing to drive measurable results across the entire customer journey. The most forward-thinking marketers choose StackAdapt to orchestrate high-impact campaigns across programmatic advertising and marketing channels.

As a Senior Information Security Analyst, you will play a key role in establishing, guiding, and maintaining StackAdapt’s security monitoring program and overall defense posture. You will safeguard digital assets, lead incident response efforts, mentor junior team members, and oversee security operations and telemetry analysis across the organization.

You will drive major security investigations, direct root cause analysis for complex incidents, and architect preventative frameworks to mitigate future threats. In addition, you will spearhead threat intelligence initiatives, reporting security metrics to leadership and engineering teams to support strategic risk management and mitigate emerging cyber threats.

You will collaborate with members of the Information Security Team and wider engineering teams for the investigation and resolution of information security events / incidents to ensure that these are managed in a timely and effective manner. 

StackAdapt is a ‘Remote First’ company, therefore we are open to candidates located anywhere in North America for this position.

What you’ll be doing

• Performing threat hunting activities in order to identify malicious activity, as well as identifying and mitigating risks before cyber incidents occur.
• Providing technical leadership, mentorship, and guidance to mid-level and junior Security Analysts on threat detection, incident response, and security best practices.
• Analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity, including logs and alerts generated from user endpoints, cloud-based resources, email logs, internet traffic, etc. 
• Regularly assessing security threat feeds to stay informed on emerging threats and vulnerabilities, as well as continually assessing the level of risk posed to StackAdapt. 
• Documenting key activities, procedures, response plans and playbooks, as well as disseminating key procedural information to other members of the Information Security Team. 
• Preparing and delivering security awareness training material for staff with varying backgrounds and domain knowledge. 
• Leading major incident response operations and technical forensics investigations, serving as an escalation point and directing containment and remediation strategies.
• Providing specialist advice and guidance to internal teams on technical and forensic matters.
• Supporting efforts to provide assurance about internal security controls and processes to clients. 
• Supporting StackAdapt’s continuous efforts to meet compliance requirements, for example detailing and evidencing key security controls and mechanisms to external auditors. 

What we’re looking for

• Experience analyzing logs and alerts from a wide range of sources in order to identify evidence of malicious activity. 
• Experience working effectively in cross-functional teams with both business and technical stakeholders. 
• Experience working in incident response, digital forensics and/or security operations.
• Skilled in examining Window, Linux, and MacOS hosts for indicators of compromise (IOCs), including forensic acquisition and analysis of data from endpoints.
• Strong communication skills and an ability to influence senior stakeholders, as well as an ability to communicate information to audiences with varying backgrounds and domain knowledge. 
• Knowledge of different cyber security solutions and toolsets is beneficial (e.g. SIEM, EDR, SOAR, vulnerability scanning, email security gateways, internet proxies / gateways, etc.).  
• Exposure to simulated real-world cyber attacks (i.e. ‘Red Teaming’ exercises) is beneficial. 
• Experience with cloud computing services is beneficial (e.g. AWS, Azure, GCP, etc.). 
• Experience creating, maintaining and delivering training and awareness material. 

We'll be reaching out to applicants that have

• 4+ years of experience in information security, incident response, digital forensics, or security operations, with demonstrated progressive leadership responsibility.
• A Bachelor’s degree (or higher) in Computer Science or a related field; or a combination of relevant education, experience, and training. 
• Strong communication skills, both written and verbal.  
• Strong organisational and time management skills, as well as an ability to meet deadlines. 
• Strong analytical and evaluation skills. 
• An ability to conduct research into IT security issues using security tools and solutions. 
• An ability to work comfortably in fast-paced environments, subject to frequent change and/or unpredictability. 
• Security / IT Audit Certification is beneficial (e.g. CISSP, CISA, CISM, CompTIA Network+, GSEC, CEH, etc.). 
• Experience in scripting languages (e.g. Python, PowerShell) for automation of security tasks is beneficial. 

The compensation range listed for this role reflects the expected base salary for candidates located in the posting country based on a global rate. It is informed by market data and the approved budget for this position. StackAdapt maintains different compensation ranges for roles across other countries and regions, and final offers will be aligned to the candidate’s current location. We do not ask candidates about current or prior salary history, and we will not use such information, if volunteered, in setting an offer.

This range represents base salary only. Depending on the role, candidates may also be eligible for additional compensation such as annual bonuses, commissions, equity awards, and a comprehensive benefits package.

Factors Influencing Final Compensation:

• The final compensation offer will be determined by a variety of factors, which may include, but are not limited to: the candidate's specific experience, technical skills, knowledge, abilities, and relevant education, licensure, and certifications.
• Other business factors, such as organizational needs and budget alignment, may also be considered in the final offer.

StackAdapter's Enjoy:

• Highly competitive salary
• Retirement/ 401K/ Pension Savings globally
• Competitive Paid time off packages including birthday's off!
• Access to a comprehensive mental health care program
• Health benefits from day one of employment
• Work from home reimbursements
• Optional global WeWork membership for those who want a change from their home office and hubs in London and Toronto
• Robust training and onboarding program
• Coverage and support of personal development initiatives (conferences, courses, books etc)
• Access to StackAdapt programmatic courses and certifications to support continuous learning
• An awesome parental leave program
• A friendly, welcoming, and supportive culture
• Our social and team events!

Please note: Benefits and perks may vary depending on your country of employment and the nature of your engagement. In locations where StackAdapt does not have a legal entity, employment and benefits are administered in accordance with local regulations and partner policies.