Security Analyst

About the role

Success Academy is growing rapidly and security is at the forefront of enabling that growth. We are seeking a Security Analyst to join our Information Security & Privacy team. This individual will play a critical role in building, strengthening, and operationalizing our security programs. This is a unique opportunity to make an immediate and lasting impact, addressing the unique needs of a K-12 school environment. The Security Analyst will be hands-on across multiple domains, including security operations, endpoint protection, cloud security, data loss prevention, compliance, and privacy, and partner closely with the Technology Operations team on security change management across the organization. This role reports into the head of Security & Privacy and sits within the Technology department. The Technology team manages a modern technology environment built around cloud and SaaS based applications, operates networking and in-school technologies across 57 school locations, and supports managed devices used by over 3,000 employees and over 20,000 students. This position will be based in the network office (3-days a week onsite) in Manhattan (10005).

Responsibilities

• Incident Response: use our SIEM to identify vulnerabilities, investigate alerts, and lead incident response & remediation efforts
• Email Security: Support existing efforts to build email compliance and DLP rules, and take proactive measures against advanced phishing techniques
• Security Operations: Partner with IT, engineering, and business stakeholders to ensure security is integrated into workflows across the organization
• Program Building: Lead implementation of scalable security processes across incident response, access management, vulnerability management, and DLP
• Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities
• Security Tooling: Stay ahead of emerging threats and security trends, recommend and vet new tools as appropriate

Qualifications

• 3+ years of professional experience in information security roles within technology-driven organizations
• Strong hands-on experience with security incident response workflows using a SIEM
• Experience with Crowdstrike Falcon or similar endpoint security platforms
• Expertise in Google Workspace security administration (Gmail rules, DLP, monitoring)
• Expertise in advanced email security platforms (Sublime, Mimecast, Proofpoint, Abnormal, etc.)
• Expertise with identity access management platforms (Okta)
• Knowledgeable in AWS and GCP infrastructure implementation, security controls, IAM, and monitoring, as well as Wiz
• Familiarity with security frameworks and privacy regulations (SOC 2, ISO 27001, FERPA)
• Ability to work hybrid onsite at Manhattan (10005) headquarters Tuesday through Thursday

Competencies

• Meticulous and tenacious mindset in identifying and resolving security risks
• Excellent written and verbal communication skills; ability to convey security concepts to both technical and non-technical audiences

Benefits

• Day-One Health & Wellness: Medical, dental, and vision coverage starting your first day (SA covers 82% of core medical plan), plus a free One Medical membership and confidential mental health support via EAP/Talkspace
• Financial Security: 403(b) retirement plan with a 3% employer match, up to $2,400/year in employer HSA contributions, employer-paid life/disability insurance, and Public Service Loan Forgiveness (PSLF) eligibility
• Time to Recharge: Generous paid time off, paid holidays, and paid parental leave
• Perks & Stipends: $50/month cellphone stipend ($600/year), pre-tax commuter benefits, backup family care, and performance-based earning incentives

Pay

Compensation Range: $125,000 - $145,000 USD. Exact compensation may vary based on skills and experience. This position is not bonus eligible.

Schedule

Hybrid position based in NYC Financial District office (10005), requiring on-site work Tuesday through Thursday and remote work on Monday and Friday.