Security Operations Analyst

About Us

Founded in 1992 in Dover, NH, Planet Fitness is one of the largest and fastest-growing franchisors and operators of fitness centers in the United States by number of members and locations. We have over 2,700+ stores in 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Spain, and Australia. 90% of Planet Fitness stores are owned and operated by independent franchisees. At Planet Fitness, our unique mission has always been to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment. And we’re proud of the amazing Planet Fitness team that supports our clubs and team members. They are comprised of dynamic, dedicated, and talented individuals who represent our values of integrity, transparency, passion, respect, and excellence (while having fun!) in everything they do. Joining the PF family means being part of a company that cares about bettering the health and wellbeing of our communities. It means being a part of a supportive, engaging workforce with an inclusive culture that values diversity and creates an environment where everyone can feel they belong. It means encouraging professional growth and development. It means making true, lasting connections with your co-workers with celebrations, team building activities and engaging corporate events! It means creating a positive impact in our local communities through our Judgement Free Generation® philanthropic initiative. It means being part of a brand that you can be proud of!

Responsibilities

• Collaborate closely with the Senior Director of Information Security to support and execute security, risk management, and compliance initiatives across the organization
• Maintain and manage security systems including Security Information and Event Management (SIEM) platforms, Intrusion Detection/Prevention Systems (IDS/IPS), Endpoint Detection and Response (EDR) tools, and other key security technologies
• Analyze system logs, alerts, and events to detect abnormal behavior, malicious activity, and policy violations
• Respond to, investigate, and manage security incidents following established procedures and escalate complex cases as necessary
• Execute incident response plans and maintain detailed documentation, including incident records, timelines, and root cause analyses
• Conduct post-incident reviews to identify lessons learned and drive continuous improvement
• Leverage both internal and external threat intelligence sources to stay informed about emerging threats, vulnerabilities, and attack vectors
• Correlate threat intelligence with internal telemetry to identify potential risks, indicators of compromise (IOCs), or vulnerabilities
• Assist in the configuration, tuning, and maintenance of SOC technologies, including SIEM, EDR, IDS/IPS, and related tools
• Collaborate with other security team members to enhance detection logic, refine alerting mechanisms, and reduce false positives
• Develop and maintain comprehensive documentation, including detection rules, response playbooks, and investigation procedures
• Generate regular reports detailing key security metrics, incident trends, and threat intelligence insights for technical and executive stakeholders
• Support cross-functional investigations and remediation efforts in coordination with IT, DevOps, and other business units
• Communicate security findings and incident updates effectively to both technical and non-technical audiences
• Ensure all incident handling and investigative activities align with internal policies and comply with relevant regulatory standards (e.g., GDPR, PCI-DSS, and data privacy laws)
• Stay current with cybersecurity developments, tools, threat actor tactics, and industry best practices
• Contribute to the enhancement and optimization of Security Operations Center (SOC) workflows, processes, and playbooks
• Perform proactive threat hunting and participate in periodic vulnerability assessments to strengthen security posture
• Foster a culture of security awareness and compliance throughout the organization

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field, coupled with a minimum of 3 years of relevant experience in information security
• Familiarity with SIEM, IDS/IPS, EDR, and other security technologies
• Understanding of network protocols, system logs, and security controls
• Strong analytical and problem-solving skills
• Technical acumen and willingness to administer a variety of security toolsets including but not limited to XDR and vulnerability management tools
• Relevant certifications, such as CompTIA Security+, GIAC (e.g., GCIH, GCIA), or EC-Council Certified SOC Analyst (CSA) are strongly preferred
• Experience with cloud security monitoring (e.g., AWS, Azure)
• Exposure to SOAR platforms and automated incident response tools
• Knowledge of cybersecurity frameworks (e.g., NIST, MITRE)
• Understanding of networking, firewalls, and endpoint security
• Background within retail, payment, and e-commerce sectors
• Highly detail-oriented and efficient, with exceptional planning, prioritization, organizational, and project management skills
• Excellent presentation and communication skills along with the ability to communicate effectively across all levels of the organization
• Creative, progressive, thought leadership with the ability to influence at all levels of the organization
• Dedicated learner with a natural curiosity for consistent growth
• Comfort, ease, and flexibility working in an extremely fast-paced ever-changing, deadline-driven environment
• Cooperative team player with an upbeat, positive, “can-do” attitude