Information Security Analyst

About the role

The Information Security Analyst joins Sovos' Security Operations team to enhance detection, investigation, and response capabilities across a complex SaaS environment. The role goes beyond simple alert handling, requiring analytical judgment to differentiate real threats from noise and to streamline security workflows.

Key responsibilities

• Investigate security alerts and events from endpoint, identity, email, network, and cloud sources, distinguishing genuine risks from false positives.
• Analyze logs, telemetry, and system behavior to uncover suspicious activity and potential compromises.
• Participate in incident response as a member of the CIRT, collecting evidence, conducting analysis, and producing structured incident reports.
• Tune detection rules and triage logic to improve alert quality while maintaining coverage.
• Identify and redesign repetitive or inefficient workflows into scalable, consistent processes.
• Administer, maintain, and optimize security tools and platforms, ensuring proper configuration and alignment with operational needs.
• Collaborate with CorpIT, Engineering, and other teams to coordinate investigations, tooling changes, and control improvements.

Required profile

• Ability to analyze real security signals and apply sound judgment.
• Experience working in a SaaS environment with complex security requirements.
• Strong focus on improving detection quality and operational efficiency.
• Capability to work cross‑functionally with IT, engineering, and other stakeholders.

Required skills

• Administration of security monitoring tools