Security Analyst

A day in the life:

As a Security Analyst at Power Digital, you protect the systems, data, and client information that power our business. You monitor for threats, investigate incidents, and work cross-functionally with IT and engineering to keep our security posture strong as we grow.

 

Key Responsibilities:

• You monitor security systems, logs, and alerts to detect, investigate, and respond to potential threats and incidents
• You run vulnerability scans and assessments, then coordinate remediation with IT and engineering teams
• You maintain and improve compliance with security frameworks and certifications, including SOC 2
• You employ AI technologies to enhance and optimize business processes
• You utilize and leverage Power Digital's Nova ecosystem as it relates to your department
• You support security awareness training and phishing simulation programs across the company
• Other applicable or related duties as assigned

 

Role Requirements:

• 2+ years of experience in information security, IT security, or a related analyst role
• Working knowledge of security monitoring tools, SIEM platforms, and endpoint detection systems
• Familiarity with compliance frameworks such as SOC 2, GDPR, or CCPA
• Understanding of network fundamentals, cloud environments (AWS, GCP, or Azure), and common attack vectors
• Strong written communication skills to document incidents and explain risk to non-technical teams
• Ability to prioritize and stay calm under time pressure during active incidents

 

Key Performance Indicators (KPIs)

• Maintain Mean Time to Detect (MTTD) ≤ 15 minutes and Mean Time to Respond (MTTR) ≤ 60 minutes for priority security incidents.
• Remediate ≥95% of critical and high-severity vulnerabilities within their defined SLA each quarter.
• Achieve a phishing simulation click rate ≤5% and an employee phishing report rate ≥50% per campaign.
• Achieve ≥98% completion of required security awareness training within the assigned deadline each quarter.
• Close ≥95% of audit and compliance findings within the agreed target timeframe each quarter.

 

Most Important Things (MITs)

• Review overnight security alerts and triage anything flagged as high priority
• Close out remediation tickets assigned for the week
• Check in with IT and engineering on any in-progress incident response
• Prepare or update documentation ahead of upcoming audits or compliance reviews
• Run and review this week's phishing simulation and training results