Job Description

It's fun to work in a company where people truly BELIEVE in what they're doing!

Fullsteam is a leading provider of vertical software and embedded payments technology dedicated to helping businesses flourish by providing their customers with seamless experiences. With a dynamic and growing team of over 1,900 employees, we are committed to driving innovation and delivering best-in-class software and payment solutions that empower small and medium-sized businesses across numerous industries. Our purpose is to help our customers grow their businesses and delight their customers. Join us and be a part of a forward-thinking company that values growth, excellence, and the success of our clients.

The position is part of Fullsteam’s Corporate InfoSec Team and is responsible for incident detection and response across Fullsteam and its Business Units.

The Senior Security Analyst serves as a key member of Fullsteam's Corporate Information Security team, leading threat detection, incident response, and security monitoring activities across Fullsteam and its Business Units. This individual is responsible for conducting complex investigations, improving detection capabilities, identifying security risks, and partnering with stakeholders throughout the organization to strengthen Fullsteam's security posture.

The role requires a combination of technical expertise, analytical thinking, and the ability to influence security outcomes across diverse environments.

Primary Responsibilities:

• Lead investigation and response activities for security alerts, incidents, phishing attacks, malware infections, suspicious activity, and other cybersecurity events across Fullsteam and its Business Units.
• Coordinate with infrastructure, cloud, application, and business unit teams to contain, remediate, and recover from security incidents.
• Participate in a 24x7 on-call rotation and provide leadership during high-severity incident response events
• Perform threat hunting and proactive analysis to identify emerging threats and indicators of compromise.
• Lead efforts to tune and optimize security alerts, reduce false positives, and improve detection fidelity across monitoring platforms
• Develop, maintain, and continuously improve incident response procedures, playbooks, and operational workflows.
• Provide recommendations to Business Units regarding security risks, control improvements, and remediation priorities
• Send out quarterly phishing awareness campaigns to educate employees on the dangers of phishing
• Assist with implementation, maintenance, and operationalization of security technologies including EDR and SIEM
• Analyze trends in alerts and incidents to identify systemic security issues and recommend strategic improvements
• Support major security initiatives, acquisitions, integrations, and other cross-functional cybersecurity projects

Skills & Competencies:

• Knowledge of cloud environments and system infrastructure
• Familiarity with common security attack vectors and how to respond
• Experience responding to security events and incidents
• Knowledge of common defensive security controls and their usages

Minimum Qualifications:

• 4+ years experience in Information Technology or 2+ years of experience working in incident detection and response
• Experience solving technical challenges
• A general understanding of computer systems and how they operate
• Familiarity with cloud environments such as AWS, Azure, and GCP
• Ability to break down large-scale technical challenges into the necessary subset of tasks that need to be accomplished
• Related certifications such as Vendor technology certifications, Blue Team and CompTIA Security+ a plus

Salary range: $100,000 - $130,000 USD

Fullsteam supports an inclusive workplace that values diversity of thought, experience, and background. Fullsteam is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, ancestry, age, physical or mental disability, sex, sexual orientation, gender identity/expression, pregnancy, veteran status, marital status, creed, status with regard to public assistance, genetic status or any other status protected by federal, state, or local law.