Description:
The Senior Cybersecurity Analyst is a hands-on technical member of the Cybersecurity team, responsible for helping operate and strengthen Dialogue’s core security capabilities. You will report to the Cybersecurity Team Lead and work closely with other security team members, IT, DevOps, Engineering, Legal, Compliance, and business stakeholders.
Your focus will be the day-to-day systems and processes that help Dialogue identify, understand, and respond to security risk. This includes security monitoring and logging, vulnerability management, security tool administration, application security support, incident investigation, operational reporting, and the development of practical security processes and runbooks.
This is a role for someone who takes ownership of technical security work and follows it through to resolution. You will investigate alerts and findings, improve detections and tooling, automate repetitive workflows, and help teams understand what needs to be fixed and why. You will be expected to work independently while collaborating with others when the work crosses systems, teams, or areas of expertise.
You do not need to have every process fully defined before getting started. You are comfortable working in an evolving security environment, identifying gaps, bringing structure to incomplete workflows, and helping build more consistent and mature security practices over time. You know when to make a pragmatic technical decision and when to escalate higher-risk architectural, business, or strategic concerns.
What You'll Be Doing
- Own and improve security monitoring: Manage and enhance our SIEM and logging environment, onboard new data sources, and ensure we have the visibility needed to detect and investigate threats.
- Strengthen detection and response: Triage alerts, investigate suspicious activity, tune detections, and reduce false positives. Build and maintain clear runbooks to support consistent and efficient response.
- Support incident investigations: Assist with investigations, evidence collection, and analysis, helping the team respond effectively when incidents occur.
- Drive meaningful security improvements: Identify recurring issues across incidents and vulnerabilities, and work with teams to address root causes and strengthen controls.
- Provide application security guidance: Partner with developers to review findings, prioritize risks, and deliver practical, actionable remediation advice.
- Contribute to security reviews: Participate in application and project reviews, helping teams identify risks and make informed security decisions.
- Operate and improve security tools: Support day-to-day administration, integrations, and enhancements of security platforms, including automation where it adds value.
- Collaborate across teams: Work closely with IT, DevOps, Engineering, and business stakeholders to investigate issues, communicate risks, and drive work to completion.
- Help mature security practices: Contribute to building scalable processes, documentation, and standards as the security program evolves.
We'd love to hear from you if you have
- 3+ years of professional experience in cybersecurity or a related technical role, with hands-on experience in security monitoring, vulnerability management, incident response, security tooling, or cloud security.
- Experience with the technologies and workflows that support modern security operations, including cloud platforms such as AWS, Git, CI/CD, and infrastructure-as-code tools such as Terraform.
- Worked with application-security testing tools or secure-development practices and are comfortable helping teams understand and address security findings.
- Used Python, PowerShell, Bash, or another scripting language to automate operational tasks and improve security workflows.
- Integrated security tools or platforms using APIs, scripts, or workflow automation.
- Experience with endpoint security, identity, privileged access management, or cloud security platforms.
- Supported security incident investigations through alert analysis, technical troubleshooting, evidence collection, or coordination with other teams.
- Created, tuned, or maintained SIEM detections, detection-as-code, or version controlled detection logic.