Security Analyst

We are looking for a Security Analyst to act as the first line of defense for user-focused security at Syringa. In this role, you will triage phishing and suspicious email reports, respond to user-related security incidents, and analyze user behavior to spot risk activity before it becomes a problem. The ideal person for this role is someone who is detail-oriented, curious, and is comfortable with working directly with employees across the organization. *Responsibilities* *Email and Phishing Report Response:* · Monitor ticketing queue for user-submitted phishing reports, and triage each within defined response times. · Analyze suspicious messages, including headers, sender reputation, links, and attachments, using approved tools and sandboxes. · Remove malicious messages from user mailboxes and block senders and domains *Security Incident Response:* · Respond to user-related incidents such as compromised accounts, malware alerts, lost or stolen devices, and suspicious sign-ins. · Follow incident response playbooks for containment, including password resets, session revocation, and device isolation. · Document incidents, actions taken, and timelines in the ticketing system. · Escalate complex or high-severity incidents to senior staff and support them during investigations. *User Behavior Analysis:* · Review identity and access alerts, such as impossible travel, risky sign-ins, and unusual MFA activity. · Monitor data loss prevention and sensitivity labeling alerts for risky handling of confidential information. · Identify trends in user risk and recommend targeted follow-up or training. · Assist with periodic access reviews and account hygiene checks. *Security Awareness and Continuous Improvement:* · Support phishing simulation campaigns and security awareness training. · Help write and maintain playbooks, knowledge base articles, and user-facing security guidance. · Suggest improvements to detection rules, processes, and tools based on lessons learned.