Senior Security Analyst

Senior Security Analyst WHO IS FLOCK? Flock is the leading safety technology platform, helping communities thrive by taking a proactive approach to crime prevention and security. Our hardware and software suite connects cities, law enforcement, businesses, schools, and neighborhoods in a nationwide public-private safety network. Trusted by over 5,000 communities, 4,500 law enforcement agencies, and 1,000 businesses, Flock delivers real-time intelligence while prioritizing privacy and responsible innovation. We’re a high-performance, low-ego team driven by urgency, collaboration, and bold thinking. Working at Flock means tackling big challenges, moving fast, and continuously improving. It’s intense but deeply rewarding for those who want to make an impact. With nearly $700M in venture funding and a $7.5B valuation, we’re scaling intentionally and seeking top talent to help build the impossible. If you value teamwork, ownership, and solving tough problems, Flock could be the place for you. THE OPPORTUNITY We are looking for a Senior Security Analyst to serve as a cornerstone of our Security Operations. At Flock, security is the foundation of the trust we build with the public. As someone with over 5 years of experience in the trenches of Security Operations or Incident Response, you will focus on defending the data that helps solve crimes and save lives. This is a "builder" role. You won’t just be monitoring dashboards; you will be responsible for maturing our detection pipeline, automating our response capabilities, and ensuring our rapidly scaling cloud infrastructure remains a fortress. You will sit at the intersection of engineering and operations, working to ensure that as Flock grows, our security posture doesn't just keep up—it leads the way. You will report to the Manager of Security Operations. Success in this role will be measured by your ability to reduce MTTR (Mean Time to Respond), the efficacy of your custom detection logic, and your success in automating manual security workflows to allow our team to scale. THE SKILLSET Leadership and Management: - Advanced Incident Investigation: Lead deep-dive investigations into complex security incidents escalated from Tier 1, utilizing SIEM, EDR, and Cloud telemetry to determine scope and impact. - Containment & Remediation: Execute immediate containment strategies (e.g., host isolation, account resets, firewall blocks) and coordinate with IT and Engineering teams for full-system remediation across multiple operating systems (Windows, MacOS, Linux) - Post-Incident Analysis: Author comprehensive After Action Reports (AARs) that identify root causes and provide actionable recommendations to senior Cybersecurity leadership to prevent recurrence. - Mentorship: A passion for raising the bar for the entire team by mentoring junior analysts and conducting security awareness sessions across the company. Technical Expertise: - Cloud Defender: Deep technical expertise in cloud security services across a multi-cloud environment – solid understanding of cloud-native security logging and identity management, as well as experience in responding to cloud infrastructure security alerts (compute, containers, serverless, networking). - Detection Engineering: Extensive experience building and tuning high-fidelity alerts in modern SIEMs (e.g., Panther, Snowflake, or Splunk) and EDR platforms (e.g., SentinelOne, Crowdstrike). - Automation First: Strong proficiency in Python or Go to build "security-as-code" tools, automate repetitive SOC tasks, and integrate disparate security APIs. - Unique Experience: DFIR across Android IoT devices, or OT systems and networks Operational & Collaboration Skills: - Collaboration: Forge partnerships across Cybersecurity, Engineering, and Product teams to help coordinate actions as part of responding to security events–from exercise driven scenarios to real-world events. - “Own It” Mindset: You don't wait for a ticket to fix a gap; you identi ... (truncated, view full listing at source)