Lead Cybersecurity Analyst

Who we are:
Through a partnership-based approach, Coterie helps insurance professionals unlock untapped revenue in the small commercial space. With an innovative quoting platform that delivers accurate pricing and bindable quotes in less than one minute, Coterie makes small business insurance effortless.  

We are on a mission to build and foster a world-class team to bring speed, simplicity, and service to commercial insurance. We value integrity, humility, passion, and intelligence. If you want to push yourself and reshape a $200B+ market, we’re excited to talk to you!

What will the Lead Cybersecurity Analyst do?
Coterie’s Security team is hiring a Lead Cybersecurity Analyst (100% Remote!) to lead the organization’s incident response program. This role will be responsible for owning day-to-day security operations, threat detection, and incident response. You will manage and optimize core security tools and build automations to enhance overall operational efficiency. This role works closely with others across the broader security organization. If you are passionate about enabling the business to operate in a secure manner, enjoy wearing different “hats” and working in a fast-paced environment then this role is for you!

As the Lead Cybersecurity Analyst, you'll be able to: 

• Perform security monitoring and analysis to detect and investigate security indcidents
• Manage and tune our SIEM, including rule/detection creation
• Build out automations to create efficiencies across the security operations function, especially at the triage level.
• Work with internal and external teams to determine the impact caused by detected intrusions, identify how an intrusion occurred, perform root cause analysis, and assist in recovery efforts
• Act as a SME for security operations initiatives that contribute to greater visibility, improved processes, and maximum value from our toolset
• Provide reporting to help management understand current risk levels
• Develop and maintain metrics that matter and communicate those through dashboards and reporting to leadership
• Create and maintain IR playbooks
• Act as incident commander during incidents and lead incident response tabletop exercises
• Review data from various sources and assess cyber intelligence to support in-depth analysis of various threats
• Support compliance and audit requirements related to security operations
• Identify and improve upon process and technology gaps within the incident response program and security posture overall
• Partner with other teams to continue to mature security across the organization
• Take on additional assignments aligned with organizational priorities
• Availability to be on call every other week to address critical alerts

What we are looking for:  

• 5+ years in cybersecurity and 3+ years in Azure cloud-native environments
• Advanced understanding of incident response and investigations
• Experience monitoring a SIEM or equivalent, investigating incidents, and utilizing threat intelligence to enhance detections
• Advanced log analysis (KQL)
• Experience analyzing network traffic (packets) and investigating phishing and business email compromise
• Self-motivated, enthusiastic, detail oriented, skilled in intelligent multi-tasking, and adaptable
• Able to evaluate risk and make risk-based recommendations for escalation or de-prioritization of remediation/mitigation efforts.
• Exceptional written and verbal communication

What will make you stand out:

• Microsoft 365 including Office 365 security experience
• Container security experience (Docker, Kubernetes, etc)
• Powershell experience
• Security (e.g. CySA+, CISSP, GIAC, etc.)  or Cloud Certifications (e.g. Azure, CCSP)

Our interview process:

Our hiring process generally consists of 4 phases. The goal is to provide an opportunity for us to learn more about our candidates while allowing them to get to know us as well!

• Phase 1: Qualified candidates will first meet with a member of our People Operations team for a phone interview.  This discussion is a high-level conversation to understand more about your background and interests an