Senior Information Security Analyst

Our secret to leading the way in hospitality? We put our people first!

At Shake Shack, our mission is to Stand For Something Good in all that we do. From our teams to our neighborhoods, we're committed to always doing the right thing. As one of the fastest-growing hospitality brands, we're all about crafting unforgettable experiences for our guests. We offer endless learning opportunities and the chance to make a lasting impact on our business, restaurants, and communities. As a member of the #ShackFam, you’ll have access to hands-on mentorship, training, and growth potential, all in a fun and inclusive environment.

Join us and Be a Part of Something Good.

Job Summary

The Senior Information Security Analyst is a hands-on information security role which includes monitoring and support of security systems and services. This individual will serve as the initial be a key participant in the corporate incident response plan.

Job Responsibilities and Duties

• Support Program Leadership: Collaborate closely with the program director to execute and enhance the organization’s security strategy. Provide expert support in deploying and managing advanced security solutions, such as Endpoint Protection, SIEM, and the Microsoft security toolset. Ensure alignment with organizational objectives and contribute to strategic decision-making by delivering insights on security risks, vulnerabilities, and mitigation strategies.
• Advanced Risk Assessment: Proactively assess potential risks and vulnerabilities, providing actionable insights to the director and driving remediation efforts under their guidance.
• Collaborative Security Integration: Work with global IT teams and business stakeholders to implement security best practices in IT processes, ensuring seamless alignment with organizational goals.
• Incident Response Execution: Act as part of the primary response team for security incidents, performing investigations, forensic analysis, and root cause identification. Provide escalation support to junior analysts and contribute to post-incident process improvements.
• Reporting and Metrics: Track, analyze, and report on IT security metrics, creating actionable insights to support the program director’s strategic decision-making and communication with senior leadership.
• Mentorship and Support: Provide mentorship to junior analysts, helping them develop their skills while supporting the program director in fostering a culture of continuous improvement.
• Security Process Optimization: Assist in refining security processes, such as incident response workflows, playbooks, and vulnerability management procedures, ensuring operational efficiency.
• Advanced Query Development and Tool Customization: Design and implement comprehensive queries within security tools, such as Microsoft Sentinel, to enhance threat detection and incident analysis. Develop advanced customizations, dashboards, and automation workflows to optimize the effectiveness and efficiency of the security toolset, aligning with organizational security objectives.

Knowledge, Skills, Abilities

• In-depth understanding of Security Operations Center (SOC) workflows and incident response frameworks.
• Expertise in Microsoft security tools, including Microsoft Defender, Sentinel, Intune, and Azure AD Security.
• Advanced skills in creating custom queries, dashboards, and automations within security tools.
• Proficiency in analyzing complex security alerts, correlating data across multiple sources, and identifying actionable insights.
• Excellent verbal and written communication skills, with the ability to convey technical information to both technical and non-technical stakeholders.
• Strong interpersonal skills to collaborate effectively with global IT teams, business stakeholders, and external vendors.
• Knowledge of automation and scripting (e.g., PowerShell, KQL) to enhance operational efficiency.
• Commitment to continuous learning and staying updated on the latest security technologies, tools, and best practices.

Education Requirements: High School Diploma or Equivalent

Cybersecurity Work Experience: 4-6 years

Supervisory Experience:   1-3 years

Benefits at Shake Shack:

A work environment where you can come as you are, share your ideas, have fun, and work collaboratively:

• Weekly Pay and Performance bonuses

• Shake Shack Meal Discounts

• Exclusive corporate discounts for travel, electronics, wellness, leisure activities and more

• Medical, Dental, and Vision Insurance*

<