Security Analyst

About PDQ

PDQ, founded in Salt Lake City, UT, USA, makes device management simple, secure, and Pretty Damn Quick through our products Deploy, Inventory, Connect, Detect, SimpleMDM and SmartDeploy. IT teams use our products to reduce complexity, improve efficiency, and enhance control in their unique environments. We are backed by TA Associates and Berkshire Partners, top-tier global private equity firms.

PDQ's Core Values: Honesty, Ownership, Collaboration and Improvement 

Job Description:

Before you apply, please note

• This is an hybrid role and open to candidates in Salt Lake City, UT or within commuting distance of our South Salt Lake City headquarters. 

As a Security Analyst at PDQ, you will play a key role in protecting our organization’s systems, networks, and data from security threats. You will monitor and investigate security incidents, identify vulnerabilities, and collaborate with IT and engineering teams to strengthen our defenses. This role requires a balance of technical expertise, analytical thinking, and proactive problem-solving. 

In this role, you will collaborate with PDQ’s Operational Security team to:  

• Ensure proper implementation of security practices, such as vulnerability management 
• Support achievement of meaningful industry certifications (e.g. ISO 27001, SOC2) 
• Manage prioritization of security related activities 
• Monitor threat landscape (e.g. CISA feeds, industry publications, news, etc.) and engage with Product, engineering, and infrastructure Leaders to ensure adequate controls are in place 
• Collaborate with infrastructure teams to ensure security controls are implemented in production environments 
• Automate security checks and scans  as well as help prioritize and remediate findings. 
• Assist with in response and recovery related to security incidents or breaches 
• Monitor security alerts and logs to detect potential threats, suspicious activity, or breaches. 
• Perform incident triage, investigation, and response, escalating when appropriate. 
• Conduct vulnerability assessments, risk analysis, and remediation follow-up. 
• Assist with security audits, compliance requirements, and reporting. 
• Support the development and implementation of security policies, procedures, and controls. 
• Research emerging threats, attack vectors, and best practices to improve organizational security posture. 
• Provide guidance and training to staff on cybersecurity awareness and safe practices. 
• Engage in threat hunting activities both in PDQ products and within PDQ networks. 
• Monitor and stop fraud and abuse of our products. 

Who you are:

• Solid understanding of web and mobile application security across the SDLC 
• Strong experience with secure cloud architecture and design 
• Experience with a variety of security testing tools and best practices 
• Strong experience with threat modeling and analysis 
• Experience implementing and securing cloud storage and cloud infrastructure 
• Understanding of common threats and attacks, as well as security protocols and standards 
• Work collaboratively across multiple departments 
• Handle sensitive and confidential information 
• Apply strong analytical and problem-solving skills 
• Exercise curiosity and seek opportunities for continued learning  
• Think creatively and outside the box  
• Stay up to date on latest security trends and technologies  
• Communicate concepts to technical and non-t