Principal Information Security Analyst

About the position

Benevity is looking for a Principal Information Security Analyst to join our combined Security and Fraud Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management. You will also play a collaborative role in supporting fraud operations alongside our Senior Fraud Analyst. This role is ideal for someone with deep hands-on experience in security operations who thrives in leading investigations, refining processes, developing talent, and driving measurable improvements in operational maturity. You will serve as both a senior escalation point and a coach, helping elevate the team’s ability to respond to security and fraud-related threats in a cloud-native environment.

Responsibilities

  • Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, and cloud-native platforms
  • Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
  • Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
  • Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
  • Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
  • Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
  • Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
  • Provide oversight and coordination with the Senior Fraud Analyst, including reviewing trends, supporting cross-functional investigations, and aligning response efforts where fraud and cyber threats intersect
  • Support the development, tracking, and reporting of KPIs and metrics across both security and fraud operations to measure and improve team performance
  • Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
  • Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

Requirements

  • 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
  • Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, and cloud-native logging platforms
  • Familiarity with MDR service models and hands-on experience validating escalated alerts
  • Exposure to fraud detection tooling or operational workflows, and the ability to provide oversight and collaborative support
  • Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
  • Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
  • Experience developing or refining operational playbooks, triage guides, and incident workflows
  • Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
  • Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
  • A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
  • Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
  • Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
  • A passion for teaching and mentoring others, helping team members grow their skills and confidence

Nice-to-haves

  • Preferred certifications include GCIH, GCFA, OSCP, CISSP, or CFE

Benefits

  • Innovative work
  • Growth opportunities
  • Caring co-workers
  • A chance to do work that fills us with a sense of purpose
  • Flexible hybrid approach to where we work
Back to blog

Common Interview Questions And Answers

1. HOW DO YOU PLAN YOUR DAY?

This is what this question poses: When do you focus and start working seriously? What are the hours you work optimally? Are you a night owl? A morning bird? Remote teams can be made up of people working on different shifts and around the world, so you won't necessarily be stuck in the 9-5 schedule if it's not for you...

2. HOW DO YOU USE THE DIFFERENT COMMUNICATION TOOLS IN DIFFERENT SITUATIONS?

When you're working on a remote team, there's no way to chat in the hallway between meetings or catch up on the latest project during an office carpool. Therefore, virtual communication will be absolutely essential to get your work done...

3. WHAT IS "WORKING REMOTE" REALLY FOR YOU?

Many people want to work remotely because of the flexibility it allows. You can work anywhere and at any time of the day...

4. WHAT DO YOU NEED IN YOUR PHYSICAL WORKSPACE TO SUCCEED IN YOUR WORK?

With this question, companies are looking to see what equipment they may need to provide you with and to verify how aware you are of what remote working could mean for you physically and logistically...

5. HOW DO YOU PROCESS INFORMATION?

Several years ago, I was working in a team to plan a big event. My supervisor made us all work as a team before the big day. One of our activities has been to find out how each of us processes information...

6. HOW DO YOU MANAGE THE CALENDAR AND THE PROGRAM? WHICH APPLICATIONS / SYSTEM DO YOU USE?

Or you may receive even more specific questions, such as: What's on your calendar? Do you plan blocks of time to do certain types of work? Do you have an open calendar that everyone can see?...

7. HOW DO YOU ORGANIZE FILES, LINKS, AND TABS ON YOUR COMPUTER?

Just like your schedule, how you track files and other information is very important. After all, everything is digital!...

8. HOW TO PRIORITIZE WORK?

The day I watched Marie Forleo's film separating the important from the urgent, my life changed. Not all remote jobs start fast, but most of them are...

9. HOW DO YOU PREPARE FOR A MEETING AND PREPARE A MEETING? WHAT DO YOU SEE HAPPENING DURING THE MEETING?

Just as communication is essential when working remotely, so is organization. Because you won't have those opportunities in the elevator or a casual conversation in the lunchroom, you should take advantage of the little time you have in a video or phone conference...

10. HOW DO YOU USE TECHNOLOGY ON A DAILY BASIS, IN YOUR WORK AND FOR YOUR PLEASURE?

This is a great question because it shows your comfort level with technology, which is very important for a remote worker because you will be working with technology over time...