Security Analyst, Minted

• This is an ideal role for an experienced analyst who enjoys hands-on technical work and wants to contribute across multiple areas of the security program
• Bachelor’s degree in Cybersecurity, Computer Science, or related field, or equivalent experience
• 2–5 years of experience in a security operations, incident response, or IT security role
• Solid understanding of cybersecurity fundamentals (CIA Triad, defense-in-depth, least privilege, MITRE ATT&CK)
• Hands-on experience with:
• SIEM tools (Splunk, Elastic, or similar)
• EDR platforms (CrowdStrike, SentinelOne, etc.)
• Cloud monitoring (AWS GuardDuty, Security Hub)
• Vulnerability management tools (Qualys, Semgrep, or equivalent)
• Identity management systems (Okta, Google Workspace, AWS SSO)
• Strong analytical, written, and communication skills

Desirable

• As a Security Analyst II/III at Minted, you’ll play a key role in protecting the systems and data that power our global artist community and e-commerce customers
• You’ll monitor our environment, respond to security incidents, analyze vulnerabilities, and support ongoing improvements to our cloud and enterprise security posture
• This role blends day-to-day security operations with opportunities to take technical ownership of investigations, tuning, and automation projects that enhance Minted’s overall security resilience
• Monitor alerts from SIEM, EDR, and cloud monitoring tools for potential security events
• Conduct in-depth investigations to determine root cause, impact, and scope of incidents
• Own incident response for medium and high-severity cases — including containment, remediation, and post-incident analysis
• Develop and refine detection logic and alerting thresholds to improve signal quality
• Maintain detailed documentation of investigations, incidents, and lessons learned
• Perform regular vulnerability scans and analyze results to prioritize risk-based remediation
• Collaborate with system and application owners to ensure timely patching and configuration management
• Identify recurring issues or trends and recommend ways to reduce overall exposure
• Validate remediations and track closure across multiple business units
• Monitor Minted’s AWS environments using Security Hub, GuardDuty, and other native tools
• Review and triage application security findings from static and dynamic scans (SAST/DAST)
• Work with development and DevOps teams to validate and remediate vulnerabilities
• Contribute to improving cloud security visibility, automation, and alert coverage
• Support user lifecycle management and least-privilege enforcement across Okta, Google Workspace, and AWS SSO
• Conduct periodic access reviews and investigate anomalous authentication or access patterns
• Assist in implementing automation and process improvements for account provisioning and review
• Support evidence collection for SOC 2 and PCI DSS audits
• Participate in risk assessments and help ensure mitigation plans are completed
• Identify opportunities to enhance detection, response, and automation capabilities
• Partner with IT and engineering teams to improve monitoring, logging, and visibility
• Participate in evaluating and deploying new security tools and integrations