Senior Security Analyst

Coalition is the world's first Active Insurance provider designed to help prevent digital risk before it strikes. Founded in 2017, Coalition combines comprehensive insurance coverage and innovative cybersecurity tools to help businesses manage and mitigate potential cyberattacks.

Opportunities to make an impact with bold thinking are real—and happening daily at Coalition.

The Coalition Security team is a group of specialists across multiple cybersecurity domains, including Threat Intelligence, Cyber Risk Management, and Defensive Security Controls. As a Senior Security Analyst, your mandate is to protect our customers from loss.

In this role, you’ll analyze data breaches and cyber insurance claims events, conduct client security gap analyses, and advise CISOs and security leaders on how to improve specific security controls. You will work across our customer base on topics ranging from security architecture and cloud security to data protection and compliance. You will also have the opportunity to partner with our product teams to codify security best practices into our underwriting algorithms, rating models, and risk management applications—directly shaping how we quantify and mitigate cyber risk at scale.

• Review and analyze the security posture of insureds and prospective insureds quickly and efficiently.

• Evaluate customer security programs, technologies, controls, and business environments; recommend and help develop enhancements to reduce risk.

• Analyze the root cause of cyber insurance claims and loss events, and identify ways to detect and mitigate exposures that could have prevented those claims.

• Triage security incidents and claims, understand root cause, and develop detection tradecraft informed by threat intelligence and real-world attacks.

• Provide practical, prioritized recommendations to help customers manage information security risk and strengthen their security programs.

• Track emerging security practices, threat trends, and vulnerabilities and contribute those insights to internal processes, playbooks, and product capabilities.

• Stay current on the regulatory landscape and industry standards (e.g., NIST, ISO, HIPAA, PCI) and interpret their implications for Coalition and our customers.

• Collaborate cross-functionally with underwriting, claims, product, and engineering teams to translate security insights into scalable solutions and customer value.

• 2–4 years of hands-on experience in security analysis, blue team/defensive security operations, and/or penetration testing/red team engagements.

• Deep understanding of the lifecycle of network threats, common attack vectors, and exploitation methods, including familiarity with intrusion set tactics, techniques, and procedures (TTPs).

• Strong knowledge of TCP/IP protocols, network analysis, and network/security applications, including log and network traffic capture and analysis.

• Experience with one or more vulnerability assessment and offensive security tools, such as Nmap, Nessus, Nexpose, Qualys, Burp Suite, Kali Linux, Metasploit, or similar.

• Working knowledge of industry-standard security and risk frameworks (e.g., NIST CSF, ISO 27001, HIPAA, PCI DSS).

• Clear, confident interpersonal communication skills (verbal and written), with the ability to translate technical concepts for non-technical audiences.

• Demonstrated ability to learn new technical concepts quickly and manage multiple tasks/projects in a fast-paced, dynamic environment.

• Bachelor’s degree