Security Operations Analyst at Litera in Denver, CO

Summary: Litera is a leader in legal tech innovation, seeking to enhance cybersecurity operations through the hiring of a Security Operations Analyst. This role involves monitoring security threats, managing vulnerabilities, and collaborating with various teams to ensure a robust security posture. Responsibilities: - Monitor security events across on-premises and multi-cloud environments (AWS, Azure, etc.) using advanced SIEM/XDR tools - Leverage AI-driven analytics to correlate alerts and reduce false positives - Triage, investigate, and escalate security incidents using automated workflows (SOAR) where applicable - Coordinate incident response efforts with IT, DevOps, and cloud engineering teams - Assist in root cause analysis and continuously update incident response playbooks - Assess, remediate, or escalate vulnerabilities across cloud and on-prem assets - Prioritize threats using threat intelligence feeds and AI-based scoring - Implement security controls across hybrid environments, including cloud-specific configurations - Enforce identity and access management policies, network segmentation, and encryption standards - Align controls with Zero Trust principles and document changes for audit traceability - Collaborate with IT, DevOps, Cloud Infrastructure, and Software Engineering teams - Ensure ongoing compliance with ISO 27001, SOC 2, and related frameworks - Maintain audit readiness through evidence collection and periodic self-assessments - Support remediation of compliance gaps and policy updates - Stay current on cybersecurity trends, emerging threats, and new technologies - Recommend enhancements to security policies and procedures - Contribute to security initiatives such as cloud posture improvements, automation of incident response, and deployment of next-gen security platforms - Collaborate with stakeholders to ensure alignment with business objectives Required Qualifications: - Bachelor's degree in Cybersecurity, Computer Science, or related field (or equivalent experience) - 1–2 years cybersecurity or IT, SOC exposure preferred - Experience operating in cloud environments (AWS, Azure, etc) - Familiarity with a SIEM & SOAR platform; Familiarity with Sentinel/Defender a plus - Basic scripting experience; Python/PowerShell a plus - Awareness of security frameworks and standards (ISO 27001, SOC 2, NIST CSF) - Strong communication and teamwork skills - Ability to explain technical issues to non-technical stakeholders - Unyielding sense of curiosity and a strong desire to get to the “why” - Challenges assumptions and approaches problems from unique perspectives when needed - High adaptability and continuous learning mindset - Passion for spreading security awareness and best practices Preferred Qualifications: - Preferred certifications: CompTIA Security+, CEH, CISSP, Any cloud security Required Skills: Cybersecurity, Security Operations Center (SOC), Cloud Environments - AWS, Cloud Environments - Azure, SIEM platforms, SOAR platforms, Python scripting, PowerShell scripting, Security Frameworks - ISO 27001, Security Frameworks - SOC 2, Security Frameworks - NIST CSF, Vulnerability Management, Incident Response, Identity, Access Management, Network Segmentation, Encryption Standards, Zero Trust Security, Threat Intelligence, CompTIA Security+, Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Cloud Security Benefits: Health insurance, Retirement savings plans, Generous paid time off, Medical, dental, and vision coverage, A 401(k) with company match, Incentive and recognition programs