Senior Cloud Incident Response Analyst

Paylocity is an award-winning provider of cloud-based HR and payroll software solutions, offering the most complete platform for the modern workforce. The company has become one of the fastest-growing HCM software providers worldwide by offering an intuitive, easy-to-use product suite that helps businesses automate and streamline HR and payroll processes, attract and retain talent, and build a strong workplace culture.

While traditional HR and payroll providers automate basic HR processes such as payroll and benefits administration, Paylocity goes further by developing tools that HR and businesses need to compete for talent and deliver against the expectations of the modern workforce.

We give our employees what they need to succeed, including great benefits and perks! We offer medical, dental, vision, life, disability, and a 401(k) match, as well as perks that support you, your family, and your finances. And if it’s career development you desire, we provide that, too! At Paylocity, people matter most and have always been at the heart of our business.

Help Paylocity enhance communication and enable employees to connect, collaborate, and create from anywhere with a position in Product & Technology!

Want to develop the strategies and principles needed to deliver compelling software? Join our team and help us enhance our all-in-one software platform, elevate our one-of-a-kind technology, and improve the employee experience.

Take your career to the next level at one of G2's Top 100 Software Companies. Explore our Product & Technology positions to see where you fit!

Description

The Senior Cloud DFIR (Digital Forensics and Incident Response) Analyst is responsible for understanding and providing appropriate surveillance and investigation of the critical cyber threats to Paylocity’s computing assets in the cloud as well as on prem. The Senior Cloud DFIR Analyst will leverage Cloud Monitoring, Logging and Security Incident Event Management (SIEM) systems to produce alerts, audit data and reporting to detect suspicious activity and will analyze the threat data to help the Information Security team to determine what response is appropriate. This position will lead Cloud Incident Responses to analyze and perform forensics analysis to help determine the root cause and recommend corrective measures.

Are you the teammate that we are looking for?

Who you are:

• Passionate about cloud information security and privacy
• A leader and mentor to develop and further the team’s skills and knowledge
• An evangelist regarding the importance of cloud information security
• Serve as an escalation point and cloud subject matter expert during incident investigations
• Perform root cause analysis to identify attack vector and provide mitigation recommendations to prevent future attacks
• Create detailed incident reports and create/improve playbooks, SOPs, and cloud security documentation
• Well versed in security issues affecting financial service organizations as well as widespread data center operations, such as cloud and mobile technology solutions
• Assist with developing advanced cloud-centric cybersecurity capabilities and programs
• Committed to an ongoing partnership with other high-profile groups within the organization (e.g. software development, infrastructure, cloud architecture, security engineering) to insure information security objectives are being understood and embraced in our cloud environments
• Established presence within information security communities as an expert in cloud DFIR
• Ability to anticipate problems and recommend decisive action
• Excellent communication skills (both written and oral)
• Ability to work collaboratively across the organization
• Be available for on-call rotation and off-hours response actions as needed
• Values their role as an adviser and business enabler more than their role as a rule enforcer
• Self-driven, creative, and resourceful

How we work:

• Casual, collaborative environment which embraces and operates under our shared principles
• Complete transparency with open, honest discussions about our progress
• Close working relationships across all areas of the organization
• Focus on outcomes and learning

What we offer:

• A strong commitment to Information Security both financially and organizationally
• An existing talented and passionate Information Security team
• The chance to meaningfully contribute to a vast market opportunity
• A collaborative environment where our security team is empowered to help steer the direction of the team
• A place to contribute your security knowledge company-wide through forum panels with our product development team
• Annual training allowance to learn new things and bring it back to the team.
• Flexible remote work schedule

Requirements

Required Experience:

• Bachelor's Degree in InfoSec, Computer Science, or a related preferred
• Minimum of 5 years in a security operations center and/or Incident Response capacity
• Minimum of 3 years hands-on experience in cloud (AWS preferred) DFIR
• Expertise with cloud-based technologies (AWS, Azure, etc.) and SaaS applications
• Strong understanding of adversarial tactics and ability to take strategy to implementation/action
• Experience with Purple Teaming and Threat Hunting in the cloud
• Strong leadership and mentorship qualities to further the Security Operation team’s knowledge and skills
• Experience collecting data from multiple sources and consolidating results into analytic models, alerts, and reports
• Experienced meeting corporate security policies and regulatory requirements
• Solid understand of NIST Cybersecurity framework
• Strongly prefer a relevant security certification such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• GIAC Security Expert (GSE)
• GIAC Systems and Network Auditor (GSNA)
• Computer Security Incident Handler (CSIH)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Forensic Analyst (GCFA)
• Certified Ethical Hacker (CEH)

Paylocity is an equal-opportunity employer. Paylocity is committed to the full inclusion of all individuals. We recruit, train, compensate, and promote regardless of race, religion, color, national origin, sex, disability, age, veteran status, and other protected status as required by applicable law. At Paylocity, we believe diversity makes us better.

We embrace and encourage our employees’ differences in age, culture, ethnicity, family or marital status, gender identity or expression, language, national origin, physical and mental ability, political affiliation, race, religion or spiritual belief, sexual orientation, socio-economic status, veteran status, and other characteristics that make our employees unique. We actively cultivate these differences through our employee resource groups (ERGs), employee experiences, perspectives, talents, and approaches to drive innovation in the software and services we provide our customers.

We comply with federal and state disability laws and make reasonable accommodations for applicants and employees with disabilities. To request reasonable accommodation in the job application or interview process, please contact accessibility@paylocity.com.

This role can be performed from any office in the US. The pay range for this position is $139,500 - $186,685 /yr; however, base pay offered may vary depending on job-related knowledge, skills, and experience. This position is eligible for an annual bonus and restricted stock unit grant based on individual performance in addition to a full range of benefits outlined here. This information is provided per the relevant state and local pay transparency laws for the location in which this position will be performed. Base pay information is based on market location. Applicants should apply via www.paylocity.com/careers.

#LI-Remote