High Level Role Overview

Benevity is looking for a Principal Information Security Analyst to join our Security Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management.

This role is ideal for someone with deep hands-on experience in security operations who is also energized by the opportunity to work alongside AI. We are actively integrating AI tools into our SecOps practice to accelerate triage, investigation, detection engineering, and analyst productivity, and this role will play a meaningful part in shaping how we do that. You should be comfortable navigating AI tools, building your own skills with them, identifying practical use cases, and partnering with the team to put them into production.

You will serve as both a senior escalation point and a coach, helping elevate the team's ability to respond to threats in a cloud-native environment while modernizing how the work gets done.

What you'll do:

• Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, SIEM, and cloud-native platforms
• Lead and coordinate security incident response across the full lifecycle, from detection and containment through eradication, recovery, and lessons learned, serving as incident commander for significant events
• Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
• Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
• Identify, evaluate, and operationalize AI-assisted approaches to SecOps work, including AI-augmented triage, investigation, summarization, detection engineering, and reporting
• Build your own fluency with AI tooling and help the broader team develop the same skills, sharing patterns that work and being honest about ones that don't
• Apply a healthy degree of skepticism to AI outputs, validating findings and helping the team understand where AI assists the work and where human judgment still owns the decision
• Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
• Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
• Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
• Partner with our Senior Fraud Analyst on cross-functional investigations where fraud and cyber threats intersect, contributing SecOps expertise without owning the fraud function day-to-day
• Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
• Support the development, tracking, and reporting of KPIs and metrics to measure and improve team performance
• Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
• Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

What you'll bring:

• 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
• Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, SIEM, and cloud-native logging platforms
• Familiarity with MDR service models and hands-on experience validating escalated alerts
• Hands-on experience leading security incident response, including acting as incident commander, coordinating cross-functional responders, managing communications, and producing post-incident artifacts
• Practical experience using AI tools in a security or technical context, with a clear point of view on where they add value, where they fall short, and how to get them production-ready
• Curiosity and willingness to keep building AI skills as the tooling evolves, and an interest in helping teammates do the same
• Awareness of the security considerations that come with using AI tools in a SecOps environment (data handling, prompt hygiene, output validation)
• Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
• Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
• Experience developing or refining operational playbooks, triage guides, and incident workflows
• Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
• Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
• A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
• Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
• Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
• A passion for teaching and mentoring others, helping team members grow their skills and confidence
• Preferred certifications include GCIH, GCFA, OSCP, or CISSP

High Level Role Overview

Benevity is looking for a Principal Information Security Analyst to join our Security Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management.

This role is ideal for someone with deep hands-on experience in security operations who is also energized by the opportunity to work alongside AI. We are actively integrating AI tools into our SecOps practice to accelerate triage, investigation, detection engineering, and analyst productivity, and this role will play a meaningful part in shaping how we do that. You should be comfortable navigating AI tools, building your own skills with them, identifying practical use cases, and partnering with the team to put them into production.

You will serve as both a senior escalation point and a coach, helping elevate the team's ability to respond to threats in a cloud-native environment while modernizing how the work gets done.

What you'll do:

• Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, SIEM, and cloud-native platforms
• Lead and coordinate security incident response across the full lifecycle, from detection and containment through eradication, recovery, and lessons learned, serving as incident commander for significant events
• Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
• Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
• Identify, evaluate, and operationalize AI-assisted approaches to SecOps work, including AI-augmented triage, investigation, summarization, detection engineering, and reporting
• Build your own fluency with AI tooling and help the broader team develop the same skills, sharing patterns that work and being honest about ones that don't
• Apply a healthy degree of skepticism to AI outputs, validating findings and helping the team understand where AI assists the work and where human judgment still owns the decision
• Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
• Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
• Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
• Partner with our Senior Fraud Analyst on cross-functional investigations where fraud and cyber threats intersect, contributing SecOps expertise without owning the fraud function day-to-day
• Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
• Support the development, tracking, and reporting of KPIs and metrics to measure and improve team performance
• Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
• Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

What you'll bring:

• 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
• Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, SIEM, and cloud-native logging platforms
• Familiarity with MDR service models and hands-on experience validating escalated alerts
• Hands-on experience leading security incident response, including acting as incident commander, coordinating cross-functional responders, managing communications, and producing post-incident artifacts
• Practical experience using AI tools in a security or technical context, with a clear point of view on where they add value, where they fall short, and how to get them production-ready
• Curiosity and willingness to keep building AI skills as the tooling evolves, and an interest in helping teammates do the same
• Awareness of the security considerations that come with using AI tools in a SecOps environment (data handling, prompt hygiene, output validation)
• Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
• Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
• Experience developing or refining operational playbooks, triage guides, and incident workflows
• Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
• Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
• A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
• Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
• Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
• A passion for teaching and mentoring others, helping team members grow their skills and confidence
• Preferred certifications include GCIH, GCFA, OSCP, or CISSP

High Level Role Overview

Benevity is looking for a Principal Information Security Analyst to join our Security Operations team. In this senior-level role, you will provide technical leadership and operational oversight across a team of analysts responsible for threat detection, alert triage, incident response, and vulnerability management.

This role is ideal for someone with deep hands-on experience in security operations who is also energized by the opportunity to work alongside AI. We are actively integrating AI tools into our SecOps practice to accelerate triage, investigation, detection engineering, and analyst productivity, and this role will play a meaningful part in shaping how we do that. You should be comfortable navigating AI tools, building your own skills with them, identifying practical use cases, and partnering with the team to put them into production.

You will serve as both a senior escalation point and a coach, helping elevate the team's ability to respond to threats in a cloud-native environment while modernizing how the work gets done.

What you'll do:

• Lead daily Security Operations workflows, including triage, escalation, and resolution of alerts from core security tooling such as EDR, WAF, CSPM, SIEM, and cloud-native platforms
• Lead and coordinate security incident response across the full lifecycle, from detection and containment through eradication, recovery, and lessons learned, serving as incident commander for significant events
• Drive and oversee the triage, investigation, and resolution of alerts generated across all security tooling, not just those escalated by the MDR provider
• Act as the technical lead and escalation point for Managed Detection and Response (MDR) activities, ensuring timely review and validation of escalated alerts
• Identify, evaluate, and operationalize AI-assisted approaches to SecOps work, including AI-augmented triage, investigation, summarization, detection engineering, and reporting
• Build your own fluency with AI tooling and help the broader team develop the same skills, sharing patterns that work and being honest about ones that don't
• Apply a healthy degree of skepticism to AI outputs, validating findings and helping the team understand where AI assists the work and where human judgment still owns the decision
• Develop and continuously refine incident response processes, detection logic, and triage playbooks to improve clarity and effectiveness
• Oversee the vulnerability management lifecycle, ensuring timely identification, prioritization, remediation tracking, and stakeholder coordination
• Collaborate with GRC, Product Security, DevOps, and Infrastructure teams to improve detection coverage, alert fidelity, and log quality
• Partner with our Senior Fraud Analyst on cross-functional investigations where fraud and cyber threats intersect, contributing SecOps expertise without owning the fraud function day-to-day
• Serve as a subject matter expert in cloud-native security operations with strong understanding of containerized and API-driven environments
• Support the development, tracking, and reporting of KPIs and metrics to measure and improve team performance
• Conduct post-incident reviews and root-cause analysis, driving preventive control enhancements
• Mentor junior and mid-level analysts, providing feedback, coaching, and opportunities for growth

What you'll bring:

• 7+ years of experience in information security or security operations, with at least 2 years in a team lead or senior analyst capacity
• Proven experience triaging and responding to alerts across a broad suite of tools including CSPM, WAF, EDR, SIEM, and cloud-native logging platforms
• Familiarity with MDR service models and hands-on experience validating escalated alerts
• Hands-on experience leading security incident response, including acting as incident commander, coordinating cross-functional responders, managing communications, and producing post-incident artifacts
• Practical experience using AI tools in a security or technical context, with a clear point of view on where they add value, where they fall short, and how to get them production-ready
• Curiosity and willingness to keep building AI skills as the tooling evolves, and an interest in helping teammates do the same
• Awareness of the security considerations that come with using AI tools in a SecOps environment (data handling, prompt hygiene, output validation)
• Demonstrated ability to work independently, while recognizing when to seek input or escalate appropriately
• Strong critical thinking and communication skills with the ability to analyze complex data, challenge assumptions, and drive resolution
• Experience developing or refining operational playbooks, triage guides, and incident workflows
• Deep understanding of cloud security best practices, threat detection, and modern attacker tactics, techniques, and procedures
• Familiarity with common security frameworks such as NIST CSF, CIS Controls, and ISO 27001
• A strong sense of ownership and accountability, with the ability to act as a self-starter who can lead initiatives from concept to completion
• Demonstrated ability to collaborate across technical and non-technical teams to drive effective outcomes
• Experience fostering a positive and inclusive team environment, with a focus on team building, talent development, and shared success
• A passion for teaching and mentoring others, helping team members grow their skills and confidence
• Preferred certifications include GCIH, GCFA, OSCP, or CISSP

As a senior technology leader, you will help build our technology platform to enable 10 million change-makers to deliver a billion acts of goodness by 2025. We seek a platform-first Architect to lead enterprise patterns for reliable, governed, AI-driven, and cost-effective solutions at scale across our technology portfolio. You will design how data flows across the company, from ingestion to consumption, while ensuring our AI systems are secure, auditable, and maintainable. This role requires practical systems thinking and the ability to influence senior engineers and leadership toward consistent, enterprise-wide architecture outcomes that align our data and AI strategy with broader business goals.

If you're passionate about leveraging modern technology, data and AI for positive impact and eager to contribute to a mission-driven organization, we want to hear from you.

What you will do:

• Develop and maintain end-to-end tracks with our data and AI focus technology strategy and architectural portfolio
• Mentor engineers and technical leadership by providing clear patterns, ensuring adherence to architectural patterns, and offering hands-on guidance for complex implementations
• Lead architecture decisioning through Architecture Decision Records (ADRs), standards, and design reviews
• Oversee architectural reviews, code reviews, and system performance analysis to ensure quality standards and sustainable delivery momentum
• Foster a culture of collaboration, knowledge sharing, and continuous learning through mentorship, team collaboration, and workshops
• Enable governed data consumption through clear data contracts, curated datasets, and consistent serving patterns including domain marts
• Standardize end-to-end data flow patterns including ingestion, transformation, storage, serving, and retirement with repeatable templates
• Set platform standards for orchestration and reliability including SLAs, retries, idempotency, backfills, runbooks, and operational dashboards
• Establish enterprise data quality practices including critical data elements, quality rules, validation layers, monitoring, and issue triage workflows
• Drive governance-by-design by embedding metadata, lineage, classification, and ownership into platform patterns
• Drive adoption of AI governance architecture for agentic solutions including controls for data privacy and model lifecycle
• Define AIOps standards ensuring AI systems have traceability, quality measurement, incident response readiness, and cost guardrails
• Collaborate with stakeholders and product management to identify, prioritize, and mitigate technical risks and challenges
• Stay informed about industry regulations, security standards, and compliance requirements to ensure solutions meet necessary standards

What you’ll bring:

• Bachelor's or Master's degree in Computer Science, Software Engineering, or a related field
• 7+ years in software development methodologies, architecture, and implementation of large scale enterprise systems
• 4+ years focused on data engineering, data management, or data platform architecture and designing AI solutions including AIOps practices
• Structured problem solving to turn ambiguous requirements into scalable, low-cost solution patterns
• Ability to think strategically while paying close attention to technical details
• Proven experience building or evolving an enterprise data platform including standards and adoption across multiple teams
• Demonstrated ability to design governance-ready AI solutions including evaluation strategies, privacy safeguards, and auditability
• Strong expertise in system architecture, cloud computing, distributed systems, and integration technologies
• High bar for operational readiness, actionable documentation, and treating governance as a built-in platform feature
• Deep experience across modern data platform capabilities including AWS Glue, Step Functions, Airflow, dbt, Spark, and Snowflake
• Proficiency in programming and analytics using Python, SQL, and Jupyter Notebooks
• Experience with agentic frameworks such as LangChain, LlamaIndex, or LangGraph and AIOps tooling like LangFuse
• Familiarity with Agile development methodologies and the ability to adapt to a fast-paced environment
• Strong understanding of security principles, performance optimization, scalability, and reliability
• Demonstrated influence towards simplicity and repeatability in architecture

Nice to Have:

• Experience operating in regulated environments, (SOC2, ISO 27001, or GDPR).
• Familiarity with federated domain ownership models, where domains ship data products while the platform provides shared standards and tooling.
• Experience designing and scaling platform observability for data pipelines, streaming systems, and AI services.
• Familiarity with medallion architecture patterns
• Experience in modern data platform capabilities, including:
• Streaming: Apache Kafka, AWS MSK, AWS Kinesis, GCP Pub/Sub
• Metadata and governance: DataHub, Atlan or similar

As a senior technology leader, you will help build our technology platform to enable 10 million change-makers to deliver a billion acts of goodness by 2025. We seek a platform-first Architect to lead enterprise patterns for reliable, governed, AI-driven, and cost-effective solutions at scale across our technology portfolio. You will design how data flows across the company, from ingestion to consumption, while ensuring our AI systems are secure, auditable, and maintainable. This role requires practical systems thinking and the ability to influence senior engineers and leadership toward consistent, enterprise-wide architecture outcomes that align our data and AI strategy with broader business goals.

If you're passionate about leveraging modern technology, data and AI for positive impact and eager to contribute to a mission-driven organization, we want to hear from you.

What you will do:

• Develop and maintain end-to-end tracks with our data and AI focus technology strategy and architectural portfolio
• Mentor engineers and technical leadership by providing clear patterns, ensuring adherence to architectural patterns, and offering hands-on guidance for complex implementations
• Lead architecture decisioning through Architecture Decision Records (ADRs), standards, and design reviews
• Oversee architectural reviews, code reviews, and system performance analysis to ensure quality standards and sustainable delivery momentum
• Foster a culture of collaboration, knowledge sharing, and continuous learning through mentorship, team collaboration, and workshops
• Enable governed data consumption through clear data contracts, curated datasets, and consistent serving patterns including domain marts
• Standardize end-to-end data flow patterns including ingestion, transformation, storage, serving, and retirement with repeatable templates
• Set platform standards for orchestration and reliability including SLAs, retries, idempotency, backfills, runbooks, and operational dashboards
• Establish enterprise data quality practices including critical data elements, quality rules, validation layers, monitoring, and issue triage workflows
• Drive governance-by-design by embedding metadata, lineage, classification, and ownership into platform patterns
• Drive adoption of AI governance architecture for agentic solutions including controls for data privacy and model lifecycle
• Define AIOps standards ensuring AI systems have traceability, quality measurement, incident response readiness, and cost guardrails
• Collaborate with stakeholders and product management to identify, prioritize, and mitigate technical risks and challenges
• Stay informed about industry regulations, security standards, and compliance requirements to ensure solutions meet necessary standards

What you’ll bring:

• Bachelor's or Master's degree in Computer Science, Software Engineering, or a related field
• 7+ years in software development methodologies, architecture, and implementation of large scale enterprise systems
• 4+ years focused on data engineering, data management, or data platform architecture and designing AI solutions including AIOps practices
• Structured problem solving to turn ambiguous requirements into scalable, low-cost solution patterns
• Ability to think strategically while paying close attention to technical details
• Proven experience building or evolving an enterprise data platform including standards and adoption across multiple teams
• Demonstrated ability to design governance-ready AI solutions including evaluation strategies, privacy safeguards, and auditability
• Strong expertise in system architecture, cloud computing, distributed systems, and integration technologies
• High bar for operational readiness, actionable documentation, and treating governance as a built-in platform feature
• Deep experience across modern data platform capabilities including AWS Glue, Step Functions, Airflow, dbt, Spark, and Snowflake
• Proficiency in programming and analytics using Python, SQL, and Jupyter Notebooks
• Experience with agentic frameworks such as LangChain, LlamaIndex, or LangGraph and AIOps tooling like LangFuse
• Familiarity with Agile development methodologies and the ability to adapt to a fast-paced environment
• Strong understanding of security principles, performance optimization, scalability, and reliability
• Demonstrated influence towards simplicity and repeatability in architecture

Nice to Have:

• Experience operating in regulated environments, (SOC2, ISO 27001, or GDPR).
• Familiarity with federated domain ownership models, where domains ship data products while the platform provides shared standards and tooling.
• Experience designing and scaling platform observability for data pipelines, streaming systems, and AI services.
• Familiarity with medallion architecture patterns
• Experience in modern data platform capabilities, including:
• Streaming: Apache Kafka, AWS MSK, AWS Kinesis, GCP Pub/Sub
• Metadata and governance: DataHub, Atlan or similar