Success Academy is growing rapidly and security is at the forefront of enabling that growth. We are seeking a Security Analyst to join our Information Security & Privacy team. This individual will play a critical role in building, strengthening, and operationalizing our security programs. This is a unique opportunity to make an immediate and lasting impact, addressing the unique needs of a K-12 school environment.

The Security Analyst will be hands-on across multiple domains, including security operations, endpoint protection, cloud security, data loss prevention, compliance, and privacy, while also partnering closely with business and technology teams to ensure that security is embedded across all functions.

This role reports into the head of Security & Privacy and sits within the Technology department. The Technology team manages a modern technology environment built around cloud and SaaS based applications, operates networking and in-school technologies across 57 school locations, and supports managed devices used by over 3,000 employees and over 20,000 students. This position will be based in the network office (3-days a week onsite) in Manhattan (10005).

Key Responsibilities

• Endpoint Security: Manage and monitor Crowdstrike, identify vulnerabilities, investigate alerts, and lead incident response & remediation efforts

• Email Security: Support existing efforts to build email compliance and DLP rules, and take proactive measures against advanced phishing techniques

• Security Operations: Partner with IT, engineering, and business stakeholders to ensure security is integrated into workflows across the organization

• Program Building: Lead implementation of scalable security processes across incident response, access management, vulnerability management, and DLP

• Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities

• Security Tooling: Stay ahead of emerging threats and security trends, recommend and vet new tools as appropriate

Requirements

• Experience: 4+ years of professional experience in information security roles within technology-driven organizations

• Technical Skills:

  • Strong hands-on experience with Crowdstrike Falcon or similar endpoint security platforms

  • Expertise in Google Workspace security administration (Gmail rules, DLP, monitoring)

  • Expertise in advanced email security platforms (Sublime, Mimecast, Proofpoint, Abnormal, etc.)

  • Expertise with identity access management platforms (Okta)

  • Knowledgeable in AWS and GCP infrastructure implementation, security controls, IAM, and monitoring, as well as Wiz

• Compliance & Privacy: Familiarity with security frameworks and privacy regulations (SOC 2, ISO 27001, FERPA)

• Mindset: Meticulous and tenacious in identifying and resolving security risks

• Communication: Excellent written and verbal skills; ability to convey security concepts to both technical and non-technical audiences

• Location: Hybrid - onsite at Manhattan (10005) headquarters Tuesday through Thursday