Senior Staff Security Operations Analyst

Senior Staff Security Operations Analyst LocationUnited States - Remote; Des Moines, Iowa - HQ; Nashville, TN - HQ; San Francisco Bay AreaEmployment TypeFull timeLocation TypeRemoteDepartmentGeneral and AdministrativeInfoSecAbout OpenLoopOpenLoop was co-founded by CEO, Dr. Jon Lensing, and COO, Christian Williams, with the vision to bring care anywhere. Our telehealth support solutions are thoughtfully designed to streamline and simplify go-to-market care delivery for companies offering meaningful virtual support to patients across an expansive array of specialties, in all 50 states.About the Role We're hiring a Senior Staff SecOps Analyst to anchor our security operations function. This is a hands-on senior individual contributor role - you'll own the deepest, most complex security work across the company and set the technical bar for how we detect, investigate, and respond to threats.You'll lead analysis end-to-end, drive maturity across the full SecOps lifecycle, and mentor analysts at every level. You won't manage people directly, but you'll be the person the team turns to help get anything and everything accomplished - and the person who builds the systems so fewer things catch fire in the first place.You'll also be expected to operate as an AI-forward security practitioner. We treat AI as a force multiplier across the discipline, and we want someone who already does too.What You'll Do AI-assisted security operations. Use AI tools (Claude, copilots, and emerging agentic platforms) as a force multiplier across every part of the job - accelerating triage and investigation, drafting and refining detections, summarizing alerts and incidents, automating repetitive analyst work, and improving the metrics that matter (MTTD, MTTR, dwell time, analyst throughput). Set the bar for how the security team uses AI responsibly in a PHI environment.Threat hunting. Develop and execute hypothesis-driven hunts across endpoints, cloud workloads, identity, and SaaS. Translate hunt findings into durable detections. Utilize AI and automation to turn Threat Hunting into a powerful, proactive tool.Vulnerability management. Drive the vulnerability lifecycle - discovery, prioritization (risk-based, not just CVSS), remediation tracking, and reporting. Partner with engineering to close real risk fast.Attack surface management. Maintain visibility into our external and internal attack surface across cloud, SaaS, third parties, and acquired entities. Find exposure before someone else does.Incident response and digital forensics. Assist, however necessary, the Lead Incident Responder with investigations and security incidents from triage through containment, eradication, recovery, and post-incident review. Perform host, network, cloud, and memory forensics. Assist with IR playbooks and the evidence chain.Fraud assessment. Drive deep analysis on the source of digital fraud. From payment card to cyber-initiated fraud, understand the how and why on the digital fraud frontier.Cross-functional partnership. Work directly with Engineering, IT, Operations, and Compliance. Translate security findings into clear asks with concrete next steps. Attack problems, not people.Healthcare-specific risk. Apply controls that fit a HIPAA-regulated, PHI-handling environment. Help us move at purposeful speed without breaking what matters.Who You Are10–12 years of progressive experience in security operations, with deep hands-on work across all of: digital forensics, incident response, vulnerability management, attack surface management, threat hunting, and security analytics.Demonstrated ownership of major security incidents end-to-end - you've been the technical lead, not just on the bridge.Working knowledge of cloud security, endpoint detection and response, SIEM platforms, identity providers, and modern attacker tradecraft (MITRE ATT&CK fluency expected).Detection engineering experience — you've written, tuned, and retired detections, and you can defend your choices with...