Senior Cybersecurity Analyst

Job description

[**Relay**](https://relaypro.com/) is the Intelligent System of Action for the physical economy. While the digital revolution has often left the deskless workforce behind, we are closing that gap by transforming analog frontline operations into a data-rich, AI-powered ecosystem. We aren't just selling radios, we’re building the digital foundation for the 80% of the global workforce that doesn't work at a desk. **Why Join Relay?** - **A Proven Winner:** Join a hyper-growth company trusted by over 10% of the Fortune 500, continuing to move upmarket with massive impact. - **High Value, High Impact:** With 47% of our revenue from $100K+ ARR customers and 135% Net Revenue Retention (NRR), you'll be joining a company rooted in value creation. - **Market-Leading Innovation:** The Relay platform captures 1 billion new data points weekly and features award-winning AI tools like TeamTranslate™, with 500% YoY growth. - **World-Class Leadership:** Our stellar leadership team is built to help us scale toward our next major milestones. - **The Relay Culture:** We’re dedicated to helping you do the best work of your life (BWIML), investing in your growth through L.I.T., living our CHASE values, and learning from incredibly talented, supportive teammates who make the work (and the wins) better every day. **Now, here’s what we’re building, and where you come in.** ### About the Role Relay is hiring a Senior Cybersecurity Analyst to serve as the technical backbone of our security operations. Reporting to the Sr. Manager of IT & Security and working closely with the SVP of IT & Security, you will be the owner and subject matter expert for our core security platform — Palo Alto Cortex XDR and the day-to-day manager of our relationship with Palo Alto Unit 42, and various outside cybersecurity partners. This role is equal parts technical depth and organizational trust. You'll be the person every department at Relay works with when a security finding lands on their desk — which means your ability to communicate clearly, build relationships, and set the right tone matters as much as your ability to hunt threats, build tools and manage the tools. You'll need to be firm on what security requires while remaining a partner people genuinely want to work with. If you can hold that line with empathy and credibility, you'll thrive here. We especially value candidates who bring an offensive security mindset — the ability to think like an attacker in order to build stronger defenses, anticipate attack vectors, and design systems that are genuinely difficult to compromise. ### About the Team You'll join a small, high-leverage IT & Security team responsible for protecting a fast-growing, cloud-first company. We manage a broad technology stack — from identity and device management to SaaS administration and enterprise automation — and we operate as true partners to the business, not just a support function. We move fast, build thoughtfully, and take pride in running a tight, well-integrated environment. We deliberately run a lean internal team amplified by strategic partners and AI-driven tooling, so every member owns real scope, works directly with senior leadership, and sees the impact of their work across the entire organization. **Responsibilities** - Lead the Security team in delivering world-class security services to our customers. - Own and administer the Palo Alto Cortex XDR environment end-to-end as its subject matter expert — configuration, detection tuning, policy management, agent coverage, upgrades, threat hunting (XQL), and incident investigation and response. - Manage Relay's daily operational relationship with Palo Alto Unit 42, our SOC — coordinate escalations, joint threat hunting, drive incident handoffs and follow-through, review deliverables, and hold the partnership accountable to our expectations. - Serve as the Cyber subject matter expert for Check Point Harmony, Google Workspace Security, Okta and JumpCloud. - Act as the primary security liaison to every department at Relay — communicate findings, negotiate remediation timelines, and drive issues to closure while setting a tone that is firm, fair, and constructive. - Correlate signals across the security stack to deliver a unified view of Relay's security posture, with regular reporting on threats, coverage, and remediation progress to security leadership. - Investigate and respond to security incidents end-to-end, documenting findings, root causes, and lessons learned in clear runbooks and reports. - Build automation — scripts, playbooks, and AI-assisted workflows — that reduces manual triage and scales our detection and response capability. - Support compliance and awareness programs, including Drata evidence collection and KnowBe4 training and phishing simulation campaigns. ### Required Qualifications - A degree in Computer Science, IT, or a security-related discipline; equivalent security certifications (CompTIA Security+ or CySA+, ISC2 CiC, Google Cybersecurity Professional, GSEC, GCIH) will be considered in place of a formal degree. - 5+ years of hands-on experience in a Security Analyst, Security Engineer, or similar security operations role. - Experience administering Palo Alto Cortex XDR, including detection tuning, posture management, endpoint inventory, and XQL-based investigation and threat hunting or equivalent experience with another SIEM. - Experience working with or managing an external SOC or MDR provider (Unit 42 experience strongly preferred), including escalation management and incident coordination. - Hands-on administration experience with Check Point Harmony, Google Workspace security, Okta and JumpCloud. - Exceptional interpersonal and communication skills: you can explain technical findings in plain language to any department, stay firm on security requirements under pushback, and set a tone that builds trust rather than friction. - Solid grounding in security fundamentals — the incident response lifecycle, EDR/XDR concepts, vulnerability management, and threat intelligence. - Proficiency with scripting or automation (XQL, Python, PowerShell, or Bash) to streamline security workflows. - Offensive security mindset: you think like an attacker when designing defensive security measures — you understand adversary tools, techniques, and tactics (TTPs), and translate that perspective into hardened controls, threat modeling, and proactive detection strategies that anticipate how your systems could be compromised. ### Preferred Qualifications - Experience administering Drata and Safebase (or a comparable GRC/compliance - Trust Center automation platform) and supporting SOC 2 / ISO 27001 / HIPAA / NIST 800-53 audit readiness. - Experience administering KnowBe4 (or a comparable security awareness platform), including phishing simulations and training metrics. - Relevant certifications such as Palo Alto PCDRA/PCSAE SOAR pathway, Security+, CySA+, GCIH, or equivalent. - Enthusiasm for applying AI tools to accelerate detection, response, and reporting in day-to-day security work. - Experience in a fast-paced, cloud-first SaaS environment. ### What success and impact looks like in this role: - Within 6 months, you have full, documented ownership of the Cortex XDR environment with tuned detections and 100% endpoint agent coverage. - The Unit 42 relationship runs on a clear operating rhythm — escalations, incident handoffs, and reporting flow smoothly with no dropped threads. - Within 3 months, you have a firm relationship with all external business partners, working with pen testers and red teams, and bug bounties on findings. - Every department knows who you are and views security findings as a collaborative process, not a confrontation — while remediation SLAs are consistently met. - Checkpoint Harmony, Google Workspace, Okta and JumpCloud configurations are hardened, documented, and continuously improving. - Automated workflows and AI-assisted processes have measurably reduced manual triage time, and security leadership receives a reliable cadence of posture and threat reporting. ### Equal Opportunity Employer Relay is proud to be an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all team members. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or any other characteristic protected by applicable law. ### Why Join Relay? **About Relay | Culture, Benefits & Perks** Our culture hinges on Relayers getting **LIT** up in an environment that fosters Learning, Impact, and Teamwork, where we **CHASE** the best work of our lives. We call this **BWIML** (Best Work In My Life). **At Relay, we offer:** - 100% Paid Insurance: Health, Dental, Vision, Long/Short Term Disability, and Life Insurance for you and your dependents - Generous Paid Time Off - 401(k) Savings Plan + Company Match - Baby Cash Reward + Paid Parental Leave - Wellness Perks: If you’re joining our Raleigh-based HQ, you’ll have access to a world-class onsite fitness center with instructor-led classes, plus tennis, basketball, pickleball, and cycling - Team Events & Culture: From company celebrations to team outings, we work hard and have fun doing it. - Latest tech, standing desks, and all the tools and software you need to thrive **The future of frontline work is being built here. Come build it with us. We can’t wait to hear from you.** #### We use AI tools to transcribe and summarize interviews for internal hiring purposes. Transcripts are accessible only to authorized hiring personnel and retained consistent with our data retention policies. Candidates who prefer not to have AI notetaking used may request to opt out without impact to your candidacy. For more information, please see our Candidate and Employee Privacy Notice [linked here.](https://relaypro.com/legal/candidate-privacy-notice/)