Security Analyst

Thanks for your interest in Success Academy! Running a large, fast-growing, and high-performing network of public charter schools takes a village - families, children, teachers, staff and faculty, advocates, and supporters alike. We are growing fast in New York and expanding to Florida, and we would love to welcome you to our community! We work tirelessly every day to ensure children have access to a fun, rigorous, whole-child education regardless of zip code or economic status. When you join SA, you play a part in giving every student who walks through our doors a fair shot at reaching his or her potential.

About the Role

Success Academy is growing rapidly and security is at the forefront of enabling that growth. We are seeking a Senior Security Analyst to join our Information Security & Privacy team. This individual will serve as a senior technical contributor responsible for designing, implementing, and continuously improving key components of our security program. They will independently lead complex security initiatives, influence security strategy, and serve as a trusted advisor across cross-functional teams. This is a unique opportunity to make an immediate and lasting impact, addressing the unique needs of a K-12 school environment.

The Senior Security Analyst will be hands-on across multiple domains, including security operations, endpoint protection, cloud security, data loss prevention, compliance, and privacy, while also partnering closely with business and technology teams to ensure that security is embedded across all functions.

This role reports into the head of Security & Privacy and sits within the Technology department. The Technology team manages a modern technology environment built around cloud and SaaS based applications, operates networking and in-school technologies across 59 school locations, and supports managed devices used by over 3,000 employees and over 20,000 students. 

Key Responsibilities

• Cloud Security: Support security for AWS and GCP environments, working closely with cloud engineering teams to resolve vulnerabilities
• Endpoint Security: Own the organization's endpoint security strategy and operations using CrowdStrike, proactively identifying risks, leading investigations, driving remediation efforts, and continuously improving endpoint protections.
• Email Security: Lead the evolution of our email security program by designing advanced detection, DLP, and anti-phishing controls while continuously improving protection against emerging attack techniques
• Security Leadership: Act as the security lead for cross-functional technology initiatives, providing technical guidance and ensuring security is incorporated into architecture, engineering, and operational decisions