Information Security Analyst 3
$107.7k - $131.3k/yr+ Profit Sharing + Medical Travel Reimbursement + 401(k) Match + Employee Stock Purchase Plan
Senior
Bachelor's, Master's
Las Vegas, NV, USA+1 moreMore locations: Minneapolis, MN, USA
In Person
CybersecuritySecurity Operations & Incident Response
No H1B Sponsorship
About the job
Requirements
- Must be authorized to work in the United States as defined by the Immigration Act of 1986.
- Must pass a criminal background check.
- A bachelor's degree in Computer Science, Software Engineering, or a related field, or an equivalent combination of education and experience.
- At least six years of experience in information security.
- At least two years of project or team lead experience.
- Must hold an industry certification such as Certified Information Systems Security Professional, Certified Information Security Manager, Offensive Security Certified Professional, or a related industry certification.
- Clear written and verbal communication skills, including the ability to document investigative findings for technical and non-technical audiences.
- Ability to participate in an on-call rotation and respond to security events outside normal business hours.
- Ability to handle sensitive payment, personal, and crew or employee data in accordance with company policy and applicable regulatory requirements.
- Ability to meet the stated physical demands, including operating a computer and potentially lifting, pushing, pulling, or carrying up to 20 pounds.
Responsibilities
- Operate and tune the enterprise endpoint detection and response platform; investigate escalated detections, perform host triage and containment, and drive eradication and recovery actions.
- Develop and maintain custom detections, exclusions, and response policies, and validate coverage against known attacker techniques.
- Monitor agent health and deployment coverage across endpoints and servers, and work with platform teams to close gaps.
- Design, build, test, and maintain automation and orchestration playbooks to reduce manual analyst effort in triage, enrichment, containment, and reporting.
- Integrate security tools through application programming interfaces to move context automatically between detection, ticketing, identity, and asset systems.
- Maintain automation content in version control with peer review, and measure and report time saved and error reduction.
- Develop, tune, and maintain correlation rules, use cases, dashboards, and alerts in the security information and event management system; reduce false positives while preserving detection coverage.
- Onboard new log sources, validate parsing and field normalization, and confirm data completeness and retention against monitoring and compliance requirements.
- Perform threat hunting and historical analysis across aggregated log data to identify activity missed by automated detections.
- Evaluate and operationalize intelligence from commercial feeds, open sources, industry sharing groups, and government partners; convert relevant intelligence into detections, hunts, and blocking decisions.
- Track threat actors, campaigns, and techniques targeting the aviation, travel, hospitality, and payment sectors, and brief stakeholders on relevance and recommended action.
- Produce written intelligence summaries for technical teams and leadership.
- Operate scanning and assessment capabilities across endpoints, servers, cloud workloads, containers, and network devices; validate findings and eliminate false positives.
- Prioritize vulnerabilities using severity, exploitability, threat intelligence, asset criticality, and exposure; partner with system owners to define remediation plans and track them to closure.
- Report remediation performance against defined service levels and escalate aging or high-risk exposures through the established risk process.
- Operate the static analysis platform by onboarding repositories, configuring language and framework coverage, tuning rulesets, and maintaining baselines for legacy code.
- Integrate static scanning into developer workflows and continuous integration/continuous delivery pipelines; define and administer quality gates and policy thresholds with engineering.
- Triage static findings to remove false positives, confirm exploitable issues, and provide developers with code-level remediation guidance and secure coding patterns.
- Support software composition analysis and secrets detection for third-party libraries, open-source dependencies, and credential leakage in source repositories.
- Plan, schedule, and execute dynamic scans against web applications and application programming interfaces across pre-production and production environments, including authenticated scanning and API-definition-driven testing.
- Validate and reproduce dynamic findings, assess exploitability and business impact, and route prioritized results into remediation and risk tracking.
- Support and help scope third-party penetration tests and application assessments, and track findings to closure.
- Operate and tune the web application firewall for customer-facing and internal web applications and APIs, including managed rule sets, custom rules, rate limiting, geographic and reputation controls, and bot mitigation.
- Move new firewall rules from detection-only to blocking mode using traffic analysis, minimizing false positives and avoiding disruption to legitimate customer traffic.
- Monitor and investigate web application firewall telemetry and blocked-event trends; correlate firewall logs into the security information and event management system and build detections for application-layer attack patterns, credential stuffing, scraping, and abuse.
- Support onboarding applications and domains behind the web application firewall, including policy design, exclusion management, and validation testing with application teams.
- Maintain web application firewall configuration documentation and evidence supporting applicable regulatory and payment-industry control requirements.
- Support and maintain single sign-on integrations for enterprise and third-party applications, including federation configuration, application onboarding, and access policy design.
- Configure and tune multifactor authentication, conditional access, and identity risk policies; investigate identity-based alerts such as impossible travel, multifactor authentication fatigue, token theft, and privilege escalation.
- Monitor privileged and service accounts, review access anomalies, and support access certification and least-privilege initiatives with the identity and access management team.
- Act as an escalation point for security incidents; lead or support investigation, evidence preservation, containment, post-incident documentation, and lessons learned.
- Maintain runbooks, detection documentation, and operational procedures, and contribute to tabletop and purple team exercises.
- Mentor junior analysts on investigative techniques, tooling, and documentation quality.
- Support audit, assessment, and regulatory evidence requests related to security monitoring, vulnerability management, and access controls.
- Perform other duties as assigned.
- Report to the assigned trip or work location during declared national or state emergencies unless prohibited by local, state, or federal order.
- Travel as required by the role.
Desired Qualifications
- A master's degree in Computer Science or a relevant field.
- Eight or more years of cybersecurity experience, including experience in a security operations center or incident response function.
- Industry certifications such as Certified Information Systems Security Professional, GIAC Certified Incident Handler, GIAC Certified Intrusion Analyst, GIAC Certified Forensic Analyst, GIAC Security Essentials Certification, or CompTIA Cybersecurity Analyst+, or vendor certification in endpoint detection and response, security information and event management, identity, or cloud security.
- Experience building security automation and orchestration playbooks that integrate multiple tools through application programming interfaces.
- Experience operating a threat intelligence program, including managing intelligence feeds, tracking industry-relevant threat actors, and producing intelligence-driven detections.
- Experience with detection-as-code practices, including version control, peer review, and continuous integration/continuous delivery pipelines for detection and automation content.
- Experience integrating static application security testing, dynamic application security testing, software composition analysis, and secrets scanning into continuous integration/continuous delivery pipelines, including quality gates and build-breaking policy.
- Experience with interactive application security testing, runtime application self-protection, application programming interface security testing, or bot and fraud mitigation capabilities layered with a web application firewall.
- Ability to conduct secure code reviews in one or more languages used for web and application programming interface development, and familiarity with threat modeling for new features and services.
- Experience with Payment Card Industry Data Security Standard requirements for public-facing web applications, including web application firewall or equivalent control requirements and application penetration-testing obligations.
- Cloud security experience with a major public cloud provider, including native logging and identity services.
- Familiarity with identity threat detection and response concepts, including privileged access management and detection of identity-based attack techniques.
- Experience in a regulated environment subject to requirements such as Payment Card Industry Data Security Standard, Sarbanes-Oxley, or aviation-sector regulatory oversight.
- Experience supporting operational technology or specialized business systems in addition to corporate information technology.
- Experience mentoring analysts, developing runbooks, and leading tabletop or purple team exercises.
About the company
Allegiant Air is a low-cost, all-jet airline based in Las Vegas that serves leisure travelers with affordable flights from smaller cities to vacation destinations. It sells tickets and bundled travel products—such as hotel rooms, rental cars, and entertainment tickets—exclusively on Allegiant.com. The company differentiates itself through online-only distribution, a fleet of over 90 aircraft, and a focus on bundled vacation packages for value and convenience. Its goal is to provide affordable, convenient travel options while growing its fleet and network and offering bundled experiences online.
Company Size
1,001-5,000
Company Stage
IPO
Headquarters
Las Vegas, Nevada
Founded
1999
Get referred to Allegiant Air
See people who can refer or advise you
Simplify's Take
What believers are saying
- Q2 2026 revenue hit $943.5 million, with standalone TRASM up 24.6%.
- Allegiant added 39 Florida routes for September 2026, expanding low-cost leisure dominance.
- Management kept 2026 EPS guidance at least $6 after record Q2 performance.
What critics are saying
- Florida carried 58% of flights in September 2026, creating brutal weather and demand concentration.
- Sun Country close still needs antitrust clearance; integration slips would trap 2027 synergies.
- Boeing 737 MAX and Airbus fleet complexity risks grounding shocks, maintenance bottlenecks, and margin collapse.
What makes Allegiant Air unique
- Small-city-to-Florida network gives Allegiant unmatched leisure niche density.
- August 17, 2026 routes show hyper-seasonal precision around peak vacation windows.
- Sun Country merger announced 2026-09-14 expands scale to 650 routes and 195 aircraft.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Life Insurance
- Disability Insurance
- 401(k) Company Match
- Employee Stock Purchase Plan
- Profit Sharing
- Medical Travel Reimbursement
- Legal, Identity and Pet Insurance
- Employee Assistance Program
- Tuition Reimbursement