Security Analyst

WHOOP is hiring a Security Analyst to support day-to-day security operations and strengthen operational visibility across the security environment.

Responsibilities

• Triage and investigate security alerts from internal security tooling and alerts escalated by external security monitoring partners
• Monitor and manage the internal security operations ticket queue, ensuring alerts and investigations are prioritized, tracked, and resolved on time
• Assist with investigations of security events across endpoint, identity, cloud, and SaaS platforms
• Support incident response activities, including investigation, containment coordination, documentation, and post-incident analysis
• Review external threat intelligence and digital risk alerts tied to potential brand abuse, impersonation, or exposed credentials
• Collaborate with security engineering teams and external security partners to improve detection coverage and reduce false positives
• Identify gaps in logging, telemetry, and investigation workflows across security platforms
• Assist with threat hunting and security investigations using data from SIEM and other security tools
• Support vulnerability management workflows by helping triage, prioritize, and track remediation activities
• Own and manage the security operations queue as a centralized intake point for security questions, alerts, and reports across the organization, driving items through investigation or resolution
• Operate the organization’s phishing simulation program, including managing phishing campaigns and coordinating targeted remediation training for users with repeated failures
• Find opportunities to improve security operations through process improvements, automation, and responsible use of AI to streamline investigation, triage, and reporting workflows
• Maintain documentation for incident response procedures, investigation workflows, and operational playbooks
• Participate in the security team’s on-call rotation to support investigation and response activities when needed

Requirements

• 3+ years of experience in security operations, incident response, threat detection, or a related cybersecurity role
• Experience investigating security alerts or suspicious activity across endpoint, identity, cloud, or SaaS environments
• Experience triaging and managing security investigation workflows, including ticket queues or incident tracking systems
• Familiarity with SIEM platforms, log analysis, and security monitoring tools
• Understanding of common attacker techniques and frameworks such as MITRE ATT&CK
• Experience working with security tools such as EDR platforms, identity systems, cloud logging platforms, or similar technologies
• Familiarity with modern AI-enabled tools used in enterprise environments and awareness of associated risks
• Experience improving security operations using automation, scripting, or responsible use of AI to increase operational efficiency
• Strong analytical and investigative skills to evaluate security events and determine potential impact
• Ability to coordinate investigations across multiple teams and communicate findings clearly to technical and non-technical stakeholders
• Strong written documentation skills for incident records, investigation notes, and operational procedures
• Relevant security certifications such as Security+, CySA+, SSCP, GSEC, or GCIH are a plus

Technologies

• SIEM
• MITRE ATT&CK
• EDR
• Endpoint
• Identity systems
• Cloud logging platforms
• SaaS
• SIEM and other security tools
• Security monitoring tools
• AI-enabled tools

Benefits

• generous equity package
• competitive base salaries
• meaningful equity
• consistent pay practices
• Health insurance

Location: Boston, MA (onsite)

Salary: USD 70,000 - 110,000 per year

Experience: Minimum 3 years

Relocation: Based in the WHOOP office in Boston, MA; must be prepared to relocate if necessary to work out of the Boston, MA office.

• Interested candidates who do not meet every qualification are encouraged to still apply.
• Equal Opportunity Employer
• Participates in E-verify to determine employment eligibility