The Problems You'll Solve

At Carta, our employees set out on a mission to unlock the power of equity ownership for more people in more places. We believe that the problems we solve today unlock the opportunities of tomorrow.

As a Senior Security Analyst, you’ll directly shape and strengthen our detection and response capabilities, help mature our security operations, and ultimately protect the organization from evolving threats. You’ll play a critical role in leading incidents, developing internal tools and playbooks, and reducing response times through automation and continuous improvement. You’ll serve as a point-of-contact for incidents and collaborate with stakeholders to shape the future of Carta’s security posture.

Here are some problems we’d love for you to help us solve:

• Lead investigation and response efforts for security incidents, and coordinate with internal stakeholders and external partners when necessary.
• Own detection use-case development and write and tune alerts to improve signal-to-noise ratio across our environments.
• Maintain and continually improve security incident response plans, playbooks, and related documentation.
• Develop and maintain internal tooling and automations to improve analyst efficiency for alert triage, IOC enrichment, and evidence collection.
• Support compliance and audit needs (SOC 2, ISO, etc.) related to detection and monitoring controls.
• Elevate the Security team by coaching peers, raising the standard for detection quality and helping shape response maturity.
• Conduct threat hunting and utilize threat intelligence to proactively identify and mitigate emerging risks.
• Participate in on-call rotation and continuously improve readiness and handovers.

The Team You'll Work With

You will be part of a security-minded team that believes in progress over perfection and where security culture and mindset is key. Our team is rethinking how detection and response activities can be accomplished in innovative ways. We focus on solving business problems while minimizing and managing risk exposure for Carta.

About You

We’re looking for candidates who have:

• Deep experience in triaging, investigating, and remediating security events and incidents across multiple technology stacks.
• Strong experience with SIEM, EDR, and other security tooling.
• Experience writing code or scripts (Python, bash, shell) to drive automation and efficiency.
• Solid understanding and a proven ability to apply detection engineering and threat modeling concepts using MITRE ATT&CK or similar frameworks.
• Excellent judgement and the ability to handle ambiguity and make balanced decisions when working with complex situations.
• Proven ability to proactively collaborate with cross-functional teams to influence security priorities and guide risk-based decisions.
• Excellent written and verbal communication skills, including the ability to effectively communicate cybersecurity risk across technical and non-technical audiences.
• 4+ years of experience in incident management and response functions.

At Carta, you’re not just an employee. You’re a builder who is creating infrastructure that accelerates innovation and empowers more ownership. Cartans are helpful, relentless, unconventional and kind; representing Carta’s Identity Traits. They work collaboratively and cross functionally to challenge the status quo; working towards a common goal of creating more owners in the private markets.