Senior Security Analyst

The Company You’ll Join

Carta develops purpose-built software that transforms traditional accounting into a powerful growth engine.

Carta’s world-class fund administration platform supports nearly 7,000 funds and SPVs, and represents nearly $130B in assets under management in venture capital and private equity.

Trusted by more than 40,000 companies, Carta also helps private businesses in over 160 countries manage their cap tables, valuations, taxes, equity programs, compensation, and more.

Together, Carta is setting a new standard as the end-to-end platform for private markets. Our best-in-class solution for fund management seamlessly integrates investor and portfolio company insights via a suite of tools designed ground-up to support the strategic impact of the fund CFO.

For more information about our offices and culture, check out our Carta careers page.

The Problems You'll Solve

At Carta, our employees set out on a mission to unlock the power of equity ownership for more people in more places. We believe that the problems we solve today unlock the opportunities of tomorrow.

As a Senior Security Analyst, you’ll directly shape and strengthen our detection and response capabilities, help mature our security operations, and ultimately protect the organization from evolving threats.  You’ll play a critical role in leading incidents, developing internal tools and playbooks, and reducing response times through automation and continuous improvement. You’ll serve as a point-of-contact for incidents and collaborate with stakeholders to shape the future of Carta’s security posture.

Here are some problems we’d love for you to help us solve:

• Lead investigation and response efforts for security incidents, and coordinate with internal stakeholders and external partners when necessary.
• Own detection use-case development and write and tune alerts to improve signal-to-noise ratio across our environments.
• Maintain and continually improve security incident response plans, playbooks, and related documentation.
• Develop and maintain internal tooling and automations to improve analyst efficiency for alert triage, IOC enrichment, and evidence collection.
• Support compliance and audit needs (SOC 2, ISO, etc.) related to detection and monitoring controls.
• Elevate the Security team by coaching peers, raising the standard for detection quality and helping shape response maturity.
• Conduct threat hunting and utilize threat intelligence to proactively identify and mitigate emerging risks.
• Participate in on-call rotation and continuously improve readiness and handovers.

The Team You'll Work With

You will be part of a security-minded team that believes in progress over perfection and where security culture and mindset is key. Our team is rethinking how detection and response activities can be accomplished in innovative ways. We focus on solving business problems while minimizing and managing risk exposure for Carta.

About You

We’re looking for candidates who have:

• Deep experience in triaging, investigating, and remediating security events and incidents across multiple technology stacks.
• Strong experience with SIEM, EDR, and other security tooling.
• Experience writing code or scripts (Python, bash, shell) to drive automation and efficiency.
• Solid understanding and a proven ability to apply detection engineering and threat modeling concepts using MITRE ATT&CK or similar frameworks.
• Excellent judgement and the ability to handle ambiguity and make balanced decisions when working with complex situations.
• Proven ability to proactively collaborate with cross-functional teams to influence security priorities and guide risk-based decisions.
• Excellent written and verbal communication skills, including the ability to effectively communicate cybersecurity risk across technical and non-technical audiences.
• 4+ years of experience in incident management and response functions.

At Carta, you’re not just an employee. You’re a builder who is creating  infrastructure that accelerates innovation and empowers more ownership. Cartans are helpful, relentless, unconventional and kind; representing Carta’s Identity Traits. They work collaboratively and cross functionally  to challenge the status quo; working towards a common goal of creating more owners in the private markets. 

Salary

Carta’s compensation package includes a market competitive salary, equity for all full time roles, exceptional benefits, and, for applicable roles, commissions plans. Our minimum cash compensation (salary + commission if applicable) range for this role is:

• $123,250 - $145,000 in San Francisco, CA; Santa Clara, CA; New York City, NY
• $117,088 - $137,750 in Seattle, WA

Final offers may vary from the amount listed based on geography, candidate experience and expertise, and other factors.

Disclosures:

• We are an equal opportunity employer and are committed to providing a positive interview experience for every candidate. If accommodations due to a disability or medical condition are needed, please connect with the talent partner via email. 

• Carta uses E-Verify in the United States for employment authorization. See the E-Verify and Department of Justice websites for more details.

• Interested in data privacy? Check out our policies on Privacy and CA Candidate Privacy.

• Please note that all official communications from us will come from an @carta.com or @carta-external.com domain. Report any contact from unapproved domains to security@carta.com.