Back to jobs
New

Cybersecurity Analyst l

Remote USA

If you’re good at what you do, you can work anywhere. If you’re the best at what you do, come work for Doma Technology LLC.

About Us  

Doma Technology LLC offers solutions for lenders, real estate professionals, title agents, and homeowners that make closings vastly simpler and more efficient, reducing cost and increasing customer satisfaction.

Our Values

  • Obsessively Entrepreneurial - We encourage calculated risk-taking, and we know that some of our best learning happens by making mistakes along the way.
  • People First - We communicate with honesty and respect to our customers, colleagues, and partners.
  • Better Together - We believe diversity, equity and inclusion creates value through the differences in our backgrounds, experiences, and perspectives.
  • Act with Integrity - We hold ourselves to the highest ethical standards in all of our business practices.

Cybersecurity Analyst I (Contractor, 40 hrs/week)

Doma is looking for a Cybersecurity Analyst l to join our team as a contractor working 40 hours per week working from 10:00 EST to 7:00 EST (1 hour lunch break). This position is responsible for understanding, identifying, and reporting on the organization's privacy and security requirements.

At Doma we’re re‑architecting the closing experience to make home ownership simple and transparent for everyone. Security is at the heart of that mission. As a Cybersecurity Analyst you’ll safeguard technology ecosystems, collaborate with teams to spot threats before they strike, and help shape a security culture people are proud to champion. If you crave purpose, autonomy, and the chance to see your work immediately improve real lives, this is your seat at the table.

Responsibilities

Incident Response & Investigations

  • Triage, contain, and eradicate security incidents end‑to‑end—owning SIEM alerts all the way through root‑cause analysis and executive read‑outs.
  • Correlate logs with Kusto Query Language (KQL) in SIEM tools to uncover patterns others miss.
  • Maintain an investigation playbook repository and publish post‑incident lessons learned within 24 hours.

Phishing Awareness & Human‑Risk Reduction

  • Design data‑driven phishing simulations each month, segmenting by risk tier and driving click‑rates below 5 percent.
  • Deliver empathetic micro‑trainings and town‑halls that transform missteps into memorable learning moments.

Vendor Security Reviews

  • Lead due‑diligence for all third‑party vendors, scoring them against NIST 800-53 and ISO 27001 controls.
  • Follow-up and remediate risk scoring directly with vendors and internal owners; log and track residual risk in our VRC platform.

Threat Hunting & Monitoring

  • Proactively hunt for indicators of compromise using threat‑intel feeds and custom KQL queries.
  • Own dashboards that surface trending threats and actionable KPIs the Cybersecurity Engineering Manager relies on for leadership updates.

Policy & Program Advancement

  • Contribute to policy reviews, BCP/DR tabletop exercises, and compliance audits (SOC 2 Type 2, CCPA, GLBA).
  • Champion a “security‑by‑design” mindset across sprint ceremonies and product lifecycles.

Continuous Improvement & Learning

  • Track emerging TTPs and propose at least one tooling or process enhancement every quarter.
  • Be ready to continuously learn and expand by —sharing your passion for curiosity, experimentation, and lifelong growth.

Preferred Skills & Experience

  • Education & Foundations
    • Bachelor’s degree in Cybersecurity, Computer Science, Information Assurance, or related discipline (or equivalent experience) preferred.
  • Technical Foundation
    • 1+ year hands‑on in incident response, SOC operations, or privacy investigations.
    • Proficiency with SIEM platforms— Microsoft Sentinel or Splunk.
    • Working knowledge of KQL for advanced log analytics.
    • Familiarity with email‑security and phishing‑simulation tools (e.g., KnowBe4, Proofpoint).
    • Basic scripting in PowerShell, Bash, or Python for troubleshooting, automation, and reporting.
    • Understanding of cloud platforms (AWS, Azure) and container security fundamentals.
  • Frameworks & Methodologies
    • Comfort aligning controls with NIST CSF, CIS Controls, ISO 27001, and SOC 2.
    • Exposure to MITRE ATT&CK for threat modeling and detection logic.
  • Soft Skills that Set You Apart
    • Storytelling—distill complex technical findings into plain‑English business impact.
    • Empathy—coach, don’t scold; build relationships that invite security early and often.
    • Unshakable curiosity—eager to chase a log trail until 2 a.m. if that’s what the risk demands.
    • Self‑starter mentality—spot trends and propose fixes without waiting for permission.
  • Certifications (nice to have)
    • CompTIA Security+, Network+, or SSCP
    • GIAC GMON/GCIH, Microsoft SC‑200, or AWS/Azure security certs

What success looks like after 3 months

  • Mean time to detect (MTTD) reduced by 30 % through refined queries.
  • Organization‑wide phishing susceptibility cut in half.
  • 100 % of high‑risk vendors have remediation plans in place or accepted risk sign‑off.
  • Security is seen not as a gatekeeper but as a strategic enabler—because you made it that way.

The honor of joining Doma

When you accept this role, you become a guardian of trust for every team member and associate we serve. You’ll belong to a passionate team that celebrates diverse ideas, invests in your growth, and genuinely cares about your wellbeing. If that sounds like a mission worth defending, we can’t wait to meet you.

Shown below is the lowest to highest base salary we in good faith believe we would pay for this role at the time of this posting.  We may ultimately pay more or less than the posted range, and the range may be modified in the future.  An employee’s pay position within the base salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, seniority, geographic location, performance, shift, travel requirements, sales or revenue-based metrics, any collective bargaining agreements, and business or organizational needs.  At Doma, compensation decisions are dependent on the facts and circumstances of each case.

The base salary range for this role is shown below:

$64,800 - $81,000 USD

How we’ll value you and make your life a bit easier:

We offer a comprehensive package of benefits to eligible employees: medical/dental/vision insurance, 401(k), generous vacation time, and paid bonding leave.

Note: No amount of pay is considered to be wages or compensation until such amount is earned, vested, and determinable. The amount and availability of any bonus, commission, or any other form of compensation that are allocable to a particular employee remains in the Company's sole discretion unless and until paid and may be modified at the Company’s sole discretion, consistent with the law.

We believe the most valuable investment we can make is to build an outstanding team of colleagues and leaders who are passionate about our mission.

We currently offer the following benefits to all Full-Time employees:

  • Work/Life Balance - We encourage taking Paid Time Off (PTO)!
  • 12 Weeks of Paid Family Bonding Leave (Maternity and Paternity)
  • Incredible medical, dental, and vision benefits options to allow you to customize to you and your family’s needs that all start on your first day of employment
  • Flexible Spending Account (FSA) & Health Savings Account (HSA)
  • 401K with company match program
  • Short-Term & Long-Term Disability
  • Commuter Flexible Spending Account (i.e. Transit or Parking)
  • Supplemental Life and AD&D Insurance
  • Auto & Home Insurance Group Life Insurance
  • Critical Illness, Injury and Hospital Insurance 

We believe in Equal Opportunity

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

Create a Job Alert

Interested in building your career at Doma Technology LLC? Get future opportunities sent straight to your email.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in Doma Technology LLC’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305
Page 1 of 1
OMB Control Number 1250-0005
Expires 04/30/2026

Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

  • Alcohol or other substance use disorder (not currently using drugs illegally)
  • Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
  • Blind or low vision
  • Cancer (past or present)
  • Cardiovascular or heart disease
  • Celiac disease
  • Cerebral palsy
  • Deaf or serious difficulty hearing
  • Diabetes
  • Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
  • Epilepsy or other seizure disorder
  • Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
  • Intellectual or developmental disability
  • Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
  • Missing limbs or partially missing limbs
  • Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
  • Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
  • Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
  • Partial or complete paralysis (any cause)
  • Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
  • Short stature (dwarfism)
  • Traumatic brain injury
Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.