Senior Security Analyst (AI)

Location: Onsite in the Bozeman, Montana, United States office

Salary: $136,000–$170,000 upon hire, plus a 10% annual performance bonus and common share options.

Company

onX is a high-growth technology company building outdoor recreation products across hunting, offroad, backcountry, and fishing.

What you will do

• Own day-to-day security operations, including SentinelOne SIEM/EDR monitoring, detection tuning, threat modeling, and vulnerability metrics.
• Execute incident response, make frontline decisions during major incidents, facilitate tabletop exercises, and lead post-incident analysis.
• Partner with Site Reliability Engineering on Google Cloud Platform security monitoring, infrastructure logging, IAM configuration, and workload security.
• Lead application and vendor security activities, including recurring audits, penetration testing, mobile application and API testing, phishing simulations, and remediation coordination.
• Support SOC 2 Type 2 compliance, maintain Sprinto automation, and build tools that reduce manual security and compliance work.
• Evaluate security and business trade-offs, pilot AI-assisted security operations, mentor security team members, and advise the Director of IT and Security.

Requirements

• At least 7 years of experience in security operations, incident response, or a related security role.
• Experience operating and tuning SIEM and endpoint detection and response platforms and leading incident response.
• Working knowledge of vulnerability management, application security testing, Google Cloud Platform, IAM, logging, and core infrastructure services.
• Experience building scripts, automations, or tools that reduce manual work in security, compliance, audits, or alert triage.
• Strong communication, independent prioritization, stakeholder alignment, and risk-based decision-making skills.
• Must be able to perform the job onsite in the Bozeman, Montana office.

Nice to have

• Experience with SentinelOne, SOC 2, Sprinto, Workato, mobile application security, or API security testing.
• Proficiency in Python or another scripting language for security automation.
• Security or cloud certifications such as GSEC, GCIH, CISSP, Associate Cloud Engineer, or Professional Cloud Security Engineer.
• Experience mentoring or informally leading security team members.

Culture & Benefits

• Distributed company with regular in-person collaboration through regional basecamps.
• Health benefits including a no-monthly-cost medical plan.
• Paid parental leave, flexible time away, paid holidays, and outdoor industry perks.
• 401(k) matching at 100% for the first 3% contributed and 50% from 3–5%.
• Annual bonus, equity, growth opportunities, and funds for active outdoor activities.