Senior Security Operations Analyst

Taxwell is a leading digital tax filing platform formed in 2022 from the combination of Drake Software® and TaxAct®. These two longstanding organizations offer customers professional and do-it-yourself digital and downloadable products that are easy-to-use, best-in-class technology, and provide unparalleled customer support. Taxwell brands are a trusted solution for all users including those with complex tax returns. We strive to attract and retain candidates who exemplify our values: performance, perseverance, progress and partnership. Taxwell is an organization of forward thinkers looking to add industry experts to our growing team.

The IRM SecOps team is seeking a Senior Security Operations Analyst who thrives in a lean, fast-moving environment, takes ownership of outcomes, and combines strong project-based execution with hands-on detection, investigation, and response expertise.

This role blends multiple areas of security operations, with approximately 60% focused on project and implementation work — building, deploying, and configuring new security tools and integrations — 20% on SOC operations, including monitoring, detection tuning, and continuous improvement, and 20% on incident response and other security operations tasks, such as hands-on investigation, containment, and recovery when issues arise.

This is a high-impact position for someone who enjoys both building and doing. An analyst who can lead projects, improve tooling, and directly strengthen Taxwell’s security posture.

Responsibilities

• Lead and drive security projects end-to-end, including the build, implementation, and optimization of technical solutions.
• Implement, configure, and improve security tools to enhance detection, automation, and response workflows.
• Respond to escalated security incidents, performing advanced analysis, containment, and recovery.
• Conduct proactive threat hunting and refine detection logic for greater accuracy and visibility.
• Collaborate with IT, cloud, and development teams to enhance controls and automate security processes.
• Create and maintain detailed incident documentation, timelines, and lessons learned.
• Continuously enhance playbooks, alerting, and operational efficiency through automation.
• Mentor and support other analysts, contributing to capability and process maturity across the team.

Required Qualifications

• 5+ years of experience in cybersecurity operations, incident response, or security engineering.
• Experience with CrowdStrike Falcon (deployment, configuration, and response)
• Solid knowledge of cloud security investigations and monitoring with Microsoft Azure and Amazon Web Services (AWS)
• Familiar with SIEM and SOAR enterprise tools.
• Proficiency in Python and/or PowerShell scripting for automation and response.
• Strong understanding of detection logic, incident handling, and response workflows.
• Excellent communication and collaboration skills.
• Self-motivated with the ability to operate independently and manage multiple priorities in a fast-paced environment.

Preferred Qualifications

• Experience in consulting, finance, or technology environments.
• Familiarity with Defender XDR, osquery, and data visualization tools (e.g., Power BI).
• Certifications such as GIAC, GCFA, GCFR, or equivalent.

Work Environment

• Participation in an on-call rotation for after-hours incidents is required.
• Occasional weekend work may be necessary for major projects or incidents.
• Remote (U.S. only) — work from anywhere while staying closely connected to a small, collaborative team.
• Expect a nimble, hands-on, high-ownership culture where your work has visible, immediate impact.

At Taxwell, we believe our work benefits from the diverse perspectives of our employees. As such, Taxwell welcomes and celebrates diversity and inclusion and is committed to equal opportunity employment. At Taxwell, you can expect a supportive, open, and inclusive atmosphere and a team that values your contributions.

Taxwell is committed to providing an environment of mutual respect where equal employment opportunities are available to all applicants without regard to race, color, religion, sex, national origin, age, disability, marital status, sexual orientation, gender identity, veteran status, and any other status protected under applicable law. Taxwell considers information gathered in the hiring process, including information on this application, confidential, and only shares it on a need-to-know basis or as required by law.

If you need assistance or accommodation due to a disability, you may contact us at [email protected] or by calling 828-349-5703 extension 6049 to speak with a member of the HR Talent Acquisition team.