Security Analyst II

We’re Auros—the leader in human insight. Our mission is to help organizations craft exceptional customer experiences through fast, actionable feedback.

We empower teams to build the best products and experiences by embedding real human perspectives into every stage of the development process—from ideation to launch. With the world’s strongest participant network, AI-powered analysis, expert services, and seamless integrations, we help companies eliminate guesswork, align stakeholders, and bring customer needs into sharp focus.

Trusted by more than 3,000 organizations worldwide—including 75 of the Fortune 100— Auros delivers measurable business outcomes, reduces risk, and helps teams deliver with confidence. Joining our team means being part of a passionate group focused on transforming how companies understand and connect with their customers.

Let’s build experiences people love—together.

- Act as an initial point of contact for the Security queue: triage, prioritize and route tickets, resolve routine requests and escalate the rest, and automate the handling of recurring request types.

- Triage endpoint and security alerts and DLP events using runbooks and AI-assisted analysis, following up with employees and escalating real issues. Own the continuous improvement of this process by analyzing alert volume and false-positive rates, tuning detections with the owning teams, and automating enrichment and first-pass triage.

- Participate in incident response, including triage of employee-reported phishing and social engineering attempts and drafting internal security notices, and drive the follow-up after each incident: post-incident reviews, runbook updates, and process or tooling changes.

- Review, validate and refine AI-drafted responses to security questionnaires, RFPs and due diligence requests for Sales, pulling in subject matter experts when needed. Keep the answer library, standard responses and Trust Center documents accurate as the source of truth for those responses, and handle Trust Center access requests.

- Join customer calls to walk through Auros’s security posture, with support from senior team members.

- Run first-pass vendor security reviews as part of third-party risk management, using AI to summarize vendor documentation and flag gaps.

- Review requests for new software, browser extensions and AI tools against the approval process, and route AI requests through the AI use case intake.

- Support access checks, customer data deletion requests, reporting of impersonation or fraudulent domains, and internal and external audits.

- Build and maintain automations, AI agents and integrations across our security tools to cut manual work, and keep runbooks current as living documents that both people and AI tooling can execute.

- Define and track operational metrics such as time to triage, time to resolve and questionnaire turnaround, and use them to prioritize improvements, pilot new tools or ways of working, and show their impact.

- Demonstrate Auros’s values through work product and day-to-day team interactions.

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.

Don’t meet every single requirement but excited about the role? We encourage you to apply. Research shows that some candidates are less likely to apply unless they meet 100% of the qualifications—but you may be exactly who we’re looking for. Diverse perspectives drive innovation, and we’re committed to building a team with a wide range of backgrounds, experiences, and skills.

Application Process

• Meet with a Recruiter
• Meet the Hiring Manager
• Participate in a Panel Interview
• Final Interview (if applicable)
• Offer Stage

Accommodations

At Auros, we’re committed to creating inclusive and accessible experiences for all candidates. We believe diverse perspectives are essential to building exceptional products and experiences. If you require accommodations or would like us to tailor the interview process to better meet your needs, please contact us at talentexperience@usertesting.com.

Auros is an Equal Opportunity Employer and a participant in the U.S. Federal E-Verify program. Women, minorities, individuals with disabilities and protected veterans are encouraged to apply. We welcome people of different backgrounds, experiences, abilities and perspectives. Auros will consider qualified applicants with criminal histories in a manner consistent with the San Francisco Fair Chance Ordinance, as applicable.

• Strong written and verbal communication skills, including writing clear, accurate answers for customers and explaining technical topics to non-technical audiences.
• Comfortable working directly with customers and internal teams.
• Highly organized, able to manage multiple requests and deadlines and see work through to completion.
• Self-starter who works independently, follows runbooks and knows when to escalate, and also spots what isn't working and takes the initiative to fix it.
• Experience using AI to automate work, ideally including building AI agents or agent-like workflows that took on repetitive tasks and made a team measurably more efficient
• Technical foundation in security operations (e.g. alerting, endpoint, identity and access management) and incident response fundamentals, enough to understand and explain Auros's overall security posture.
• 3 years of experience in security, IT, compliance, or a customer-facing technical role (e.g. support or solutions).
• Familiarity with security frameworks such as SOC 2, ISO 27001 or NIST CSF.
• Experience completing security questionnaires (SIG, CAIQ) or using compliance tools such as Vanta.
• Experience with ticketing systems such as Jira or Jira Service Management.
• Exposure to DLP, endpoint security or SIEM/alerting tools, including detection or alert tuning.
• Experience building AI agents, automations or integrations (e.g. SOAR or workflow automation platforms), or scripting against security tool APIs.
• Entry-level certification such as CompTIA Security+ or ISC2 CC.

N/A