Senior Security Analyst

About CoLab At CoLab, we help mechanical engineering teams bring life-changing products to market years sooner. We build AI for engineers designing cars, medical devices, and jet engines. Products this complex aren't sketched and sent to production. Teams spend months on iterations, reviews, and tests, predicting how every part performs before anything is built. CoLab is where those reviews happen, and we capture the rationale behind every change. Other tools show what changed between versions. Only CoLab knows why. That's how our AI helps manufacturers like Bobcat, Triumph Motorcycles, and GE Appliances make better decisions, eliminate rework cycles, and get to market faster. Proudly based in St. John’s, Newfoundland, CoLab started with one customer in 2018. Since then we’ve raised a $72M Series C, been named the 57th fastest growing company in North America by Deloitte (Fast 500™), signed multi-year AI partnerships with companies like Bombardier, and grown to a team of 250+. About the Role  Security at CoLab isn't a compliance exercise. It's a core part of earning and maintaining the trust of some of the world's largest engineering organizations. As a Senior Security Analyst, you'll help shape the future of our enterprise security program. You'll be a key member of our Blue Team, responsible for protecting CoLab's cloud infrastructure, corporate systems, and customer data while continuously improving how we detect, investigate, and respond to threats. This is a hands-on technical role reporting to our CISO. You'll spend time investigating alerts, leading incident response efforts, refining detection capabilities, improving security controls, and helping teams make sound security decisions before problems emerge. You won't be handed a mature playbook and asked to follow it. You'll help build it. If you enjoy solving complex security problems, taking ownership, and balancing strong technical judgment with practical business decisions, you'll likely find this role rewarding. Our Ideal Candidate You're the type of person who sees an alert and wants to understand the full story—not just close the ticket. You can move comfortably between technical investigation, risk discussions, and stakeholder communication. During an incident, you're calm, methodical, and focused on facts. Afterward, you're just as interested in improving systems and processes to prevent it from happening again. You'll thrive here if you enjoy: Solving difficult security problems with incomplete information Taking ownership of outcomes, not just tasks Learning continuously as technologies and threats evolve Working closely with Security, Technology, and Product teams Balancing strong security practices with business realities Job Responsibilities Lead investigation and response activities for security incidents, suspicious activity, and emerging threats Design, implement, and improve security monitoring, detection, and response capabilities across our AWS environment Devel...