About Us:
Founded in 1992 in Dover, NH, Planet Fitness is one of the largest and fastest-growing franchisors and operators of fitness centers in the United States by number of members and locations. We have over 2,700+ stores in 50 states, the District of Columbia, Puerto Rico, Canada, Panama, Mexico, Spain, and Australia. 90% of Planet Fitness stores are owned and operated by independent franchisees.
At Planet Fitness, our unique mission has always been to enhance people’s lives by providing a high-quality fitness experience in a welcoming, non-intimidating environment. And we’re proud of the amazing Planet Fitness team that supports our clubs and team members. They are comprised of dynamic, dedicated, and talented individuals who represent our values of integrity, transparency, passion, respect, and excellence (while having fun!) in everything they do.
Joining the PF family means being part of a company that cares about bettering the health and wellbeing of our communities. It means being a part of a supportive, engaging workforce with an inclusive culture that values diversity and creates an environment where everyone can feel they belong. It means encouraging professional growth and development. It means making true, lasting connections with your co-workers with celebrations, team building activities and engaging corporate events! It means creating a positive impact in our local communities through our Judgement Free Generation® philanthropic initiative. It means being part of a brand that you can be proud of!
For the past 30 years, we’ve helped millions of people in their fitness journey and revolutionized the industry along the way. And we’re just getting started!
Overview:
The Security Operations Analyst will play a critical role in safeguarding an organization’s IT environment by monitoring, detecting, analyzing, and responding to cybersecurity threats and incidents. This position leverages tools such as Security Information and Event Management (SIEM) systems, Intrusion Detection and Prevention Systems (IDS/IPS), and threat intelligence feeds to proactively identify and assess potential security risks.
The Analyst will be responsible for investigating security alerts, escalating incidents when appropriate, and collaborating with IT and cybersecurity teams to contain and remediate threats. Additionally, the role contributes to the continuous improvement of security operations by maintaining accurate documentation, refining incident response procedures, and supporting compliance with internal policies and external regulatory requirements.
The Security Operations Analyst will be a key contributor to the organization’s enterprise-wide security program, working in close partnership with the Senior Director of Information Security. This role is instrumental in supporting and expanding the company's brand-wide security initiatives through active collaboration with IT, cross-functional business units, and external partners.
The ideal candidate will possess a strong understanding of security tool administration, monitoring, alerting, and incident response. This position plays a vital role in ensuring adherence to security standards, regulatory compliance, and industry best practices. By proactively identifying risks and contributing to the evolution of security operations, the Security Operations Analyst helps protect the organization’s assets and strengthens its overall security posture.
This role follows a hybrid schedule and requires regular, in-person work at our Boston, MA or Hampton, NH office. Our hybrid model is M/T/W in office and TH/F are optional work-from-home. Candidates must reside within commuting distance of one of these locations. Fully remote work is not available for this role.
Responsibilities:
- Collaborate closely with the Senior Director of Information Security to support and execute security, risk management, and compliance initiatives across the organization.
-
Monitor and manage security systems including Security Information and Event Management (SIEM) platforms, Intrusion Detection/Prevention Systems (IDS/IPS), Endpoint Detection and Response (EDR) tools, and other key security technologies.
-
Analyze system logs, alerts, and events to detect abnormal behavior, malicious activity, and policy violations.
-
Perform initial triage, classification, and prioritization of security events to ensure timely and effective response.
-
Respond to, investigate, and manage security incidents following established procedures and escalate complex cases as necessary.
-
Execute incident response plans and maintain detailed documentation, including incident records, timelines, and root cause analyses.
-
Conduct post-incident reviews to identify lessons learned and drive continuous improvement.
-
Leverage both internal and external threat intelligence sources to stay informed about emerging threats, vulnerabilities, and attack vectors.
-
Correlate threat intelligence with internal telemetry to identify potential risks, indicators of compromise (IOCs), or vulnerabilities.
-
Assist in the configuration, tuning, and maintenance of SOC technologies, including SIEM, EDR, IDS/IPS, and related tools.
-
Collaborate with other security team members to enhance detection logic, refine alerting mechanisms, and reduce false positives.
-
Develop and maintain comprehensive documentation, including detection rules, response playbooks, and investigation procedures.
-
Generate regular reports detailing key security metrics, incident trends, and threat intelligence insights for technical and executive stakeholders.
-
Support cross-functional investigations and remediation efforts in coordination with IT, DevOps, and other business units.
-
Communicate security findings and incident updates effectively to both technical and non-technical audiences.
-
Ensure all incident handling and investigative activities align with internal policies and comply with relevant regulatory standards (e.g., GDPR, PCI-DSS, and data privacy laws).
-
Stay current with cybersecurity developments, tools, threat actor tactics, and industry best practices.
-
Participate in ongoing training, knowledge-sharing sessions, and professional development initiatives, including certifications.
-
Contribute to the enhancement and optimization of Security Operations Center (SOC) workflows, processes, and playbooks.
-
Perform proactive threat hunting and participate in periodic vulnerability assessments to strengthen security posture.
-
Foster a culture of security awareness and compliance throughout the organization.
Qualifications:
- Bachelor's degree in Cybersecurity, Information Technology, or a related field, coupled with a minimum of 3 years of relevant experience in information security
-
Familiarity with SIEM, IDS/IPS, EDR, and other security technologies
-
Understanding of network protocols, system logs, and security controls
-
Strong analytical and problem-solving skills
-
Technical acumen and willingness to administer a variety of security toolsets including but not limited to XDR and vulnerability management tools
-
Relevant certifications, such as CompTIA Security+, GIAC (e.g., GCIH, GCIA), or EC-Council Certified SOC Analyst (CSA) are strongly preferred
-
Experience with cloud security monitoring (e.g., AWS, Azure)
-
Exposure to SOAR platforms and automated incident response tools
-
Knowledge of cybersecurity frameworks (e.g., NIST, MITRE)
-
Familiarity with SIEM tools (e.g., Splunk, QRadar, Sentinel)
-
Understanding of networking, firewalls, and endpoint security
-
Background within retail, payment, and e-commerce sectors
-
Strong knowledge of security frameworks, including NIST and ISO 27001
-
Highly detail-oriented and efficient, with exceptional planning, prioritization, organizational, and project management skills
-
Extremely detail-oriented, efficient, and organized with an exceptional ability to establish priorities and objectives
-
Excellent presentation and communication skills along with the ability to communicate effectively across all levels of the organization
-
Able to establish and maintain effective, collaborative work relationships with diverse individuals, internally and externally
-
Creative, progressive, thought leadership with the ability to influence at all levels of the organization
-
Dedicated learner with a natural curiosity for consistent growth
-
Exhibits comfort, ease, and flexibility working in an extremely fast-paced ever-changing, deadline-driven environment
-
Cooperative team player with an upbeat, positive, “can-do” attitude!
-
Availability to work off-hours and provide on-call support as needed
Perks:
Planet Fitness cares about you and your well-being. We offer a comprehensive benefits package to eligible employees which includes the core medical, dental, vision, life and disability as well as supplemental accident, hospital and critical illness coverage options. In addition, we are proud to offer eligible employees a generous time off program (including volunteer time), childcare reimbursement, paid parental leave, pet care reimbursement, tuition reimbursement, free Black Card membership, learning and development programs and a whole host of engagement activities. We offer a 401(k) Plan with safe harbor employer matching and an employee stock purchase plan.This role is also eligible to participate in an annual corporate bonus incentive program based on company financial and personal performance.
The salary for NH-based and MA-based employees hired into this role will be aligned with the range below. This is a good faith estimate, and the amount of base salary will correspond with a candidate’s professional experience, qualifications and internal equity.
Annual Base Salary Range: $110,000-$135,000
Note to Applicants: We have been made aware of an increasing number of hiring fraud schemes across numerous platforms. Planet Fitness never requires advance payments of any kind for computer equipment or any other purpose at the start of employment. Any request for you to provide payment information during the application process is part of a fraud scheme. Further, we recommend that you do not provide sensitive personal information (SSN, DOB, driver’s license number) as part of the initial application process.
