Information Security Analyst

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for an Information Security Analyst based in United States.** This role supports the protection of cloud, infrastructure, applications, and enterprise systems across a broad information security environment. You will monitor security solutions, investigate potential incidents, address vulnerabilities, and help strengthen the organization’s overall security posture. The position combines hands-on security operations with vulnerability management, auditing, incident response, and secure architecture initiatives. You will work closely with technology and application development teams to identify risks and implement effective security controls. The role also provides opportunities to contribute to security policies, standards, baselines, business continuity planning, and disaster recovery strategies. You will stay current with emerging threats, security technologies, and industry frameworks to help continuously improve security practices. This is a fully remote opportunity for a technically curious professional who enjoys solving complex security challenges in a collaborative environment. ### Accountabilities: - Deploy, integrate, and initially configure new security solutions and enhancements to existing solutions in accordance with established security procedures and standards. - Monitor the performance and effectiveness of security solutions and maintain their operational configurations according to approved baselines and industry best practices. - Review logs and reports from security tools, workstations, servers, network devices, and other systems to identify suspicious activity and determine appropriate responses. - Investigate and participate in the resolution of security incidents, vulnerabilities, and other problematic activity. - Respond to security-related tickets and end-user concerns, providing appropriate technical guidance and support. - Review cloud, on-premises, and end-user system configurations and recommend improvements to strengthen the overall security posture. - Conduct and support vulnerability assessments, penetration testing, security audits, and related security evaluation activities. - Maintain secure configuration baselines using industry frameworks and standards such as CIS and CSA. - Partner with application development teams to identify, assess, and remediate application vulnerabilities. - Recommend new security technologies, controls, or enhancements to improve enterprise security capabilities. - Maintain awareness of emerging cybersecurity threats, attack vectors, security solutions, and evolving industry practices. - Support the planning and design of enterprise security architecture and contribute to broader security initiatives. - Participate in developing and maintaining security policies, standards, baselines, guidelines, and procedures. - Contribute to business continuity and disaster recovery planning and design. - Provide on-call support for end users and security solutions when required. - Conduct research into information security issues, products, technologies, and emerging practices. - Perform additional security and technology responsibilities as assigned. ### Requirements - College diploma or university degree in Cybersecurity, Computer Technology, or a related field, and/or approximately two years of equivalent professional experience. - 2+ years of technical experience in cloud, application, infrastructure, and/or network security. - At least 1 year of hands-on AWS experience. - At least 1 year of experience working with cloud-based security technologies. - At least 1 year of experience working with Linux operating systems. - One or more relevant certifications, such as AWS Certified Associate-level certifications, AWS Certified Security – Specialty, GIAC Cloud Security Essentials (GCLD), CompTIA Security+, or GIAC Security Essentials (GSEC). - Familiarity with cloud security principles and best practices. - Experience with AWS IAM, infrastructure, security services, logging, serverless services, and AWS Security Hub. - Experience implementing security controls and configurations across technologies such as AWS, Azure, GCP, Microsoft Active Directory, and Linux. - Working technical knowledge of cloud and SaaS security solutions and tools. - Familiarity with DevSecOps, application security, and secure software development lifecycle methodologies. - Scripting experience using Bash or Python. - Knowledge of threat modeling methodologies and security frameworks including NIST CSF, NIST SP 800-53, NIST SP 800-171, CIS, CSA, and ISO 27000. - Familiarity with security technologies such as firewalls, WAF, SIEM, SOAR, MDR, IAM, PAM/PIM, network packet analysis tools, Nmap, IDS/IPS, vulnerability management platforms, SAST/DAST, and Burp Suite. - Exposure to encryption, antivirus/malware protection, penetration testing, and source code scanning. - Basic understanding of IP, TCP/IP, and other network administration protocols. - Experience with incident response or penetration testing is a plus. - Strong analytical, troubleshooting, research, and problem-solving abilities. - Excellent written, verbal, and interpersonal communication skills, with the ability to explain technical concepts in business- and user-friendly language. - Ability to prioritize and execute tasks effectively in a high-pressure environment. - Highly self-motivated, detail-oriented, accountable, and comfortable working independently. - Strong team orientation and the ability to collaborate effectively with technical and non-technical stakeholders. - Ability to remain stationary for approximately 50% of the workday and regularly operate computers and other office productivity equipment. - Ability to communicate frequently through video calls with internal and external stakeholders. ### Benefits - **$76,700–$101,000 annual salary range**, with actual compensation determined based on skills, experience, education, certifications, geographic location, and other relevant factors. - Fully remote position within the United States. - Full-time employment with comprehensive benefits. - Medical, dental, and vision insurance. - Supplemental income insurance. - Employer-paid disability insurance. - Employer-paid life insurance. - Pre-tax Flexible Spending Accounts for medical and dependent care. - 401(k) retirement plan. - Opportunity to work across cloud, infrastructure, application, and enterprise security domains. - Exposure to modern security technologies, AI-enabled and evolving cybersecurity practices, and industry-standard frameworks. - Collaborative environment focused on continuous learning, innovation, teamwork, and professional development. - Opportunity to contribute to meaningful technology and security initiatives supporting services designed to improve emotional wellness and access to care. - Commitment to equal opportunity, diversity, inclusion, and consideration of candidates from varied professional backgrounds. - No application, processing, or training fees are charged during the recruitment process.