About the opportunityPropelled Brands is seeking an experienced Information Security Analyst to protect the confidentiality, integrity, and availability of the organization's information systems and infrastructure. In this critical position, you will lead security incident response, conduct vulnerability assessments, and implement security automation to reduce risk across on-premises, Google Cloud, and SaaS environments. You will provide ongoing threat detection, investigation, and remediation while contributing directly to strategic security planning and overall program maturity.
How you will make a difference- Security Operations & Incident Response: Lead the response to complex security incidents using industry frameworks (e.g., NIST CSF 2.0) alongside our MDR partner, while conducting proactive threat hunting and analyzing suspicious files and URLs.
- Enterprise Security Stack Management: Own the operational health, configuration, and continuous tuning of our enterprise security stack-including SIEM/SOAR, EDR, Email Security Gateway, Cloud Security, and NG-Firewalls-and integrate security controls into new and existing systems.
- Vulnerability, Risk & Patch Management: Perform regular security and vulnerability assessments, monitor external exposure, coordinate penetration testing, and partner with infrastructure and engineering teams to set patching priorities and track SLA compliance.
- Identity, Access & Zero-Trust Governance: Audit user access privileges, enforce zero-trust security controls, and oversee identity governance across cloud platforms, SaaS suites, and secure remote access tools to minimize attack surface.
- AI Tool Governance: Oversee the secure deployment and use of enterprise AI tools (including Claude Enterprise, Gemini Enterprise, and NotebookLM), managing data access settings and acceptable use policies.
- Governance, Risk & Compliance (GRC): Develop and maintain security policies and documentation aligned with industry best practices, support privacy compliance, and conduct ongoing third-party risk assessments for vendors, SaaS tools, and supply chain partners.
- Resilience & Physical Security: Participate in designing, testing, and executing disaster recovery and business continuity plans (including backup validation for ransomware resilience), and administer physical security systems (cameras and access control) to integrate physical events into incident response.
- Security Awareness & Executive Reporting: Run the employee security awareness and phishing simulation program, and report on security posture, incidents, and risk metrics to leadership with actionable recommendations to mature the program.
A strong candidate will have- Education & Experience: A bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent professional experience) paired with 3+ years of IT security experience, including at least 1 year of hands-on experience in incident response and threat analysis.
- Certifications: At least one (and preferably more) industry certification, such as CISSP, CISM, CISA, Security+, or SANS/GIAC.
- Security & Cloud Tooling Expertise: Hands-on expertise with security monitoring and cloud platforms (such as SentinelOne EDR/MDR, SIEM/SOAR, Splunk, Google Workspace, Google Cloud Platform [GCP], and Security Command Center Enterprise [SCCE]), alongside familiarity with tools like KnowBe4, Abnormal AI, Twingate, Any.Run, Shodan, Cisco Meraki, Fortinet, Kandji, NinjaOne, and Rhombus.
- Technical & Scripting Proficiency: Strong proficiency in Python and PowerShell for security automation, backed by a solid grasp of network security, application security, and industry frameworks (NIST, ISO 27001).
- Analytical & Ethical Execution: Strong analytical, problem-solving, and decision-making skills, combined with high integrity and strict adherence to professional cybersecurity standards.
- Communication & Work Environment: The ability to collaborate effectively with IT teams, external vendors, and end-users; work full-time in a professional office environment (with occasional evening/weekend support as duties demand); occasionally lift up to 50 pounds; and accommodate up to 10% travel (including some international).
We believe that everyone is capable of great things. Because of this, we encourage you to apply even if you do not have 100% of the qualifications listed above.
