Information Security Analyst

Qualifications

• 3-5 years in an information security role with technical and compliance experience
• Hands-on expertise with SIEM platforms like Splunk or Microsoft Sentinel
• Familiar with vulnerability management tools like Tenable Nessus or Qualys
• Understanding of SOC 2 criteria and NIST Cybersecurity Framework
• Knowledge of common attack techniques and defense strategies, MITRE ATT&CK is a plus
• Strong analytical skills and ability to work independently or in teams
• Excellent communication skills for conveying technical information to non-technical audiences

Responsibilities

• Monitor and triage alerts across the SIEM platform and escalate incidents
• Manage the entire vulnerability management lifecycle from scanning to remediation
• Support and enhance endpoint, email, and network security tools
• Conduct threat hunting and help develop detection rules
• Participate in incident response activities and post-incident reviews
• Assist with SOC 2 Type II compliance and coordinate with auditors
• Conduct security risk assessments and track remediation efforts

Benefits

• Support for ongoing professional development and certification
• Collaboration with cross-functional teams to enhance operational security
• Opportunities to contribute to significant compliance projects
• Engagement in threat intelligence and hunting initiatives
• Access to advanced security tooling and platforms