ActiveState

Security Analyst

•Assist in managing the cross-functional InfoSec Squad to maintain and enhance compliance management and continually monitoring, assessing and strengthening ActiveState’s security posture.
•Collaborate with Product, Engineering, and Business teams to embed security into systems and processes, ensuring compliance with secure development frameworks and driving continuous security improvements.
•Assist in implementing and maintaining information security policies, standards and guidelines for data governance, privacy, and access controls and leading audits as required.
•Assist in the maintaining SOC 2 Type 2 compliance and achievement of additional certifications, ensuring alignment with evolving industry regulations and frameworks (e.g., ISO 27001, NIST, GDPR, HIPAA, PCI-DSS), while staying ahead of evolving standards, and continuously strengthening the overall security posture.
•Assist in risk assessments, vulnerability management, and incident response, including 24/7 monitoring, alert triage, initial investigations, and maintaining detailed records of these along with remediation efforts.
•Facilitate and support the execution of SAST, DAST, penetration testing, and other industry-leading security assessments to achieve organizational security objectives.
•Support the evaluation and management of third-party vendors to ensure they meet compliance and certification requirements.
•Coordinate and support security awareness and training programs to strengthen the security culture across the organization.
•Coordinate responding to security questionnaires with internal and external parties.
•Stay current with emerging threats, vulnerabilities, and security technologies.
•Contribute to security reporting and metrics to inform leadership decisions and drive continuous improvement efforts.
•Assist in configuring and maintaining security tools and systems, such as SIEM platforms and endpoint protection solutions, to ensure optimal performance and coverage.
•Perform daily review of CVEs and other vulnerability data related to our product offerings and produce the reports required for our teams to action them, including VEX documents, risk register, etc.

Information Security Analyst