Information Security Analyst

Cisive

Information Security Analyst monitoring and triaging alerts, managing compliance, and supporting cybersecurity practices at Cisive. Responsible for vulnerability management and incident response.

Posted 6/12/2026full-timeRemote • Maryland • 🇺🇸 United StatesMid-LevelSeniorWebsite

Tech Stack

Tools & technologies

Cyber SecuritySplunk

About the role

Key responsibilities & impact

Monitor, tune, and triage alerts across the SIEM platform, escalating confirmed incidents per established runbooks
Manage the vulnerability management lifecycle— including scanning, prioritization, remediation tracking, and executive reporting
Support endpoint security, email security, and network monitoring tools; identify gaps and recommend configuration improvements
Conduct periodic threat hunting activities and contribute to the development of detection rules and playbooks
Participate in incident response activities including containment, eradication, and post-incident reviews
Support ongoing SOC 2 Type II compliance efforts, including evidence collection, control testing, and coordination with external auditors
Assist with NIST CSF assessments — mapping current controls to framework functions and identifying gaps for remediation
Maintain and update security policies, standards, and procedures in collaboration with senior team members
Conduct periodic security risk assessments and contribute findings to the organization risk register
Track remediation efforts for identified risks and control deficiencies through to closure
Partner with IT, Engineering, and business stakeholders to embed security best practices into day-to-day operations
Assist in security awareness initiatives and provide guidance to staff on security topics
Prepare clear, concise reporting on security metrics, vulnerability status, and compliance posture for management

Requirements

What you’ll need

3–5 years of experience in an information security role with exposure to both technical operations and compliance functions
Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, or equivalent)
Working knowledge of vulnerability management tools such as Tenable Nessus/IO or Qualys
Demonstrated understanding of SOC 2 Trust Service Criteria and NIST Cybersecurity Framework
Familiarity with common attack techniques and defensive countermeasures (MITRE ATT&CK familiarity a plus)
Strong analytical and problem-solving skills
Excellent written and verbal communication skills; ability to translate technical findings for non-technical audiences

Benefits

Comp & perks

Health insurance
Paid time off
Flexible work arrangements
Professional development
Wellness programs

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

SIEMvulnerability managementthreat huntingincident responsesecurity risk assessmentssecurity policiescontrol testingconfiguration improvementsdetection rulesremediation tracking

Soft Skills

analytical skillsproblem-solving skillswritten communicationverbal communicationcollaborationguidancereportingstakeholder engagementsecurity awarenesstranslating technical findings