Forage

Security Analyst

• Triage and manage incoming security requests from entire company.
• Own and manage the full vendor security assessment lifecycle (new vendors and annual reviews).
• Own and build device management and provisioning process.
• Troubleshoot and enhance in-office IT, wifi and physical security.
• Partner with product/engineering teams to clarify which controls apply to new features, systems, or architectural changes.
• Read python code to understand vulnerabilities and help validate fixes and make small bug fixes or configuration updates when appropriate.
• Maintain organized, audit-ready repositories of policies, SOC reports, and control documentation.
• Assist with security questionnaires from enterprise customers.
• Coordinate evidence collection and organize materials for quarterly/annual audits.
• Update and refine security policies to reflect current controls and organizational practices.
• Track remediation of security findings from vulnerability scans, pentests, and audits.