Xpansiv

Information Security Analyst

Xpansiv

full-time

Posted on:

Location Type: Remote

Location: United States

Visit company website

Explore more

AI Apply
Apply

Salary

💰 $80,000 - $95,000 per year

About the role

  • Monitor, investigate, and respond to security alerts and incidents across systems, networks, and cloud environments.
  • Perform regular vulnerability assessments, patch verification, and risk remediation tracking.
  • Support security awareness programs and ensure employees adhere to company security policies, procedures and standards.
  • Assist in managing endpoint security tools (EDR, DLP, MDM, etc.) and identity/access management systems.
  • Collaborate with IT, DevOps, and engineering teams to implement secure configurations, code reviews, and cloud security best practices.
  • Conduct periodic access reviews and support audit and compliance efforts (SOC 2, ISO 27001, etc.).
  • Document incident response actions and recommend process improvements.
  • Contribute to risk assessments and control testing for new vendors, applications, and systems.
  • Stay current on emerging threats, vulnerabilities, and regulatory requirements impacting the business.
  • Demonstrate a business-first mindset.

Requirements

  • 3–5 years of hands-on experience in cybersecurity, information security, or IT risk.
  • Strong understanding of networking fundamentals, endpoint protection, and cloud security (AWS, Azure, or GCP).
  • Familiarity with SIEM platforms, SAST, DAST, vulnerability management tools, and incident response processes.
  • Familiarity and experience with common EDR platforms.
  • Knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
  • Excellent problem-solving and communication skills.
  • Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard skills
cybersecurityinformation securityIT risknetworking fundamentalsendpoint protectioncloud securityvulnerability managementincident responsesecurity frameworksrisk assessments
Soft skills
problem-solvingcommunicationcollaborationbusiness-first mindset
Certifications
ISO 27001CIS Controls