
Information Security Analyst
Xpansiv
full-time
Posted on:
Location Type: Remote
Location: United States
Visit company websiteExplore more
Salary
💰 $80,000 - $95,000 per year
About the role
- Monitor, investigate, and respond to security alerts and incidents across systems, networks, and cloud environments.
- Perform regular vulnerability assessments, patch verification, and risk remediation tracking.
- Support security awareness programs and ensure employees adhere to company security policies, procedures and standards.
- Assist in managing endpoint security tools (EDR, DLP, MDM, etc.) and identity/access management systems.
- Collaborate with IT, DevOps, and engineering teams to implement secure configurations, code reviews, and cloud security best practices.
- Conduct periodic access reviews and support audit and compliance efforts (SOC 2, ISO 27001, etc.).
- Document incident response actions and recommend process improvements.
- Contribute to risk assessments and control testing for new vendors, applications, and systems.
- Stay current on emerging threats, vulnerabilities, and regulatory requirements impacting the business.
- Demonstrate a business-first mindset.
Requirements
- 3–5 years of hands-on experience in cybersecurity, information security, or IT risk.
- Strong understanding of networking fundamentals, endpoint protection, and cloud security (AWS, Azure, or GCP).
- Familiarity with SIEM platforms, SAST, DAST, vulnerability management tools, and incident response processes.
- Familiarity and experience with common EDR platforms.
- Knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
- Excellent problem-solving and communication skills.
- Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
cybersecurityinformation securityIT risknetworking fundamentalsendpoint protectioncloud securityvulnerability managementincident responsesecurity frameworksrisk assessments
Soft skills
problem-solvingcommunicationcollaborationbusiness-first mindset
Certifications
ISO 27001CIS Controls