Security Analyst

• Own the Mission Critical vendor portfolio: maintain the tiered list, validate it against business impact analysis findings, support exit and failover planning, and drive risk treatment for single points of failure with Procurement, Business Continuity, and business owners
• Manage the Highest-Risk vendor portfolio: keep security, privacy, and compliance assessment depth aligned to active vendor exposure, and drive remediation with the relevant domain teams
• Support vendor incident response: vendor-side impact assessment, business-owner coordination, and post-incident risk treatment
• Run inherent risk assessments through the intake workflow: review agent-prefilled tiering, evaluate vendor controls and evidence across security, privacy, compliance, and operational risk, determine residual risk, and route to domain reviewers where deeper assessment is warranted
• Operate the TPRM issue management workflow: document findings with clear risk statements, assign owners, track treatment to closure
• Tune and maintain the TPRM Risk Agent alongside the team through prompt development, backtest calibration, error analysis, and output QA
• Contribute to KPI/KRI reporting on portfolio coverage and cycle time

Third Party Risk Analyst, Security GRC

• Support maintenance of HITRUST, HIPAA, and SOC 2 compliance tasks under CTO guidance
• Help draft and update internal policies and security documentation
• Conduct annual risk assessments and evidence gathering for third-party audits
• Monitor security practices and incidents, and drive mitigation efforts
• Execute employee onboarding and offboarding checklists (system access, device setup, deprovisioning)
• Manage internal tools, access controls, device management, and vendor reviews
• Support device management and assist with vendor review documentation
• Help maintain GCP infrastructure compliance documentation alongside the CTO
• Support incident response and change management procedures

IT Analyst, Security

Threat Intelligence Specialist

• Serve as a point of contact for law enforcement inquiries, including as the DRI for law enforcement requests from Brazil, providing technical assistance and records in alignment with legal and compliance guidelines.
• Evaluate, process, and fulfill legal information requests (e.g., subpoenas) in a timely manner, determining any risks or sensitivities associated with each request.
• Conduct blockchain analysis using investigative tools such as Chainalysis, TRM Labs, and Elliptic to trace illicit fund flows and identify criminal typologies.
• Pursue investigations into criminal activity with oversight from senior investigators, building cases from limited initial indicators and escalating urgent or sensitive matters to management.
• Remain up to date on relevant laws, policies, and evolving financial crime typologies across the cryptocurrency ecosystem.

Global Intelligence Analyst

• Identify new threats to IT systems and create rules to identify, prevent and remediate.
• Expand security auditing and ensuring the proper ongoing operations of security tools
• Providing internal information security consulting for other business and IT projects. This includes identifying, documenting and implementing secure configurations and architectures.
• Assist with the creation and maintenance of security policies, standards, guidelines and other documentation for IT and business audiences.
• Responsible for security metrics on a monthly basis to ensure the proper service levels are maintained.
• Support incident response lifecycle including identification, triage, remediation and communications for security breaches and malware infections.
• Identify latest security vulnerabilities, malware, breaches, and industry news which could affect the firm
• Maintains vulnerability management process including identification, rating, remediation and monitoring.
• Provides additional coverage for approvals and notifications to other IT groups for critical time sensitive operations including firewall changes, password reset approvals, and application vetting.
• Assist with automation of security processes, integration of security platforms, and creation of tools.
• Ongoing reviews of access controls by investigating improper access; revoking access; reporting violations; monitoring requests; recommending improvements
• Provides technical leadership for incident response capabilities including malware analysis, breach investigation, and remediation efforts.
• Creation of internal training materials and other items to support the advancement of information security within the firm.
• Maintains awareness of industry trends and their advantages with the ability to make recommendations for improving technology used by the firm.
• Participates in and/or manages cross-functional team projects to implement new or updated technology.
• Cross-trains other IT staff in security best practices, the use or maintenance of technology.
• Effectively manages small projects.
• Displays professionalism, quality service and a "can do" attitude to internal members/departments of the Firm as well as external clients and vendors via electronic and print correspondence, over the telephone and in-person.
• Provides information security knowledge transfer to other IT staff and business
• Assumes additional responsibilities as assigned.

• Discover and define new quantitative risk signals where no established metrics exist, using subject matter expertise to surface early, weak, or unconventional indicators
• Translate complex trust and safety challenges into measurable signals that can be tracked and stress-tested over time
• Develop upstream early-warning and signal frameworks that inform downstream detection and mitigation efforts
• Analyze risk trends to assess the underlying drivers and causal factors behind those changes
• Conduct data mining and statistical modeling to understand how risks originate, evolve, and propagate across systems
• Design adversarial scenarios, and quantitative stress tests to assess exposure, coverage gaps, and vulnerabilities
• Produce clear data-driven briefs to support risk prioritization, contingency planning, and strategic risk products across teams

Quantitative Intelligence Analyst

• Serve as a Cybersecurity Analyst for the program throughout the stages of system engineering, deployment and sustainment
• Successfully execute Risk Management Framework (RMF) process through all phases
• Tasking includes categorization of the system, development of System Security Plan (SSP), development of Security Assessment Plan (SAP)
• Documentation of NIST 800-53 Security Control implementation
• Develop Security Program Actions and Milestones (POA&Ms)
• Work with all program ISSMs and external stakeholders
• Help identify Cybersecurity vulnerabilities and compliance issues
• Provide status updates to the ISSM for RMF authorization status for various RMF packages
• Track and identify cybersecurity risks and report to ISSM, cyber leads and engineering teams

Cybersecurity Analyst

• Support the SCRA Lead in executing Twilio's global security regulatory strategy
• Independently interpret complex and ambiguous regulatory frameworks and provide structured outputs
• Support the development and maintenance of regulatory repositories and systems of record, ensuring accuracy and audit readiness
• Execute and continuously improve the Cyber Regulation Intake & Triage process in partnership with Legal
• Map regulatory requirements to internal control frameworks, identifying gaps
• Develop regulator-ready and high-quality artifacts, including evidence mappings and control narratives
• Identify, analyze, and escalate regulatory risks and audit obligations
• Partner cross-functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams

Security Compliance and Regulatory Affairs Analyst

• Serve as a Senior Cybersecurity Analyst for the program
• Execute Risk Management Framework (RMF) process through all phases of RMF process
• Categorization of the system
• Development of System Security Plan (SSP)
• Development of Security Assessment Plan (SAP)
• Documentation of NIST 800-53 Security Control implementation
• Development of Security Program Actions and Milestones (POA&Ms)
• Work with all program ISSMs and external stakeholders
• Identify cybersecurity vulnerabilities and compliance issues
• Incorporate findings into the system POA&M
• Work with the ISSM to answer data calls and TASKORDS/OPORDS
• Provide status updates to the ISSM for RMF authorization status for various RMF packages
• Track and identify cybersecurity risks and report to ISSM, cyber leads and engineering teams

Senior Cybersecurity Analyst

• Support a fast-paced, high profile program
• Create, maintain and leverage working relationships with internal and external customers
• Develops, and administers security programs and procedures for classified or proprietary materials, documents, and equipment
• Studies and implements federal security regulations that apply to company operations
• Obtains rulings, interpretations, and acceptable deviations for compliance with regulations from government agencies
• Prepares manuals outlining regulations, and establishes procedures for handling, storing, and keeping records, and for granting personnel and visitor’s access to restricted records and materials
• Conducts security education classes and related briefings
• Investigates security violations and prepares reports specifying preventive action to be taken

Industrial Security Analyst – Level 2/3

• Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System
• Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture
• Be prepared to respond nimbly and effectively to possible cyber incidents
• Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood
• Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities
• Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors
• Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems

• Design, configure, maintain, and optimize operational intelligence collection pipelines supporting real-time monitoring and alerting workflows
• Independently build, curate, tune, and manage structured datasets, collection logic, enrichment workflows, and operational intelligence pipelines
• Develop and refine advanced collection strategies using Boolean logic, heuristics, metadata enrichment, tagging frameworks, geospatial filtering, and signal scoring methodologies
• Drive continuous improvements in signal quality, workflow efficiency, operational relevance, and data reliability
• Deploy, evaluate, monitor, and optimize AI/ML and computer vision models supporting operational intelligence workflows
• Develop, test, and refine LLM-driven workflows, prompt frameworks, and AI-assisted alerting systems
• Support multimodal intelligence workflows integrating text, image, video, metadata, geospatial, and behavioral signals into actionable operational insights
• Partner closely with Product, Engineering, Data Science, Customer Success, and mission stakeholders to operationalize new capabilities and improve workflows
• Lead operational troubleshooting, pipeline hardening, workflow optimization, and issue resolution efforts
• Identify emerging collection opportunities, platform shifts, operational risks, and regional digital ecosystem changes
• Contribute to operational standards, workflow documentation, and best practices for intelligence pipeline engineering
• Mentor junior team members supporting operational intelligence workflows
• Uphold classification, security, legal, and ethical standards for government-facing operational environments

Intelligence Pipeline Analyst

• The Security Analyst is responsible for specific aspects of the security program including regulatory reporting, metrics/KPIs, training and awareness, security process integration and risk management for our clients.
• Protects computer assets by establishing and enforcing system access controls; maintaining disaster preparedness.
• Document, maintain and analyze compliance with IT controls, standard procedures, and policies.
• Demonstrate excellent customer service skills, build credibility and rapport with client technical teams.
• Assist in periodic information risk assessments and audits to ensure that information systems are adequately protected to meet security objectives.
• Assist in collecting security-related evidence for external audits.
• Provide technical expertise during IT security incident response.
• Support IT security inquiries from customers.
• Assist in the review of vendor IT security programs and controls.
• Assist in tracking and maintenance of action plans for the resolution of issues identified during assessments and audits. Provide needed assistance with the execution of those remediation plans.
• Ensure authorized access by investigating improper access; revoking access; reporting violations; monitoring information requests by new programming; recommending improvements.
• Establish physical security by developing standards, policies and procedures.
• Advise on risk levels and security posture through a risk management framework.
• Identify business processes requiring information security Integration.
• Support the design and execution of security exercises.

Information Security Analyst

• Manage and operate the enterprise security awareness and phishing simulation platform, including campaign configuration, content creation, targeting, scheduling, and reporting
• Partner with Security Operations and Incident Response teams to translate active threats and post-incident learnings into targeted awareness campaigns
• Design and execute phishing simulations informed by current threat intelligence and threat actor tactics
• Develop and deliver high-impact security awareness content and campaigns, including e-learning modules, videos, infographics, and threat advisories, tailored to diverse employee populations
• Deliver role-based and annual enterprise-wide security awareness and compliance training, partnering with cross-functional teams to integrate training into onboarding and ongoing employee education
• Analyze program performance and user behavior to refine campaign strategies, increase effectiveness, and reduce organizational risk
• Drive measurable behavior change by improving key metrics such as phishing susceptibility, reporting rates, and time-to-report across the organization
• Collaborate with Cybersecurity Communications Manager and various business stakeholders to deliver clear, actionable messaging
• Continuously evaluate and improve awareness tooling, automation, and campaign workflows

Cybersecurity Awareness Analyst

• Help secure modern cloud environments by identifying exploitable misconfigurations and attack paths across AWS, Azure, and GCP.
• Create prioritization and remediation guidance; track closure outcomes.
• Own SME coverage for cloud exposure: IAM misconfigurations, excessive privileges, insecure storage, network exposure, workload security, and posture drift.
• Partner with cloud platform teams to validate fixes and reduce repeated exposure creation.

Exposure Intelligence Analyst – Cloud Platforms, AWS, Azure, GCP, Cloud Posture

• Research state-level policies and Medicaid programs for target launch states, 6–12 months ahead of launch, to support the expansion roadmap
• Build and maintain a living state policy library - the authoritative internal reference for program eligibility, reimbursement structures, regulatory requirements, and operational implications by state
• Keep records current as policies evolve, and proactively surface changes that affect our roadmap or existing markets
• Become AbbyCare’s resident expert on the programs and policies that enable family caregiving models across states
• Research and maintain an ongoing record of competitors - their footprint, positioning, program participation, and strategic moves
• Surface competitive signals and market shifts to leadership through regular briefings
• Track the broader market landscape to inform where AbbyCare should consider expanding next
• Source and qualify potential acquisition partners that could accelerate entry into target markets
• Maintain a documented pipeline of opportunities with the rationale, signals, and fit assessment for each
• Prepare and submit Medicaid applications to support market launches, on time relative to launch timeline gates
• Deliver structured launch readiness assessments for target states ahead of go/no-go decisions
• Flag policy gaps and regulatory risks early enough to shape the launch plan

Senior Market Intelligence, Expansion Analyst

• operationalizing the Threat Intelligence Platform (TIP)
• tracking priority threats
• delivering actionable, detection‑driven intelligence to security teams and leadership
• identifying, analyzing, and tracking cyber threats that may impact the organization
• collecting intelligence from a wide range of internal and external sources
• analyzing and contextualizing threat intelligence
• supporting security operations through actionable insights
• monitoring and analyzing intelligence from commercial, industry, and OSINT sources
• maintaining and using Threat Intelligence Platforms (TIP)
• integrating intelligence across security tools
• collecting, enriching, and managing actionable IOCs
• providing real‑time intelligence context during investigations and incidents
• responding to ad hoc and time‑sensitive intelligence requests from stakeholders
• producing and delivering intelligence reports and briefings for technical and non‑technical audiences

Cyber Threat Intelligence Analyst

• Design scalable analytical frameworks to evaluate diverse datasets across customer, product, and operations domains.
• Aggregate and harmonize structured and unstructured data into unified customer insight models.
• Build, deploy, and maintain AI/ML models to identify patterns in sentiment, feature demand, and churn risk.
• Translate data findings into clear, actionable insights that inform product prioritization and roadmap decisions.
• Partner with Product, UX, and Customer Success teams to define key experience metrics and develop dashboards that provide real-time visibility into customer trends.

Data Science Analyst – Customer & Product Intelligence

• The Senior Health Equity Analyst/ Data Intelligence Analyst works with end-user requests to detail moderately to sophisticated business requirements, data definitions, business rules, and data quality requirements support of enterprise data intelligence projects.
• Creates specifications for reports and analysis based on business/clinical needs and data elements required or available.
• Produces data sets, reports, ad-hoc requests, dashboards, etc.
• Conducts data analysis in support of a variety of analytic solutions.
• Writes moderately sophisticated structured Query Language (SQL) codes and queries. Analyzes complex problems and issues using data from internal and external sources.
• Demonstrates a strong understanding of report analysis and development. Triages intake of data requests and seeks an understanding of business needs.
• Applies knowledge of healthcare and critical thinking skills in the analysis of business request and makes recommendations for solution/s to solve challenges.
• Provides sophisticated report and data analysis with the help of team members, vendors, and/or other EIS department contacts; provides quantitative and qualitative data analysis and reporting of patterns, insights, and trends to decision-makers.
• Participates in re-engineering, as needed, operational work-flow processes with end-users/business owners.
• Solid understanding of build concepts, Epic migration paths, change control process/governance, and ticket management process.
• Leads and evaluates process and requirements analysis, including process mapping though current flow charts, documents, future needs/plans, requirement elicitation, stakeholder analysis, and specification gathering on complex projects. In addition, using current and projected data, provides recommendations.
• Serves as the primary point of contact for vendor support and assistance for larger and more complex projects as well as in resolving increasingly complex or critical issues in assigned areas. Handles relationship with external vendors.
• Independently provides guidance and leadership on quality assurance and testing initiatives. Demonstrates ability to lead team through complex integrated testing processes. Manages testing projects as necessary.
• Contributes to strategy discussions by proactively identifying options with associated pros and cons with EIS team members and others.

Senior Data Intelligence Analyst – Health Equity

• Monitor all-source information to proactively identify and assess threats, as well as highlight emerging trends that may impact business, productions, and talent.
• Conduct detailed assessments on threat actors and maintain databases.
• Support talent and executive protection details with accurate and timely information and alerting.
• Provide security/threat assessments for events.
• Respond to critical incidents, rapidly research and deliver information in a clear and concise format.
• Conduct investigations into threat actors.

Protective Intelligence Analyst

• Triage, analyze, and investigate identity hygiene issues, defects, and control gaps surfaced through posture and threat detection capabilities.
• Coordinate with assurance and technical teams to identify, document, and facilitate remediation paths for confirmed defects and control gaps.
• Support configuration and onboarding of data sources and integrations required for identity posture and identity threat visibility.
• Create clear investigation summaries and issue briefs to enable downstream resolution (automation, SOC escalation, or longer-term exposure/project work).
• Develop repeatable operational processes and runbooks, aligning with corporate standards, controls, and auditability requirements.
• Apply technical knowledge, industry experience, subject matter expertise, and insights to contribute to the enhancement of Identity Security Services capabilities.
• Work closely with cross-functional stakeholders and technical teams, including application architects & engineers, product teams, information security, and risk management functions.
• Collaborate with various groups and individuals to troubleshoot and resolve escalated production issues.

Security Analyst jobs in California

See all jobs on JobTailor

Third Party Risk Analyst, Security GRC

IT Analyst, Security

Global Intelligence Analyst

Security Analyst

Quantitative Intelligence Analyst

Cybersecurity Analyst

Security Compliance and Regulatory Affairs Analyst

Senior Cybersecurity Analyst

Industrial Security Analyst – Level 2/3

Cybersecurity Analyst

Intelligence Pipeline Analyst

Information Security Analyst

Cybersecurity Awareness Analyst

Exposure Intelligence Analyst – Cloud Platforms, AWS, Azure, GCP, Cloud Posture

Senior Market Intelligence, Expansion Analyst

Cyber Threat Intelligence Analyst

Data Science Analyst – Customer & Product Intelligence

Senior Data Intelligence Analyst – Health Equity

Protective Intelligence Analyst

AVP, Senior Identity Security Analyst