信息安全分析师
Information Security Analyst | Cybersecurity
信息安全分析师 | 网络安全 | SOC 2 合规 | 风险管理
我们正在寻找一位积极主动、注重细节的信息安全分析师，以帮助保护我们组织的系统、数据和数字资产。这个职位适合对识别风险、加强安全控制、确保合规性以及在快节奏环境中应对安全威胁充满热情的网络安全专业人员。
你将与 IT、工程、DevOps、合规和业务团队紧密合作，保持强大的安全态势，支持合规计划（包括 SOC 2），并在云和本地环境中实施安全最佳实践。
如果你对网络安全、治理、风险管理以及帮助组织应对不断演变的威胁充满热情，我们期待你的加入。
你将负责
- 监控、分析并响应网络安全事件、警报和漏洞。
- 进行安全风险评估，并识别系统、网络和应用程序中的潜在威胁。
- 支持并维护符合安全框架的合规性，如 SOC 2、ISO 27001、NIST、CIS 控制措施，以及适用的 GDPR。
- 执行漏洞评估，并与技术团队协调修复工作。
- 审查安全日志，调查可疑活动，并参与事件响应流程。
- 与工程和 DevOps 团队合作，在软件开发生命周期（DevSecOps）中集成安全最佳实践。
- 制定、维护和更新信息安全政策、程序和文档。
- 协助内部和外部的安全审计。
- 管理身份和访问管理（IAM）、用户权限和特权访问控制。
- 提供安全意识培训，推动组织内的网络安全最佳实践。
- 跟踪新兴的网络威胁、漏洞和安全技术。
信息安全专业技能
- 信息安全
- 网络安全
- SOC 2 合规
- ISO 27001
- NIST 网络安全框架
- CIS 控制措施
- 风险评估
- 漏洞管理
- 事件响应
- 安全运营
- 治理、风险与合规（GRC）
- 身份与访问管理（IAM）
- 安全审计
- 威胁检测
- 安全意识培训
- 云安全
- 网络安全
- 终端安全
- 安全策略与流程
查看英文原文
Description
Information Security Analyst | Cybersecurity | SOC 2 Compliance | Risk Management
We are looking for a proactive and detail-oriented Information Security Analyst to help protect our organization's systems, data, and digital assets. This role is ideal for cybersecurity professionals who are passionate about identifying risks, strengthening security controls, ensuring regulatory compliance, and responding to security threats in fast-paced environments.
You'll work closely with IT, Engineering, DevOps, Compliance, and Business teams to maintain a strong security posture, support compliance initiatives (including SOC 2), and implement security best practices across cloud and on-premise environments.
If you're passionate about cybersecurity, governance, risk management, and helping organizations stay ahead of evolving threats, we'd love to hear from you.
What You'll Do
- Monitor, analyze, and respond to cybersecurity incidents, alerts, and vulnerabilities.
- Conduct security risk assessments and identify potential threats across systems, networks, and applications.
- Support and maintain compliance with security frameworks such as SOC 2, ISO 27001, NIST, CIS Controls, and GDPR where applicable.
- Perform vulnerability assessments and coordinate remediation efforts with technical teams.
- Review security logs, investigate suspicious activity, and participate in incident response processes.
- Collaborate with Engineering and DevOps teams to integrate security best practices throughout the software development lifecycle (DevSecOps).
- Develop, maintain, and update information security policies, procedures, and documentation.
- Assist with internal and external security audits.
- Manage identity and access management (IAM), user permissions, and privileged access controls.
- Deliver security awareness training and promote cybersecurity best practices across the organization.
- Stay current with emerging cyber threats, vulnerabilities, and security technologies.
Information Security Expertise
- Information Security
- Cybersecurity
- SOC 2 Compliance
- ISO 27001
- NIST Cybersecurity Framework
- CIS Controls
- Risk Assessment
- Vulnerability Management
- Incident Response
- Security Operations
- Governance, Risk & Compliance (GRC)
- Identity & Access Management (IAM)
- Security Auditing
- Threat Detection
- Security Awareness Training
- Cloud Security
- Network Security
- Endpoint Security
- Security Policies & Procedures
- Business Continuity & Disaster Recovery
Security Tools & Technologies
Security Platforms
- Microsoft Defender
- CrowdStrike Falcon
- SentinelOne
- Splunk
- Microsoft Sentinel
- QRadar
- Rapid7
- Tenable Nessus
- Qualys
- Burp Suite
- Wireshark
Cloud & Infrastructure
- AWS Security Hub
- Microsoft Azure Security Center
- Google Cloud Security
- Okta
- Microsoft Entra ID (Azure AD)
- Active Directory
Productivity & Collaboration
- Jira
- Confluence
- ServiceNow
- Microsoft 365
- Google Workspace
- Slack
- Microsoft Teams
AI & Productivity Tools
- ChatGPT
- Microsoft Copilot
- Claude
- Gemini
What We're Looking For
- Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field.
- 3+ years of experience in Information Security, Cybersecurity, Security Operations, or Risk & Compliance.
- Experience supporting SOC 2 compliance initiatives and security audits.
- Strong knowledge of security frameworks such as SOC 2, ISO 27001, NIST, and CIS Controls.
- Experience performing vulnerability management, risk assessments, and incident response.
- Familiarity with SIEM, EDR, IAM, and endpoint security solutions.
- Experience working in cloud environments (AWS, Azure, or Google Cloud).
- Strong analytical, documentation, and problem-solving skills.
- Professional English proficiency (B2+/C1).
- Ability to work independently in a remote and collaborative environment.
Preferred Qualifications
- Security certifications such as Security+, CySA+, CISSP, CISM, CISA, SSCP, CEH, or GSEC.
- Experience supporting U.S.-based companies or global organizations.
- Knowledge of DevSecOps, cloud security, and infrastructure security.
- Experience with penetration testing or vulnerability scanning tools.
- Familiarity with privacy regulations such as GDPR, HIPAA, or PCI DSS.
- Experience in SaaS, Technology, FinTech, Healthcare, or Cloud-based organizations.
Why Join Us?
Join a company that values security as a strategic business priority. You'll work alongside experienced technology professionals to strengthen our cybersecurity posture, protect critical business assets, and support compliance initiatives that enable trust with our customers and partners. Your expertise will directly contribute to building a secure and resilient organization.
Next Step
Please remember to check your email and complete your One-Way Video Interview. This is the next step in our hiring process and will help us better understand your cybersecurity expertise, risk management experience, problem-solving skills, and ability to protect modern technology environments. We look forward to learning more about you!
Requirements
Information Security Analyst – High Fit Resume Requirements
- Bachelor's degree in Cybersecurity, IT, Computer Science, or related field.
- 3+ years of experience in Information Security or Cybersecurity.
- Experience with SOC 2, ISO 27001, or NIST.
- Experience in Incident Response and Vulnerability Management.
- Experience with SIEM tools (Splunk, Sentinel, QRadar).
- Experience with IAM (Okta, Azure AD, Active Directory).
- Experience securing AWS, Azure, or GCP environments.
- English B2+.
Preferred (Bonus)
- CISSP, CISM, Security+, CySA+, CEH certifications.
- Experience with CrowdStrike, Defender, Nessus, Qualys.
- Experience supporting U.S. companies.
- Knowledge of DevSecOps and Cloud Security.
Originally posted on Himalayas