Senior Information Security Analyst

Job Title Locals or semi-local preferred but, will consider those willing to relocate from elsewhere in the US as a very last resort. Qualifications Required: 5+ years of relevant information security experience (or 3+ years in IT systems administration with 2 years security responsibilities). Cloud security experience with GCP or Azure and sound knowledge of Cloud Security framework. Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws. Experience with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2. Experience across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints. Experience with vulnerability assessment and penetration testing engagements. Experience with change management and project management. Excellent technical writing and presentation skills; ability to translate technical risk to business impact. Preferred: CCSP preferred; other certs: AZ-500, AWS Security Specialty, GCP Professional Cloud Security Engineer. Experience securing Azure, AWS, GCP in enterprise/hybrid environments. Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE ATT&CK. Automation, scripting experience a plus. Responsibilities Cloud & Enterprise Security (SME) Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on-prem environments. Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening. Implement process improvements aligned to security frameworks (NIST CSF/800-53, ISO 27001) and business needs; optimize technology to improve customer experience. Security Operations & Incident Response Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms. Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows. Plan, contribute to, and participate in incident plan exercises and tabletop scenarios. Governance, Risk & Compliance (GRC) Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards. Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2). Review contracts and provide security guidance; support project scoping, costing, and cost–benefit analyses. Stakeholder Engagement & Communication Act as a liaison for the security team; clearly communicate business risk as it relates to information security. Create technical documentation (reports, white papers, technical notes, implementation/configuration guides). Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high‑pressure, high‑visibility situations. Continuous Improvement Recommend new security solutions and improvements that do not impede innovation. Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers. Technical Expertise Cloud Security (Azure, AWS, GCP) GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE). Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration. AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. (experience with AWS is not required) Additional Technologies Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks. Forensics & eDiscovery: Symantec, Purview, Proofpoint; email/file discovery; incident response. Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo-filtering, WildFire; F5 AWAF. SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL Vulnerability & AppSec: Qualys, NexusIQ; OWASP-aligned testing and remediation. Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint. Identity & MFA: Okta, Microsoft (Entra ID MFA). Core Services: DNS zone management; network micro-segmentation; zero trust-aligned controls. Secure Productivity: Securing Microsoft 365 (Exchange Online, SharePoint/OneDrive, Teams, Purview). Saxon Global