Senior Security Analyst - Remote

Senior Security Analyst Your Mission as Senior Security Analyst The Senior Security Analyst is responsible for advancing Energage's information security, privacy, and compliance programs by implementing and continuously improving technical controls, governance processes, and risk management practices. This role serves as a senior technical and operational resource responsible for protecting company systems, customer data, and business operations while enabling the organization's continued growth. The position partners closely with Engineering, Product, IT, Legal, HR, and business leaders to embed security and privacy into company operations, ensuring compliance with regulatory requirements and industry best practices while maintaining a practical, business-focused approach to risk management. The position reports to the Director of Information Security & Data Privacy. Network and Endpoint Protection Maintain and improve network, endpoint, and related security controls. Monitor security tools and investigate alerts or suspicious activity; Help assess and prioritize weaknesses in network and endpoint configurations. Participate in security reviews of systems, integrations, cloud services, and significant technology changes. Identify security risks and recommend practical mitigations that account for business needs. Review designs involving authentication, authorization, access control, encryption, and secure data handling. Help incorporate security requirements early in projects and technology decisions. Support audit and assurance activities, including ISO 27001, SOC 2, customer security assessments, and related reviews. Help prepare evidence, maintain security documentation, and track findings and remediation actions. Contribute to risk assessments, policies, procedures, and ongoing improvements to the security program. Escalate significant risks, overdue actions, and decisions requiring leadership or business-owner input. Support general security awareness and help employees understand and follow security practices. Contribute to the Privacy Program in partnership with Legal, Product, Engineering, and other stakeholders. Maintain working familiarity with CSPM, IAM, threat and vulnerability management, and other security and privacy functions so they can provide peer coverage when needed. Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent professional experience.

• 3+ years of progressive experience in Information Security, Cybersecurity, Security Engineering, or related discipline.
• Experience supporting security and compliance programs involving ISO 27001, SOC 2, NIST CSF, or similar standards and frameworks.
• Experience performing security risk assessments and vulnerability management.
• Working knowledge of cloud security principles and technologies in environments such as AWS, Azure, or Google Cloud.
• Strong understanding of networking, authentication, encryption, access control, and security architecture principles.
• Strong written and verbal communication skills, including the ability to communicate security risks and recommendations to technical and non-technical stakeholders.
• Experience with SIEM, endpoint security, vulnerability management, identity management, and security monitoring tools.One or more relevant information security, privacy, audit, or cloud certifications are preferred, such as:

Certified Information Systems Security Professional (CISSP) Certified Information Security Manager (CISM) Certified Cloud Security Professional (CCSP) CompTIA Security+ Success includes reliable operation and improvement of network and endpoint protections; useful, timely security input on architecture and technology decisions; dependable support for audit and GRC activities; and effective collaboration across incident response, security awareness, privacy, and peer coverage. The analyst is expected to surface risks clearly, help move agreed actions forward, and involve the right owners when decisions or remediation are outside their authority. This role is also bonus eligible. PTO policy includes company holidays, sick time, vacation time, and floating holidays Remote Training and education Tuition reimbursement program Energage is a remote workplace with employees in various US locations. While our employees enjoy the flexibility of daily remote work, they are also given the occasional opportunity for in person interaction. This includes in our office in Exton Pa, or in a coworking space/out in their local area. This role is available for remote work in the following states: New York STATE (NYC residents excluded) Energage is a purpose-driven company that helps organizations turn employee feedback into useful business intelligence and credible employer recognition through Top Workplaces. Built on 19 years of culture research and the results from 23 million employees surveyed across more than 70,000 organizations, Energage delivers the most accurate competitive benchmark available. With access to a unique combination of patented analytic tools and expert guidance, Energage customers lead the competition with an engaged workforce and an opportunity to gain recognition for their people-first approach to culture. Energage encourages all qualified candidates to apply, including those of any race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.