Senior Infosec Analyst

Responsibilities:

• Lead the design, implementation, and optimization of information security controls, processes, and tooling across cloud, endpoint, and application environments, aligning with enterprise security policies and risk appetite.
• Perform advanced threat, vulnerability, and control gap analysis; translate complex technical findings into prioritized remediation plans and actionable guidance for engineering, product, and operations teams.
• Serve as a subject matter expert and primary security liaison for assigned platforms or business areas, advising on architecture, data protection, identity and access management, and secure configuration standards.
• Drive security-by-design in new and evolving solutions by reviewing architectures and change proposals, defining security requirements, and collaborating with cross-functional teams to balance risk, usability, and business outcomes.
• Develop and refine detection, monitoring, and incident response playbooks; partner with operations teams to investigate complex security events and recommend containment, eradication, and recovery actions.
• Produce clear security documentation, runbooks, and guidelines; deliver targeted training or coaching to raise security awareness and improve secure practices across technical and non-technical audiences.
• Use data, metrics, and dashboards to evaluate the effectiveness of security controls, identify patterns and emerging risks, and recommend continuous improvements to processes and tooling.
• Mentor less-experienced team members and contribute to team-wide standards, frameworks, and best practices that improve consistency, reliability, and scalability of security operations.

Requirements:

• Bachelor's degree in computer science, information security, information systems, engineering, or a related field.
• 8+ years of progressive experience in information security, cybersecurity operations, security engineering, or a closely related technical security discipline.
• Demonstrated experience designing, implementing, or operating security controls and processes in cloud-based or distributed technology environments.
• Experience collaborating with engineering, product, or operations teams to assess security risk, define remediation approaches, and implement secure-by-design solutions.
• Or an equivalent combination of education and experience.