Seniority: Experienced professional with 5+ years of relevant experience · Location: Remote, United States · Work model: Remote-first · Engagement: Engagement via an Employer of Record or Contractor of Record

About the company

Our client is a North American provider of managed hybrid cloud, security, application modernization, backup, and disaster recovery services. The company supports enterprise and mid-market organizations across healthcare, finance, government, and other regulated industries. Its global infrastructure and diverse client base provide the opportunity to work on meaningful security and regulatory challenges across hybrid and multicloud environments. As the organization continues to grow, team members have direct impact on the development of its security and compliance capabilities.

About the role

This role joins the Security and Compliance team to build a clear, measurable view of the company's security posture across infrastructure, platforms, and the corporate environment. Reporting directly to the CISO, you will work across security operations, vulnerability management, monitoring, patching, and compliance data. The position offers broad organizational visibility and the opportunity to shape the security metrics, processes, and reporting used by technical teams and leadership.

What you'll do

Monitor, investigate, and triage security events across the company's infrastructure, platforms, and corporate environment.
Work with the Security Information and Event Management platform and Field Effect to investigate alerts and identify potentially malicious activity.
Coordinate with internal teams and external security providers during security investigations and incidents.
Escalate security events based on severity, business impact, and established response procedures.
Maintain and improve security operations procedures, investigation workflows, and incident response runbooks.
Identify gaps in monitoring coverage and work with technical teams to improve detection and visibility.
Gather and correlate security information from infrastructure, endpoint, network, identity, vulnerability, and other security data sources.
Help onboard and maintain relevant data sources within Security Information and Event Management and monitoring platforms.
Identify systems, infrastructure, or environments that are missing from security monitoring and work with their owners to close those gaps.
Help establish an accurate and continuously improving view of the company's overall security posture.
Validate the completeness and quality of security data rather than relying solely on individual tools or dashboards.
Monitor vulnerability and patching status across infrastructure and systems.
Track critical and high-risk vulnerabilities through remediation and verify that corrective actions have been completed.
Identify systems that are outdated, outside established patching expectations, or otherwise increasing organizational risk.
Work directly with infrastructure, networking, and engineering teams to understand remediation blockers and drive issues toward resolution.
Maintain visibility into vulnerability aging, remediation timelines, patching coverage, and recurring problem areas.
Support vulnerability scanning and other technical security assessment activities.
Develop and maintain security dashboards that provide visibility into current security posture and trends over time.
Report on patching status, vulnerability exposure, monitoring coverage, security events, remediation progress, and other operational security indicators.
Identify trends and systemic issues across security data rather than treating findings as isolated events.
Produce clear reporting for both technical teams and leadership.
Help establish meaningful security metrics that demonstrate whether the company's security posture is improving over time.
Maintain accurate documentation and evidence supporting security and compliance activities.
Work closely with infrastructure, networking, engineering, information technology, compliance, and customer-facing teams.
Partner with managed security providers and other external security partners to improve monitoring and response capabilities.
Help identify opportunities to automate repetitive security operations and reporting activities.
Support security assessments, audits, incident response exercises, and other Security and Compliance initiatives.
Contribute to the continued development of the company's security operations program as the organization grows.

Must-have

Five or more years of experience in cybersecurity, security operations, infrastructure security, or a related field.
Experience working within a Security Operations Center, Managed Security Service Provider, or enterprise security operations environment.
Hands-on experience with Security Information and Event Management platforms, including log analysis, alert investigation, and onboarding data sources.
Experience with managed detection and response or similar security monitoring platforms.
Experience with vulnerability management and patch management programs.
Experience investigating security alerts and coordinating remediation with technical teams.
Strong understanding of endpoint, network, identity, firewall, vulnerability, and infrastructure security concepts.
Familiarity with common attack methodologies, indicators of compromise, threat intelligence, and attacker tactics, techniques, and procedures.
Ability to gather information from multiple systems and turn it into a clear assessment of security posture.
Experience building dashboards, metrics, or operational security reporting.
Strong analytical and problem-solving skills with an ability to identify patterns and systemic issues.
Ability to communicate security risks clearly to both technical and nontechnical audiences.
Strong written communication and documentation skills.
Ability to work independently while collaborating closely with teams across the organization.

Nice-to-have

Experience with Field Effect or similar managed detection and response platforms.
Experience supporting Security Information and Event Management integrations across hybrid infrastructure.
Experience in a Managed Services Provider or Managed Security Service Provider environment.
Experience with vulnerability scanning and infrastructure management platforms.
Familiarity with Fortinet, Microsoft Azure, Amazon Web Services, Veeam, and hybrid cloud environments.
Experience supporting organizations subject to Payment Card Industry Data Security Standard, Health Insurance Portability and Accountability Act, Health Information Trust Alliance, or System and Organization Controls requirements.
Experience creating security posture dashboards and executive security reporting.
Relevant certifications such as Certified Information Systems Security Professional, Global Information Assurance Certification, Certified Information Security Manager, Certified Information Systems Auditor, or Security Plus.

What's offered

Direct exposure to the CISO and an opportunity to help shape the security operations program.
Visibility across the entire organization rather than responsibility for a single platform or technology.
The opportunity to work across a diverse hybrid and multicloud environment with meaningful security and regulatory requirements.
The opportunity to help build security metrics and visibility used to drive operational and leadership decisions.
Remote-first, high-autonomy culture.
Competitive benefits.
The opportunity to work with enterprise and mid-market clients across healthcare, finance, government, and other regulated industries.
International exposure through a company operating across a global infrastructure network.

Hiring process

Pre-screen with the recruitment team.
Resume review and candidate selection by the hiring team.
One or two interviews with the hiring manager and other members of the team.
Offer.

Security Analyst