Information Security Engineer/Analyst

Overview

We re looking for a proactive and detail-oriented Information Security Analyst to lead cyber risk assessments, coordinate incident response, and enforce governance frameworks across the enterprise. This role is critical to securing data, systems, and operations in high-compliance environments.

Key Responsibilities

• Conduct vulnerability assessments and develop mitigation strategies.

• Coordinate incident detection, response, and postmortem analysis.

• Enforce cybersecurity policies, standards, and controls in line with NIST, FedRAMP, and FISMA.

• Support SOC operations with log analysis, threat intel correlation, and SIEM tuning.

• Perform security audits and facilitate compliance reporting.

• Work cross-functionally with IT, DevOps, and compliance teams.

Required Qualifications

• 4+ years of experience in information security or cybersecurity operations.

• In-depth knowledge of frameworks such as NIST 800-53, ISO 27001, and CIS Controls.

• Experience with Splunk, Tenable, CrowdStrike, or equivalent tools.

• Strong analytical and communication skills.

Preferred

• Security+, CISSP, or CISA certifications.

• Familiarity with RMF, continuous monitoring, and ATO processes.

• Experience with cloud security or zero trust models.