Hello,
Hope you are doing good ! Please find the JD below and share your updated resume
Role Title: Lead Security Analyst
Location: Hybrid Santa Clara, CA (local candidates only)
Duration: Full-Time
About the Role
This role is critical in ensuring a strong security posture while building and maintaining customer trust. Acting as the first point of contact for IT security inquiries, you will help customers feel confident sharing their data through clear, timely, and transparent communication.
You will work closely with Go-To-Market, Product, Engineering, and IT teams to support customer and prospect security needs, manage security operations, maintain compliance, and continuously improve the organization s overall security posture. This role also contributes to defining and executing a long-term security roadmap.
The environment is fast-paced and high-impact. Speed and quality are not tradeoffs you are expected to deliver quickly while maintaining a level of quality you are proud to stand behind. A deep passion for security, ownership, and continuous growth is essential to success in this role.
Key Responsibilities
Security Operations & Monitoring
- Continuously monitor security tools, systems, and logs to identify potential threats or anomalies
- Investigate security alerts and coordinate with Engineering or DevOps teams on incident response and remediation
Customer-Facing Security Support
- Serve as the first point of contact for customer and prospect security-related inquiries (e.g., data handling, compliance, vulnerabilities)
- Participate in customer and prospect security review calls to clearly communicate security posture and controls
- Complete customer IT security questionnaires accurately and within required timelines
- Respond to customer follow-up questions related to security assessments and reviews
Policy & Compliance
- Draft, maintain, and update security policies such as password management, BYOD, and vendor risk assessments
- Support ongoing compliance efforts with frameworks and standards including ISO 27001, SOC 2, GDPR, and similar
- Collect and organize audit evidence and collaborate with internal teams during compliance audits
Vulnerability Assessment & Remediation
- Conduct or coordinate vulnerability scanning and penetration testing
- Partner with product and engineering teams to ensure timely remediation of identified risks
Employee Security Awareness
- Deliver security awareness training and internal communications on topics such as phishing, social engineering, and best practices
- Promote a strong security-first culture across the organization Incident Response & Investigations
- Act as the initial investigator for potential security incidents
- Escalate complex or high-risk incidents to senior security leadership when appropriate
Qualifications
- 5+ years of experience in information security, risk management, or security operations, with a strong focus on customer-facing security support
- Hands-on experience with security and compliance frameworks such as ISO 27001, SOC 2, GDPR, and NIST
- Solid background in security operations, including monitoring, incident response, and vulnerability management
- Proven ability to balance security requirements with business and product needs
- Strong written and verbal communication skills
- Experience driving automation or process improvements within security programs
Nice to Have
- Relevant certifications such as CISSP, CISM, Security+, or equivalent
- Experience supporting or managing IT operations, security tools, and vendor procurement
Thanks
Karunakar Reddy