Назад
Company hidden
7 дней назад

Senior Information Security Analyst (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Information Security Analyst (Cybersecurity): Building and maintaining enterprise-wide vulnerability management, incident response, and cyber threat management programs with an accent on threat hunting, incident investigations, and security operations. Focus on leading the full incident response lifecycle, analyzing indicators of compromise, improving detection and remediation capabilities, and coordinating investigations across internal teams and external security partners.

Location: New York, NY, United States; hybrid workplace

Company

hirify.global supports Planned Parenthood organizations and their health centers, programs, education initiatives, and online resources across the United States.

What you will do

  • Lead technical activities across the full incident response lifecycle, including preparation, analysis, containment, eradication, remediation, recovery, and post-incident review.
  • Build and maintain enterprise-wide vulnerability management, incident response, threat intelligence, and cyber threat management capabilities.
  • Conduct threat hunting across on-premise and cloud environments and monitor alerts from MSSP and internal security tools.
  • Document threats, threat actors, attack vectors, indicators of compromise, campaigns, and threat trends.
  • Develop and improve incident response procedures, playbooks, policies, metrics, and reporting.
  • Coordinate with business units, affiliate IT leadership, forensic partners, vendors, and executive stakeholders during investigations and remediation.

Requirements

  • Bachelor’s degree in information technology, cybersecurity, or equivalent experience.
  • 5+ years of experience in cybersecurity, threat detection, incident response, and vulnerability management.
  • Experience with indicators of compromise, security incident coordination, vulnerability remediation, and stakeholder management.
  • Knowledge of NIST CSF, MITRE ATT&CK, threat assessments, control gap analysis, KPIs, and KRIs.
  • Familiarity with cloud and hybrid architectures and security technologies such as SIEM, EDR, and email gateways.
  • Strong analytical, organizational, communication, problem-solving, and collaboration skills, with the ability to handle confidential and sensitive matters.

Nice to have

  • Information security certifications such as CISSP, GCIH, or CySA.
  • Experience with penetration testing, vulnerability scans, logging and event management, and security appliance administration.

Culture & Benefits

  • Full-time union employment.
  • Participation in a 24/7 on-call rotation for urgent security alerts and cyber incidents.
  • 0–10% travel as needed.
  • Work with a mission-driven organization focused on sexual and reproductive health, diversity, inclusion, respect, integrity, customer focus, and innovation.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →