Security Posture Analyst I (Remote)

Location: Remote position associated with Winter Haven, Florida, United States of America

Salary: $87,282–$139,425 annually

Company

hirify.global is a financial institution providing banking and financial services with a focus on community relationships and forward-thinking solutions.

What you will do

• Monitor and assess security posture across on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments.
• Develop and maintain security posture scorecards, dashboards, KPIs, KRIs, trend analyses, and management reports.
• Analyze vulnerabilities, misconfigurations, exposed assets, control deficiencies, threat intelligence, exploitability, business criticality, and potential business impact to support remediation prioritization.
• Correlate, validate, normalize, and analyze data from security, cloud, SaaS, vulnerability management, asset management, and threat intelligence platforms.
• Monitor remediation, validate corrective actions, track exposure reduction, support escalation, and promote accountability for risk reduction and security standards compliance.
• Support regulatory, audit, risk management, and internal assessment activities through reporting and evidence collection while improving program visibility, automation, and measurement.

Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, Data Analytics, or a related field preferred; equivalent education, military experience, certifications, or relevant work experience may be considered.
• 2–4 years of experience in cybersecurity, information technology, risk management, technical analysis, security operations, or a related field.
• Working knowledge of cybersecurity principles, security controls, vulnerability management, attack surface management, secure configuration practices, and risk-based security decision-making.
• Foundational understanding of on-premises infrastructure, cloud platforms, SaaS, networking, identity and access management, endpoint security, and enterprise technology environments.
• Knowledge of CSPM, SSPM, Exposure Management, EASM, security metrics, and reporting.
• Ability to interpret and correlate security data, identify trends and control deficiencies, develop dashboards and scorecards, and communicate findings to technical and non-technical stakeholders.
• Strong analytical, problem-solving, organizational, prioritization, time-management, documentation, and attention-to-detail skills.
• Knowledge of NIST, CIS Controls, PCI DSS, FFIEC, and related information security governance practices; proficiency in Microsoft Office, particularly Excel and PowerPoint, and security reporting platforms.
• Ability to work independently and collaborate with Security Operations, Vulnerability Management, Cloud Security, Security Architecture, Cyber Engineering, Risk Management, Audit, and Technology teams.

Nice to have

• Experience from internships, co-op programs, military service, help desk support, systems administration, security operations, or similar technical roles.
• Exposure to vulnerability management, cloud security, security monitoring, identity security, endpoint security, attack surface management, or security reporting platforms.
• Preferred certifications include CompTIA Security+, ISC2 Certified in Cybersecurity (CC), Microsoft SC-900, Microsoft AZ-900, or equivalent entry-level cybersecurity or cloud certifications.

Culture & Benefits

• Remote work requires a secure, distraction-free setting and reliable cable or fiber internet; mobile hotspots are not acceptable.
• The role requires frequent computer use, sustained monitor attention, and the ability to sit, walk, and/or stand for extended periods.
• Professional development, continuous learning, initiative, and ownership of assigned tasks are expected.
• Reasonable accommodations may be made for individuals with disabilities.

Hiring process

• Applications are encouraged before the anticipated deadline of November 29, 2026; qualified candidates may still be considered afterward.