EI
Sr Information Security Analyst
Expert In Recruitment Solutions
🇺🇸 United States
On-site
Senior
3 months ago
- GCP
- Azure
- Incident Response
- Microsoft Purview
- DLP
- HITRUST
- NIST
- HIPAA
- SOC2
- Windows
- Linux
- Unix
- MacOS
- Penetration Testing
- Change Management
- Technical Writing
- CCSP
- AWS Security Specialty
- AWS
- ISO 27001
- CIS Benchmarks
- IAM
- VPC
- KMS
- GKE
- Defender
- Microsoft Sentinel
- Azure AD
- Conditional Access
- Key Vault
- AWS IAM
- GuardDuty
- CloudTrail
- CloudWatch
- WAF
- Windows Server
- Purview
- DNS
- F5
- SIEM
- Elastic
- AppSec
- Qualys
- OWASP
- Microsoft Defender
- Okta
- Zero Trust
- Exchange Online
- OneDrive
3 months ago
• 5+ years of relevant information security experience (or 3+ years in IT systems administration with 2+ years of security responsibilities)
• Cloud security experience with GCP or Azure and strong knowledge of cloud security frameworks
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws
• Hands-on experience with email security platforms such as Proofpoint (threat protection, phishing detection, and email filtering)
• Experience implementing and managing Microsoft Purview DLP, including policy creation, data classification, and incident response for sensitive data protection
• Experience with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2
• Experience across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints
• Experience with vulnerability assessments and penetration testing engagements
• Experience with change management and project management
• Excellent technical writing and presentation skills; able to translate technical risk into clear business impact
Preferred
- CCSP preferred; other certs: AZ‐500, AWS Security Specialty, GCP Professional Cloud Security Engineer.
- Experience securing Azure, AWS, GCP in enterprise/hybrid environments.
- Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE Telecommunication&CK.
- Automation, scripting experience a plus.
Cloud & Enterprise Security (SME)
- Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on‐prem environments.
- Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening.
- Implement process improvements aligned to security frameworks (NIST CSF/800‐53, ISO 27001) and business needs; optimize technology to improve customer experience.
- Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms.
- Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows.
- Plan, contribute to, and participate in incident plan exercises and tabletop scenarios.
- Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards.
- Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2).
- Review contracts and provide security guidance; support project scoping, costing, and cost–benefit analyses.
- Act as a liaison for the security team; clearly communicate business risk as it relates to information security.
- Create technical documentation (reports, white papers, technical notes, implementation/configuration guides).
- Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high‐pressure, high‐visibility situations.
- Recommend new security solutions and improvements that do not impede innovation.
- Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers.
Technical Expertise
Cloud Security (Azure, AWS, GCP)
- GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE).
- Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration.
- AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. (experience with AWS is not required)
- Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks.
- Forensics & eDiscovery: Symantec, Purview, Proofpoint; email/file discovery; incident response.
- Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo‐filtering, WildFire; F5 AWAF.
- SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL
- Vulnerability & AppSec: Qualys, NexusIQ; OWASP‐aligned testing and remediation.
- Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint.
- Identity & MFA: Okta, Microsoft (Entra ID MFA).
- Core Services: DNS zone management; network micro‐segmentation; zero trust‐aligned controls.
- Secure Productivity: Securing Microsoft 365 (Exchange Online, SharePoint/OneDrive, Teams, Purview).
Sr Information Security Analyst · Expert In Recruitment Solutions