Senior Information Security Analyst

Seeking a hands-on Information Security Analyst to support enterprise security operations across multicloud and on-premises environments. This position focuses heavily on Google Cloud Platform (GCP), Azure Defender for Cloud, Cloud Security Posture Management (CSPM), and security incident remediation .

The team is open to both Information Security Analysts and Senior Information Security Analysts.

Key Responsibilities

• Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on-premises environments.
• Perform cloud security assessments, secure score reviews, vulnerability analysis, and remediation of high-risk findings.
• Support Cloud Security Posture Management (CSPM) and proactively improve enterprise security controls.
• Collaborate with infrastructure and engineering teams to troubleshoot and resolve security issues.
• Develop detailed technical playbooks documenting security incidents, troubleshooting, and remediation procedures.
• Support security initiatives, including cloud security improvements and email security migrations.
• Conduct risk assessments and support regulatory compliance requirements.

Required Qualifications

• 5–8 years of information security experience, or 3–5 years in IT systems administration with significant security responsibilities.
• Hands-on GCP security experience, particularly Security Command Center and Identity and Access Management (IAM).
• Experience with Azure Defender for Cloud.
• Experience with CSPM in a multicloud enterprise environment.
• Strong security monitoring, incident response, vulnerability assessment, and remediation experience.
• Knowledge of security compliance frameworks such as HITRUST, NIST, HIPAA, PCI, or SOC 2.
• Strong technical documentation and communication skills.

Preferred Qualifications

• Qualys vulnerability management and Palo Alto firewalls.
• Proofpoint and Microsoft Defender for Office 365 experience.
• CCSP, AZ-500, or Google Professional Cloud Security Engineer certification.
• Healthcare or other regulated industry experience.

Work Arrangement

• Hybrid: Onsite Tuesday–Thursday in Center City Philadelphia; remote Monday and Friday.
• Must reside in Pennsylvania, New Jersey, or Delaware.