What are the responsibilities and job description for the Senior Information Security Analyst position at Bi3 Careers?
Seeking a hands-on Information Security Analyst to support enterprise security operations across multicloud and on-premises environments. This position focuses heavily on Google Cloud Platform (GCP), Azure Defender for Cloud, Cloud Security Posture Management (CSPM), and security incident remediation.
The team is open to both Information Security Analysts and Senior Information Security Analysts.
Key Responsibilities
- Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on-premises environments.
- Perform cloud security assessments, secure score reviews, vulnerability analysis, and remediation of high-risk findings.
- Support Cloud Security Posture Management (CSPM) and proactively improve enterprise security controls.
- Collaborate with infrastructure and engineering teams to troubleshoot and resolve security issues.
- Develop detailed technical playbooks documenting security incidents, troubleshooting, and remediation procedures.
- Support security initiatives, including cloud security improvements and email security migrations.
- Conduct risk assessments and support regulatory compliance requirements.
Required Qualifications
- 5–8 years of information security experience, or 3–5 years in IT systems administration with significant security responsibilities.
- Hands-on GCP security experience, particularly Security Command Center and Identity and Access Management (IAM).
- Experience with Azure Defender for Cloud.
- Experience with CSPM in a multicloud enterprise environment.
- Strong security monitoring, incident response, vulnerability assessment, and remediation experience.
- Knowledge of security compliance frameworks such as HITRUST, NIST, HIPAA, PCI, or SOC 2.
- Strong technical documentation and communication skills.
Preferred Qualifications
- Qualys vulnerability management and Palo Alto firewalls.
- Proofpoint and Microsoft Defender for Office 365 experience.
- CCSP, AZ-500, or Google Professional Cloud Security Engineer certification.
- Healthcare or other regulated industry experience.
Work Arrangement
- Hybrid: Onsite Tuesday–Thursday in Center City Philadelphia; remote Monday and Friday.
- Must reside in Pennsylvania, New Jersey, or Delaware.