Senior Information Security Officer

Role Description

This is a full-time, on-site role located in Los Angeles, CA, for a Senior Information Security Officer. The role involves implementing and managing the organization's Information Security Management System (ISMS) and cybersecurity frameworks. Responsibilities include ensuring data privacy compliance, developing and maintaining business continuity plans, overseeing information security management strategies, assessing risks, and mitigating potential threats to the organization's infrastructure.

Responsibilities:

·        Monitor and analyze security alerts across SIEM, EDR, IDS/IPS, email security, and related platforms.

·        Investigate, triage, and respond to security incidents, including root cause analysis, log review, endpoint forensics and remediation.

·        Escalate high-severity incidents as needed and collaborate with IT leadership and cross-functional teams.

·        Perform daily security operations, including alert tuning, threat hunting, and vulnerability follow-up.

·        Maintain, configure, and optimize security tools (SIEM, EDR, email security, vulnerability scanners, PAM, ManageEngine).

·        Develop automation and improve workflows to enhance detection and incident response efficiency.

·        Enhance detection rules, playbooks, and procedures to strengthen continuous threat monitoring.

·        Prepare reports and metrics, support audits/compliance efforts, and mentor junior analysts.

Requirements & Skills:

• Bachelor’s degree in information security, Computer Science, or related field (or equivalent experience).
• 5–7 years of hands-on experience in security operations or incident response.
• Strong technical expertise in SIEM administration, log analysis, endpoint protection, EDR, and network security monitoring.
• Experience securing Windows, Linux, and cloud environments (Azure/AWS).
• Hands-on experience with ManageEngine tools.
• Solid understanding of security frameworks (MITRE ATT&CK, NIST CSF, CIS Controls) and ability to clearly communicate technical findings.

Preferred Qualifications

• Relevant industry certifications (e.g., GCIA, GCIH, GCFA, CEH, CISSP, Security , CySA , AZ-500).
• Familiarity with identity security, Active Directory, and cloud identity platforms.
• Experience working in regulated industries (financial services, healthcare, etc.).

• The base annual salary range for this full-time position is $80K-$120K