Remote Information Security Analyst – US-Based | Protect Critical Assets from Anywhere

Join a forward‑thinking security team that values autonomy, continuous learning, and real‑world impact. As a fully remote analyst, you’ll monitor, detect, and respond to threats across cloud and on‑premise environments while shaping the security posture of a fast‑growing organization.

About the Role

We are looking for a proactive Information Security Analyst to own the day‑to‑day operations of our Security Operations Center (SOC) from the comfort of your home office. You will analyze security events, conduct vulnerability assessments, and collaborate with engineering teams to harden infrastructure. This position offers the freedom to design your own workflow while delivering measurable risk reduction for a nationwide client base.

Key Responsibilities

• Monitor SIEM alerts, correlate logs, and triage incidents within defined SLAs.
• Perform regular vulnerability scans, prioritize remediation, and track closure metrics.
• Develop and maintain detection rules, playbooks, and runbooks for emerging threat vectors.
• Conduct forensic investigations on compromised hosts and document lessons learned.
• Partner with DevOps to embed security controls into CI/CD pipelines and cloud configurations.
• Prepare executive‑level risk reports and present findings to stakeholders.

Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or equivalent practical experience.
• 3+ years hands‑on experience in a SOC, incident response, or threat hunting capacity.
• Proficiency with SIEM platforms (Splunk, Elastic, or Microsoft Sentinel) and EDR tools (CrowdStrike, SentinelOne).
• Strong scripting ability in Python, PowerShell, or Bash for automation.
• Deep understanding of MITRE ATT&CK, NIST CSF, and common compliance frameworks (SOC 2, ISO 27001).
• Active certifications such as CompTIA Security+, (ISC)² CISSP, or GIAC GCIH are highly valued.

Preferred Qualifications

• Experience securing AWS, Azure, or GCP environments with native security services.
• Background in threat intelligence platforms (MISP, OpenCTI) and indicator enrichment.
• Familiarity with container security (Docker, Kubernetes) and IaC scanning tools (Checkov, tfsec).
• Proven track record of building detection‑as‑code pipelines.

Salary Range

$95,000 – $130,000 USD/year, commensurate with experience, certifications, and geographic cost‑of‑living adjustments.

Benefits & Perks

• 100% remote work with a generous home‑office stipend ($1,500 annually).
• Comprehensive health, dental, and vision coverage for you and dependents.
• Unlimited PTO plus 10 paid company holidays.
• Annual professional development budget ($3,000) for conferences, courses, and certifications.
• 401(k) match up to 5% and equity grant program.
• Wellness allowance, mental‑health resources, and quarterly team‑building virtual events.

Culture & Remote Work Philosophy

Our culture is built on trust, transparency, and asynchronous collaboration. We leverage tools like Slack, Notion, and GitHub to keep communication clear without mandatory core hours. Performance is measured by outcomes—reduced mean‑time‑to‑detect, improved coverage metrics, and the quality of your detection logic—not by hours logged. Regular virtual “security guild” sessions encourage knowledge sharing across the global team.

How to Succeed in This Role

Success means turning noisy alerts into actionable intelligence, continuously refining detection coverage, and mentoring junior analysts through peer reviews. You’ll thrive if you enjoy digging into packet captures, automating repetitive tasks, and presenting complex findings in plain language to non‑technical leadership. A growth mindset and a habit of contributing to open‑source security projects will set you apart.