Remote Information Security Analyst – US Based – Protecting Digital Assets Worldwide

Join a forward‑thinking security team that safeguards critical infrastructure for global clients. As a Remote Information Security Analyst, you will design, monitor, and improve defensive strategies while enjoying the flexibility of a fully distributed workplace.

About the Role

We are seeking a proactive Information Security Analyst to strengthen our security posture across cloud, on‑premise, and hybrid environments. You will collaborate with engineers, compliance officers, and incident responders to identify vulnerabilities, implement controls, and ensure continuous compliance with industry standards such as NIST, ISO 27001, and SOC 2. This position is 100 % remote, allowing you to work from any location within the United States while contributing to high‑impact security initiatives.

Key Responsibilities

• Conduct continuous threat modeling and risk assessments for applications, networks, and data stores.
• Manage SIEM rule tuning, log correlation, and alert triage to reduce false positives.
• Lead vulnerability scanning programs, prioritize remediation, and verify patch deployment.
• Develop and maintain security policies, playbooks, and documentation aligned with regulatory requirements.
• Participate in tabletop exercises and real‑world incident response, providing forensic analysis and post‑incident reporting.
• Advise development teams on secure coding practices, DevSecOps integration, and secure configuration management.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or equivalent practical experience.
• 3+ years of hands‑on experience in a SOC, threat hunting, or vulnerability management role.
• Proficiency with SIEM platforms (Splunk, Elastic, Microsoft Sentinel) and endpoint detection & response tools.
• Strong knowledge of network protocols, cloud security (AWS, Azure, GCP), and container orchestration (Kubernetes, Docker).
• Relevant certifications such as CISSP, CEH, GSEC, or OSCP are highly valued.
• Excellent written and verbal communication skills for reporting to technical and non‑technical stakeholders.

Preferred Qualifications

• Experience with automated compliance tooling (e.g., Drata, Vanta, Secureframe).
• Background in threat intelligence platforms and MITRE ATT&CK mapping.
• Familiarity with privacy regulations (GDPR, CCPA) and data‑loss prevention strategies.

Salary Range

Estimated annual compensation: $95,000 – $130,000 USD/year, commensurate with experience, certifications, and geographic cost‑of‑living adjustments.

Benefits

• Comprehensive health, dental, and vision coverage for you and dependents.
• 401(k) match up to 5 % with immediate vesting.
• Generous paid time off, including a dedicated “Security Research” week each year.
• Annual professional development stipend ($3,000) for certifications, conferences, and courses.
• Home office allowance ($1,500) plus monthly internet reimbursement.
• Wellness program with mental‑health resources and fitness reimbursements.

Company Culture

Our distributed team thrives on transparency, continuous learning, and a shared passion for protecting digital trust. We hold weekly virtual “Security Sync” sessions, quarterly hack‑athon style capture‑the‑flag events, and an open‑door policy for proposing new tools or processes. Diversity of thought is celebrated, and every analyst has a direct line to leadership for strategic input.

How to Succeed in This Role

Success means turning raw data into actionable intelligence, automating repetitive tasks, and mentoring junior analysts. You will be measured by the reduction in mean‑time‑to‑detect (MTTD) and mean‑time‑to‑respond (MTTR), the maturity of our vulnerability management lifecycle, and your contributions to audit readiness. A curious mindset, willingness to experiment with emerging detection techniques, and a collaborative attitude are the keys to thriving here.