> Markdown version of [/jobs/ext/2348016-sr-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/2348016-sr-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Information Security Analyst - **Company:** STAAR - **Location:** Lake Forest, CA, United States - **Experience:** Expert - **Salary:** $125,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Macintosh Computers, Computing Platforms, Bash Shell, CompTIA Security+, Cyber Security, Databases, Data Integrity, Information Leak Prevention, Linux, Multi-Factor Authentication, Identity and Access Management, Intrusion Detection and Prevention, Intrusion Detection Systems, Python (Programming Language), Windows PowerShell, Scripting, Cyber Threat Analysis, Information Technology, Vulnerability Analysis - **Published:** August 9, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=3dd383b201d6ee39 ## About the Role * Preferred: Undergraduate degree and 2-6 years relevant experience or Graduate degree and 0-4 years relevant experience. * Highly desirable: Security certifications such as CISSP, CySA+, GCIH, GSEC, Security+, * Preferred: 6-8 years of relevant experience or equivalent combination of education and work experience., * Applies research, information gathering and analytical and interpretation skills to problems of diverse scope. * Develops solutions to a variety of problems of moderate complexity. * Screens, categorizes, evaluates, reconciles, reports and resolves data integrity issues. * Interprets generally defined practices and methods. * Recognizes and acts on inconsistencies in data or results and escalates unusual problems. * Identifies issues beyond the stated situation. * Works on assignments where considerable judgment and initiative are required in resolving problems and making choices, recommendations, or decisions. * Regularly exercises discretion and independent judgment on business matters. * Involved with local or business specific engagement initiatives in support of broader programs. * Competent in security best practices and defense in depth strategies for multiple platforms (i.e., Linux/Unix, Windows, Mac). * Competent in staying up to date on common cybersecurity threats, attacks, and TTPs. * Competent in intrusion detection and investigations. * Competent in incident handling and reporting. * Competent in analyzing host-based and network logs. * Competent in analyzing firewalls rules and configuration. * Competent in public cloud computing platforms. * Competent in standard cybersecurity frameworks and implementing security controls. * Competent in managing privileged account management (PAM) solutions. * Competent in managing vulnerability scanning solutions. * Competent in methods of data protection, encryption, and data loss prevention (DLP) solutions. * Competent in identity and access management methodology. * Competent in automation scripting languages (i.e., PowerShell, Python, Bash). * Proficient in developing and managing a security awareness training program. * Proficient in managing endpoint protection solutions (EDR/XDR). * Proficient in multifactor authentication (MFA) technologies. * Proficient in managing email security gateway solutions. * Ability to analyze more complex security issues, determine its cause and impact to the business and identify the corrective action needed to eliminate and prevent the event for the future. * Familiar with database technology and query analysis. * Ability to recommend security standards and procedures. * Must possess strong verbal and written communication skills and be able to adapt to the level and nature of their audience. ## Description As a Sr. Information Security Analyst within STAAR Surgical's Information Technology team, this individual plays a critical role working closely with the business and across the Information Technology organization defining, delivering and supporting information security solutions and supporting roadmaps. In summary this position: works on information security problems that are diverse and highly complex; selects methods and techniques for identifying and advocating effective security solutions; develops approaches to address critical information security issues; and develops and administers schedules and performance requirements. * Defines and implements information security strategies and procedures. * Works with engineering teams to define and refine information security and systems management policies and settings. * Monitors and assesses vendor and 3rd party information security reports/lists. * Evaluates new and emerging products, technologies and makes recommendations to leadership concerning introduction of new technologies. * Coordinates, administers, manages and monitors the use of access control systems security tools and intrusion detection systems to identify anomalous events and security infractions that exploit system vulnerabilities. * Integrates information security controls into an environment to identify risks and reduce their impact. * Provides analysis of potential risk to information security and recommends solutions. * Creates and maintains information security documentation. * Communicates information security procedures to users. * Reviews and recommends changes to information security policies, including STAAR Surgical IT use policies, Data Sensitivity and Personally Identifiable Information Security Policies and procedures. * Understands and applies principles, concepts, theories, technologies and standards of professional field. * Develops and applies specialized knowledge within own discipline. * Deepens knowledge through exposure to new assignments and continuous learning. * Knowledge of related industry considerations. * Good working knowledge and demonstrated ability utilizing systems, tools and procedures to accomplish a job. * Builds a deeper understanding of processes, procedures, customers and organization. * Assists program or process development and implementation. * Coordinates activities and processes. * Leads or provides direction for information security projects. * Provides complex analysis of potential risk to information security and recommends innovative solutions. * Recommends and implements changes to procedures and systems to enhance information systems security. * Mentor junior information security personnel. * Works on assignments where considerable judgment and initiative are required in resolving problems and making choices, recommendations, or decisions. * Regularly exercises discretion and independent judgment on business matters. * Performs other duties as assigned. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) ## Related Articles - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)