> Markdown version of [/jobs/ext/2697095-information-security-analyst-i](https://www.wearedevelopers.com/jobs/ext/2697095-information-security-analyst-i). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Analyst I - **Company:** Vibrant - **Location:** United States (Remote available) - **Experience:** Starter - **Salary:** $77,000.0 - $101,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Antivirus Softwares, Software System Penetration Testing, Microsoft Azure, Bash Shell, Bioinformatics, Burp Suite, Cloud Computing, Cloud Computing Security, Code Review, CompTIA Security+, Cyber Security, System Configuration, Linux, Identity and Access Management, Networking Hardware, Intrusion Detection Systems, Network Packet, Python (Programming Language), Network Security, Microsoft Security Essentials, Microsoft Software, Network Administration, Nmap, Office Suite, Systems Development Life Cycle, Security Information and Event Management, Sniffers, Software Engineering, TCP/IP, Software Vulnerability Management, Data Logging, Scripting, Google Cloud, In-Plane Switching (IPS), Software Security, Malware, Cyber Threat Analysis, Firewalls (Computer Science), Information Technology, Devsecops, Serverless Computing, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** September 3, 2026 - **Apply:** https://vibrant.wd5.myworkdayjobs.com/VEH_EXTERNAL_CAREER_SITE/job/Remote-USA/Information-Security-Analyst-I_JR100264-1 ## About the Role * Proven analytical, troubleshooting and problem-solving abilities. * Ability to effectively prioritize and execute tasks in a high-pressure environment. * Good written, oral, and interpersonal communication skills. * Ability to conduct research into IT security issues and products as required. * Ability to present ideas in business-friendly and user-friendly language. * Highly self-motivated and directed. * Keen attention to detail. * Team-oriented and skilled in working within a collaborative environment. * Familiar with cloud security principles and best practices. * Experience working with AWS IAM, infrastructure, security services, logging, and other serverless services. * Familiar with AWS Security Hub * Experience working with and implementing security controls and system configurations for technologies such as: AWS, Azure, GCP, Microsoft AD, Linux. * Working technical knowledge of Cloud and SaaS security solutions and tools. * Familiar with DevSecOps, Application Security, or other secure software development lifecycle methodologies. * Some scripting experience with bash or Python * Some experience with Incident Response or Penetration Testing as a nice to have * Familiar with threat modeling methodologies * General knowledge of security frameworks and controls such as: NIST (CSF, SP 800-53, SP 800-171), CIS, CSA, ISO27000. * Some experience with security systems and tools that may include: Firewalls, WAF, SIEM, SOAR, MDR, IAM, PAM/PIM, Network Packet sniffers, Nmap, IDS/IPS, Vulnerability Management tools, SAST/DAST Burp Suite. * Some experience with Encryption, Antivirus/Malware, Penetration Testing, Source Code Scanning. * Basic understanding of IP, TCP/IP, and other network administration protocols., * College diploma or university degree in Cybersecurity or other computer technology degree and/or two years equivalent work experience. * One or more of the following certifications: Any AWS Certified Associate level certifications, AWS Certified Security - Specialty, GIAC Cloud Security Essentials (GCLD), CompTIA Security+, GIAC Security Essentials (GSEC). * 2+ years of technical experience working in cloud, application, infrastructure, and/or network security required * 1+ year of experience with AWS required * 1+ year of experience with Cloud-based security technologies required * 1+ year of experience with Linux operating systems required Physical Requirements: * Must be able to remain in a stationary position 50% of the time * Will constantly operate a computer and other office productivity machinery, such as a calculator, copy machine, and computer printer * Will frequently communicate over video calls with internal and external stakeholders, Studies have shown that women and people of color are less likely to apply for jobs unless they believe they are able to perform every task in the job description. We are most interested in finding the best candidate for the job, and that candidate may be one who comes from a less traditional background. Vibrant will consider any equivalent combination of knowledge, skills, education and experience to meet minimum qualifications. If you are interested in applying, we encourage you to think broadly about your background and skill set for the role. ## Description The Information Security Analyst I is responsible for cloud, infrastructure and application security, incident response, auditing, and other relevant aspects of the program, as required. This role is involved in day-to-day operations of the in-place security solutions. The position plays a key role in protecting the confidentiality, integrity, and availability of all company data and systems. This may include the identification, investigation, and resolution of security incidents detected by those systems. Projects may include the implementation of new security solutions, participation in the creation and/or maintenance of policies, standards, baselines, guidelines, and procedures, as well as conducting vulnerability audits and assessments, and working with technology teams to update and maintain system security. The Security Analyst is expected to be fully aware of the enterprise's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals. Duties/Responsibilities: * Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically. * Maintain up-to-date detailed knowledge of the Cybersecurity industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors. * Assist with recommending additional security solutions or enhancements to existing security solutions to improve overall enterprise security. * Review existing cloud, on-prem, and end-user system configurations, and make recommendations to improve security posture * Monitor all in-place security solutions for efficient and appropriate operations. * Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution. * Respond to tickets for addressing security concerns, vulnerabilities, and end-user reported issues. * Participate in investigations into problematic activity. * Participate in the design and execution of vulnerability assessments, penetration tests, and security audits. * Maintain up-to-date baselines using industry standard frameworks such as CIS and CSA for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). * Maintain operational configurations of all in-place security solutions as per the established baselines and industry best practices. * Provide on-call support for end users for all in-place security solutions. * Partner with AppDev to identify and remediate vulnerabilities in applications * Participate in the planning and design of enterprise security architecture. * Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures). * Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan. * Additional duties as assigned. ## Related Videos - [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)