> Markdown version of [/jobs/ext/3782633-senior-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3782633-senior-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Analyst - **Company:** ECARE OPCO INC - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $110,000.0 - $125,000.0 - **Contract:** Permanent contract - **Skills:** Software as a Service, Cloud Computing, Cyber Security, Identity and Access Management, Information Technology Operations, Intrusion Detection and Prevention, Network Security, Microsoft Security Essentials, Cloud Services, Anti-Phishing, Runbook, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Information Technology, Microsoft Sentinel, Sumo Logic (Software), Vulnerability Analysis - **Published:** October 16, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ffe183a38ab57a96 ## About the Role * Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or an equivalent combination of education and professional experience. * 7+ years of experience in cybersecurity, information security, IT security operations, or a related discipline. * Hands-on experience administering and optimizing SIEM platforms, including log management, alert tuning, correlation rule development, and operational ownership. * Demonstrated experience implementing and enforcing security policies, governance frameworks, and SOC 2 controls. * Strong background in security operations, incident response, vulnerability management, and endpoint security. * Experience leading cross-functional security initiatives and collaborating with internal stakeholders and external security service providers. * Strong analytical, problem-solving, documentation, and communication skills. * Ability to manage competing priorities, communicate security risks effectively, and drive remediation efforts to completion. Preferred Qualifications * 10+ years of experience in cybersecurity, security operations, or information security leadership. * Direct experience supporting SOC 2 audits, including control ownership, evidence management, and audit readiness. * Experience administering security awareness platforms, such as KnowBe4. * Experience working with MDR providers, eSOC partners, or other managed security service providers. * Advanced security certifications, such as CISSP, CISM, or equivalent. * Microsoft Security certifications, such as SC-200 or SC-300. * SOC 2, governance, risk management, and compliance-related certifications or specialized training. Technical Skills * SIEM & Security Monitoring: Microsoft Sentinel, Sumo Logic, or equivalent platforms. * Threat Detection & Incident Response: Security event analysis, threat investigation, incident containment, and remediation. * Vulnerability Management: Vulnerability scanning, risk prioritization, remediation tracking, and reporting. * Endpoint Security: Endpoint detection and response (EDR), endpoint protection, and mobile device management (MDM)., This position operates primarily in a remote work environment and requires the ability to remain in a stationary position for extended periods while performing work at a desk or workstation. The employee must be able to operate standard office equipment, including a computer, keyboard, mouse, webcam, and telephone. The role also requires the ability to occasionally move throughout a workspace to access files, office equipment, and work-related materials. Effective communication, both written and verbal, is essential for interacting with employees, clients, and stakeholders. ## Description In this role, you will lead key information security operations, incident response, vulnerability management, security governance, and compliance initiatives. You will serve as the primary owner of our SOC 2 compliance activities while overseeing security monitoring, optimizing detection capabilities, and driving continuous improvement across our security environment. The ideal candidate combines strong technical expertise with a proactive, risk-based approach to security. You are comfortable managing security platforms, leading incident investigations, partnering with cross-functional teams, and translating security requirements into practical controls that support business objectives and protect sensitive information. Security Operations & Incident Response * Lead security monitoring and incident response operations using SIEM platforms and integrated security technologies. * Administer and optimize SIEM solutions, including log source onboarding, alert tuning, correlation rules, detection use cases, and integrations with endpoint, cloud, and network security tools. * Lead security incident investigations, containment, root cause analysis, remediation tracking, and incident documentation. * Manage third-party security providers, including managed detection and response (MDR) and external security operations center (eSOC) partners, ensuring service quality and contractual compliance. * Monitor emerging threats, vulnerabilities, and industry best practices to continuously improve the organization's security posture. Governance, Risk & Compliance * Develop, maintain, and enforce information security policies, standards, procedures, and controls aligned with SOC 2 and relevant industry frameworks. * Own SOC 2 compliance activities, including control documentation, evidence collection, audit coordination, continuous monitoring, and audit readiness. * Maintain security policies, procedures, runbooks, risk documentation, and audit artifacts. * Support client security assessments, third-party due diligence, RFP security questionnaires, regulatory inquiries, and audit requests. * Partner with internal stakeholders to identify security gaps, assess risks, and implement appropriate remediation plans. Vulnerability & Endpoint Security Management * Manage the vulnerability management lifecycle, including scanning, risk-based prioritization, remediation oversight, and executive reporting. * Collaborate with IT Operations to implement secure configurations, access controls, endpoint protection, and security best practices. * Oversee endpoint and bring-your-own-device (BYOD) security programs, including mobile device management (MDM) enforcement and secure access policies. * Evaluate security risks across endpoints, cloud services, SaaS applications, and other organizational technology assets. Security Awareness & Technology Strategy * Administer and enhance the security awareness program through phishing simulations, employee training, reporting, and targeted education initiatives. * Evaluate, recommend, and implement security technologies based on organizational risk, business needs, cost-benefit analysis, and operational requirements. * Lead security technology integrations and collaborate with internal teams and external partners to improve security effectiveness. * Promote a culture of security awareness, accountability, and continuous improvement across the organization. Additional Responsibilities Perform other related duties as assigned.