> Markdown version of [/jobs/ext/3956734-sr-information-security-analyst](https://www.wearedevelopers.com/jobs/ext/3956734-sr-information-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Sr. Information Security Analyst - **Company:** RLI Corp. - **Location:** Atlanta, GA, United States - **Experience:** Expert - **Salary:** $96,264 - $137,657 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Software System Penetration Testing, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Data Security, Github, Intrusion Detection and Prevention, Python (Programming Language), Log Analysis, Microsoft Security Essentials, Open Source Intelligence, Open Web Application Security, PCI Data Security Standards, Windows PowerShell, Security Software, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Scripting, Cloud Platform System, Large Language Models, Software Security, Generative AI, Gitlab, Kubernetes, Information Technology, Cybercrime, Restful APIs, Api Management, Static Application Security Testing, Vulnerability Analysis, Dynamic Application Security Testing - **Published:** October 27, 2026 - **Apply:** https://www.careerbuilder.com/job-details/sr-information-security-analyst-atlanta-ga--e5a40cbb-081e-4d4e-aeb2-bca0ae2a2459 ## About the Role Information/Data Security (InfoSec), Security Analysis, Business Model, Insurance, Underwriting, Information/Data Security (InfoSec), Security Analysis, Computer Security, Automation, Applications Security, * Typically requires a Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field preferred. * Typically requires 5+ years of relevant information security experience or an equivalent combination of education and experience. * Demonstrated experience in vulnerability management or application security, along with hands-on security operations or incident response experience. * Experience working with software development teams. Experience using scripting, APIs, or other automation to improve security workflows. * Relevant certifications such as CISSP, GIAC, CSSLP, OSCP, Microsoft security certifications, or equivalent are preferred., * Strong vulnerability management experience with the ability to prioritize findings and drive remediation across technical teams. * Working knowledge of application security and common vulnerability classes, including the OWASP Top 10. * Ability to translate technical security findings into clear, actionable guidance for developers and technology teams. * Hands-on SIEM experience, including event investigation, log analysis, and alert review or tuning. * Demonstrated incident response and technical investigation experience. * Experience with GitLab, GitHub, Azure DevOps, or a comparable development platform, including security scanning workflows. * Ability to script or automate using Python, PowerShell, APIs, or comparable technologies. * Ability to work independently, prioritize competing security risks, and collaborate across security, infrastructure, cloud, and development teams. Preferred / Additional Experience * Practical experience using generative AI/LLMs or AI-enabled security tools to improve analysis, automation, documentation, or vulnerability remediation. * Experience with application security technologies such as SAST, DAST, SCA, secrets scanning, dependency scanning, or automated security testing. * Experience with Microsoft Azure or other cloud environments and familiarity with cloud security concepts. * Familiarity with containers, Kubernetes, infrastructure-as-code, or related cloud-native security practices. * Experience contributing to detection engineering, threat hunting, or advanced security monitoring activities. * Knowledge of NIST, CIS, ISO 27001, SOX, PCI DSS, and related security or regulatory frameworks. ## Description The Senior Information Security Analyst is a senior technical member of the Information Security team responsible for improving RLI's security operations while driving application vulnerability management, and automation. The role combines hands-on security operations and incident response. The primary focus of this position is application vulnerability management and remediation. The role also requires strong security operations and incident response fundamentals, along with the ability to automate recurring work and collaborate effectively with software development teams., * Lead application-focused vulnerability management and help technology teams move findings from identification through validated remediation. * Translate penetration test, application security, dependency, and vulnerability findings into clear, developer-actionable remediation guidance. * Prioritize vulnerabilities using severity, exploitability, application criticality, data sensitivity, exposure, and business risk. * Build reusable remediation patterns, templates, examples, and technical guidance for recurring application vulnerabilities. * Analyze vulnerability trends to identify recurring root causes. * Partner with development leadership and product teams to improve remediation expectations, time-to-fix, and fix-rate outcomes. * Validate remediation and support documented risk acceptance when remediation is not feasible within required timelines. * Support penetration testing, security assessments, and technical risk assessments. * Assist with internal and external audits, vulnerability assessments, penetration tests, and regulatory or compliance activities. Security Operations, SIEM, & Incident Response * Operate and support SIEM and security monitoring capabilities, including event investigation, log analysis, alert tuning, dashboards, enrichment, and investigation workflows. * Monitor, investigate, and respond to security events and incidents across endpoint, identity, network, cloud, and application environments. * Lead or participate in incident response activities based on incident scope and experience, including containment, recovery, analysis, and post-incident review. * Perform independent technical investigation when automated conclusions are incomplete, uncertain, or incorrect. * Monitor emerging threats, vulnerability intelligence, and attack techniques using current and/or Open-Source Intelligence capabilities. * Maintain investigation playbooks and incident response procedures, and contribute to detection and monitoring improvements. * Use automation to reduce repetitive, low-value case handling while preserving hands-on investigative and troubleshooting skills. * Partner with internal teams and security service providers to coordinate response and remediation activities. * Maintain security standards, procedures, technical documentation, and operational runbooks. * Serve as a senior technical resource to security and technology partners and share knowledge with other team members. AI, Automation & Scripting * Identify repetitive security activities that can be simplified or automated and help implement practical, maintainable solutions. * Use automation, generative AI, large language models (LLMs), or AI-enabled security capabilities to assist with triage, investigation, documentation, vulnerability analysis, and remediation guidance. * Develop or maintain scripts, API integrations, orchestration, or workflow automation using Python, PowerShell, REST APIs, or comparable technologies. * Apply AI-assisted analysis to vulnerability and penetration-testing data to identify recurring themes, remediation patterns, and opportunities for improvement.