Cybersecurity Analyst

Socket.dev; San Diego (CA); On-site; USD 117,000 - 130,000; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

401(k) retirement plan

HSA & FSA

Life insurance

Disability insurance

Paid time-off

Sick leave

Holidays

Job summary

The Bumble Bee Seafood Company is seeking a Cybersecurity Analyst to lead day-to-day security operations, investigate incidents, and tune detection tooling. You’ll own the incident response lifecycle, collaborate with IT for patching, and help align operations with security standards.

The role requires hands‑on security experience, compliance awareness, and cross‑functional collaboration to protect data and assets. A competitive benefits package is included.

Qualifications

• 4+ years of experience in cybersecurity or information security roles.
• Relevant certifications (e.g., ISC2) preferred.
• Experience with incident response, threat detection, and log correlation.
• Proficiency with SIEM platforms and detection engineering.
• Experience with vulnerability management tools (e.g., Tenable, Qualys).
• Working knowledge of Windows and Linux operating systems, command‑line tools, and system architecture.
• Experience with Security Awareness Training platforms.
• Understanding of the MITRE ATT&CK framework.
• Understanding of networking fundamentals and protocols (TCP/IP, UDP, DNS).
• Experience with governance and endpoint detection and response (EDR) platforms (e.g., Microsoft Defender, Purview, Sophos, CrowdStrike).
• Experience using secure API tools for automation and orchestration.
• Knowledge of industry frameworks and standards (e.g., NIST, SOC, ISO, CIS).
• Tabletop exercise and penetration testing experience.
• Understanding data protection, disaster recovery, and business continuity planning.

Responsibilities

• Further develop and mature the security program - Identify, analyze, monitor and manage security events and incidents, owning the full incident response lifecycle.
• Collaborate with IT to prioritize, validate, and track patching and vulnerability remediation.
• Collaborate with IT engineers to implement, and optimize SIEM platforms, and fine‑tune existing threat detection tools to strengthen overall security posture.
• Conduct security risk assessments for existing and prospective platforms and vendors, including AI and SaaS solutions.
• Perform ongoing account auditing and access control reviews, to maintain compliance and reduce risk.
• Involved in the development and review of enterprise IT policies.
• Monitor public threat intelligence and vulnerability CVE disclosures to assess business impact and coordinate remediation efforts.
• Enhance existing cybersecurity tools to strengthen overall organizational security posture.
• Build, update, and maintain incident response playbooks, procedures, and technical documentation.
• Collaborate with cross‑functional teams to align business operations with acceptable use standards, ensuring organizational goals are met while enabling the secure adoption of AI‑driven technologies.
• Promote cybersecurity awareness through tabletop exercises, phishing prevention, and ongoing user training initiatives.
• Advise on and assess third‑party due diligence for security risk to the Bumble Bee environment, including third‑party risk assessments, review of contracts for protections, and third‑party training where required (e.g., offshore consultants).
• Proven ability to collaborate across business units and influence security best practices.
• Other duties as assigned.

Skills

Incident response

Threat detection

Log correlation

SIEM platforms

Detection engineering

Vulnerability management

Windows

Linux

Security Awareness Training

MITRE ATT&CK

Networking fundamentals

EDR platforms

Secure API tools

Industry frameworks

Tabletop exercises

Disaster recovery planning

Tools

Tenable

Qualys

Microsoft Defender

Purview

CrowdStrike

Job description

Description

The Cybersecurity Analyst leads Bumble Bee’s day-to-day cybersecurity efforts, serving as the company’s dedicated point of contact for identifying, investigating, and neutralizing cyber threats across the enterprise. Reporting to the Lead Systems Engineer within Information Technology, this role brings focused ownership to a function currently shared across the IT team.

In this role, you'll investigate and respond to security incidents, hunt for threats before they elevate, and tune detection tooling to reduce noise and close coverage gaps. Including building procedures, playbooks, and exercises that keep the business resilient. Success in this role requires a blend of hands‑on technical operations experience and deep cybersecurity expertise.

In addition to cybersecurity expertise, the ideal candidate has experience in compliance, risk management, cloud security, and AI‑driven technologies. This position partners cross‑functionally to strengthen security posture and ensure regulatory compliance. The Analyst also serves as a liaison to vet external third parties for cyber risk, helping protect the company from lost time, revenue, and reputational harm.

ESSENTIAL FUNCTIONS

• Further develop and mature the security program - Identify, analyze, monitor and manage security events and incidents, owning the full incident response lifecycle.
• Collaborate with IT to prioritize, validate, and track patching and vulnerability remediation.
• Collaborate with IT engineers to implement, and optimize SIEM platforms, and fine‑tune existing threat detection tools to strengthen overall security posture.
• Conduct security risk assessments for existing and prospective platforms and vendors, including AI and SaaS solutions.
• Perform ongoing account auditing and access control reviews, to maintain compliance and reduce risk.
• Involved in the development and review of enterprise IT policies.
• Monitor public threat intelligence and vulnerability CVE disclosures to assess business impact and coordinate remediation efforts.
• Enhance existing cybersecurity tools to strengthen overall organizational security posture.
• Build, update, and maintain incident response playbooks, procedures, and technical documentation.
• Collaborate with cross‑functional teams to align business operations with acceptable use standards, ensuring organizational goals are met while enabling the secure adoption of AI‑driven technologies.
• Promote cybersecurity awareness through tabletop exercises, phishing prevention, and ongoing user training initiatives.
• Advise on and assess third‑party due diligence for security risk to the Bumble Bee environment, including third‑party risk assessments, review of contracts for protections, and third‑party training where required (e.g., offshore consultants).
• Proven ability to collaborate across business units and influence security best practices.
• Other duties as assigned.

QUALIFICATIONS, SKILLS & TECHNICAL EXPERIENCE

• 4+ years of experience in cybersecurity or information security roles.
• Relevant certifications (e.g., ISC2) preferred.
• Experience with incident response, threat detection, and log correlation.
• Proficiency with SIEM platforms and detection engineering.
• Experience with vulnerability management tools (e.g., Tenable, Qualys).
• Working knowledge of Windows and Linux operating systems, command‑line tools, and system architecture.
• Experience with Security Awareness Training platforms.
• Understanding of the MITRE ATT&CK framework.
• Understanding of networking fundamentals and protocols (TCP/IP, UDP, DNS).
• Experience with governance and endpoint detection and response (EDR) platforms (e.g., Microsoft Defender, Purview, Sophos, CrowdStrike).
• Experience using secure API tools for automation and orchestration.
• Knowledge of industry frameworks and standards (e.g., NIST, SOC, ISO, CIS).
• Tabletop exercise and penetration testing experience.Understanding data protection, disaster recovery, and business continuity planning.

COMPENSATION AND BENEFITS:

The health, satisfaction and security of our team members and their families are important to us and an important part of reaching our organization’s goals. We offer a total rewards package that includes valuable competitive compensation and benefit plans. These programs reflect our commitment to attracting and retaining top talent. The compensation for this role includes a base salary and eligibility for an annual bonus based on company performance. All incentive plans are subject to change.

The pay range for this role is $117,000 - $130,000.00 annually to be paid at a salaried rate. *Compensation to commensurate with level of knowledge, education, skills, and experience applicable to the position.

Our current benefits package, which is available to all full‑time team members and their eligible dependents, includes:

• Medical insurance
• Dental insurance
• Vision insurance
• 401(k) retirement plan with company match
• HSA & FSA
• Life insurance and disability insurance
• And other voluntary benefits

We also offer time‑off benefits including:

• Paid time-off
• Sick‑flex time
• 12 company paid holidays

ABOUT THE BUMBLE BEE SEAFOOD COMPANY

The Bumble Bee Seafood Company is passionately pursuing its purpose of feeding people’s lives through the power of the ocean. We are an iconic 125‑year‑old fishing company that consistently aims to deliver delicious, healthy, and affordable food to consumers while working hard to find new ways to protect the ocean and those that rely on it. Bumble Bee is firmly anchored in a commitment to connect the world to the ocean by re‑defining sourcing, producing, and enjoying products from and inspired by the ocean.

Bumble Bee’s full line of seafood and specialty protein products are marketed in the U.S., Canada and over 50 markets globally under leading brands including Bumble Bee®, Brunswick®, Clover Leaf®, Snow’s®, and Beach Cliff®. For more information about the company, visit TheBumbleBeeCompany.com. For product information, visit www.BumbleBee.com.

Bumble Bee Foods, LLC is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender, identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.

If you are a qualified individual with a disability or a disabled veteran, you have the right to request an accommodation if you are unable or limited in your ability to use or access our career center as a result of your disability. To request accommodation, contact Bumble Bee Foods, LLC Human Resources Representative.

Requirements

• 4+ years of experience in cybersecurity or information security roles.
• Relevant certifications (e.g., ISC2) preferred.
• Experience with incident response, threat detection, and log correlation.
• Proficiency with SIEM platforms and detection engineering.
• Experience with vulnerability management tools (e.g., Tenable, Qualys).
• Working knowledge of Windows and Linux operating systems, command‑line tools, and system architecture.
• Experience with Security Awareness Training platforms.
• Understanding of the MITRE ATT&CK framework.
• Understanding of networking fundamentals and protocols (TCP/IP, UDP, DNS).
• Experience with governance and endpoint detection and response (EDR) platforms (e.g., Microsoft Defender, Purview, Sophos, CrowdStrike).
• Experience using secure API tools for automation and orchestration.
• Knowledge of industry frameworks and standards (e.g., NIST, SOC, ISO, CIS).
• Tabletop exercise and penetration testing experience.
• Understanding data protection, disaster recovery, and business continuity planning.