Cybersecurity Analyst — SecureOps & Compliance

Socket.dev; Guaynabo (PR); On-site; USD 70,000 - 90,000; Full time

Job summary

Grupo Ferré Rangel is seeking a Cybersecurity Analyst to actively assess security, implement controls, and respond to incidents for ongoing protection of systems and data. The role emphasizes PCI compliance, SOC2 alignment, and collaboration across IT functions to maintain a robust security posture.

The position is full-time in Puerto Rico with flexible hours to address incidents and ensure regulatory adherence.

Qualifications

• Bachelor’s degree in CS, IT, or related field required or equivalent experience.
• Minimum 2+ years in information technology or security roles.

Responsibilities

• Perform regular security assessments and tests to identify weaknesses.
• Develop and apply security controls to reduce risks and improve posture.
• Investigate suspicious activity and correlate events for timely resolution.
• Conduct weekly PCI compliance scans and uphold SOC2 and other standards.
• Manage security tools and ensure proper access controls and endpoint protection.
• Develop training modules and run simulated phishing and security awareness exercises.
• Respond to alerts via email and ticketing system, prioritizing critical events.
• Coordinate with IT teams to implement security best practices and changes.

Skills

Cybersecurity analysis

Incident response

Risk management

Networking knowledge

Security tools

Firewalls

Vulnerability scanning

Analytical skills

Bilingual EN/ES

Education

Bachelor’s degree in Computer Science or related field

Tools

SIEM

IDS/IPS

Vulnerability scanners

Firewall technologies

Job description

Grupo Ferré Rangel is seeking a Cybersecurity Analyst to actively assess security, implement controls, and respond to incidents for ongoing protection of systems and data. The role emphasizes PCI compliance, SOC2 alignment, and collaboration across IT functions to maintain a robust security posture.

The position is full-time in Puerto Rico with flexible hours to address incidents and ensure regulatory adherence.