Information Security Analyst

Xpansiv%20; United States; On-site; USD 80,000 - 95,000; Full time

Job summary

Xpansiv is seeking an Information Security Analyst to strengthen and mature its cybersecurity posture across security operations, risk management, and threat detection. You will monitor alerts, perform vulnerability assessments, and support compliance efforts in a fintech/regulated environment.

The role requires experience with cloud security, SIEM, EDR, and incident response, with a focus on secure configurations and collaboration with IT/DevOps teams.

Qualifications

• 3–5 years of hands-on experience in cybersecurity, information security, or IT risk.
• Strong understanding of networking fundamentals, endpoint protection, and cloud security (AWS, Azure, or GCP).
• Familiarity with SIEM platforms, SAST, DAST, vulnerability management tools, and incident response processes.
• Familiarity with common EDR platforms.
• Knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
• Bachelor’s degree in Information Security, CS, or related field (or equivalent experience).
• Experience in fintech, financial services, or other regulated environments.
• Exposure to compliance standards such as NFA, FCA, SOC 2, or ISO 27001.
• Relevant certifications (e.g., CompTIA Security+, CySA+, CEH, etc.).
• Scripting or automation experience (Python, PowerShell) a plus.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across systems, networks, and cloud environments.
• Perform regular vulnerability assessments, patch verification, and risk remediation tracking.
• Support security awareness programs and ensure employees adhere to company security policies, procedures and standards.
• Assist in managing endpoint security tools (EDR, DLP, MDM, etc.) and identity/access management systems.
• Collaborate with IT, DevOps, and engineering teams to implement secure configurations, code reviews, and cloud security best practices.
• Conduct periodic access reviews and support audit and compliance efforts (SOC 2, ISO 27001, etc.).
• Document incident response actions and recommend process improvements.
• Contribute to risk assessments and control testing for new vendors, applications, and systems.
• Stay current on emerging threats, vulnerabilities, and regulatory requirements impacting the business.
• Demonstrate a business-first mindset.

Skills

Security operations

Risk management

Threat detection

Networking fundamentals

Cloud security

SIEM familiarity

Incident response

Compliance standards

Security frameworks

Python scripting

Education

Bachelor's degree in Information Security, CS, or related field

Tools

EDR

DLP

MDM

SAST

DAST

SIEM

Job description

Position Summary

We are seeking a detail-oriented and proactive Information Security Analyst to help strengthen and mature our cybersecurity posture. The ideal candidate has a solid foundation in security operations, risk management, and threat detection, with a passion for continuous improvement and secure innovation. Experience in fintech or other regulated industries (financial services, energy, SaaS) is preferred but not required.

Responsibilities

• Monitor, investigate, and respond to security alerts and incidents across systems, networks, and cloud environments.
• Perform regular vulnerability assessments, patch verification, and risk remediation tracking.
• Support security awareness programs and ensure employees adhere to company security policies, procedures and standards.
• Assist in managing endpoint security tools (EDR, DLP, MDM, etc.) and identity/access management systems.
• Collaborate with IT, DevOps, and engineering teams to implement secure configurations, code reviews, and cloud security best practices.
• Conduct periodic access reviews and support audit and compliance efforts (SOC 2, ISO 27001, etc.).
• Document incident response actions and recommend process improvements.
• Contribute to risk assessments and control testing for new vendors, applications, and systems.
• Stay current on emerging threats, vulnerabilities, and regulatory requirements impacting the business.
• Demonstrate a business-first mindset.

Qualifications

• 3–5 years of hands‑on experience in cybersecurity, information security, or IT risk.
• Strong understanding of networking fundamentals, endpoint protection, and cloud security (AWS, Azure, or GCP).
• Familiarity with SIEM platforms, SAST, DAST, vulnerability management tools, and incident response processes.
• Familiarity and experience with common EDR platforms.
• Knowledge of security frameworks such as NIST CSF, ISO 27001, or CIS Controls.
• Excellent problem‑solving and communication skills.
• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience).
• Experience in fintech, financial services, or other regulated environments.
• Exposure to compliance standards such as NFA, FCA, SOC 2, or ISO 27001.
• Relevant certifications (e.g., CompTIA Security+, CySA+, CEH, etc.).
• Scripting or automation experience (Python, PowerShell) a plus.

Compensation

Compensation for this role will vary among specific regions due to geographic differentials in the labor market; actual pay will be determined considering relevant skills, experience, knowledge, education, and training. However, the compensation range for this role is expected to be as follows: $80,000–$95,000.

EEO Statement

Here at Xpansiv, we cultivate diversity, celebrate individuality, and believe unique perspectives are key to our collective success in building trust and transparency in global efforts toward net‑zero future. Xpansiv is committed to equal employment opportunity regardless of race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, protected veteran status, or any status protected by applicable federal, state, or local law.