Information Security Analyst

SMARTFOX; United States; On-site; USD 90,000 - 150,000; Full time

Job summary

SMARTFOX is seeking a Security Analyst to monitor security alerts, respond to incidents, and improve detection through tooling and playbooks. You will triage alerts across SIEM, EDR, and cloud platforms and work with engineering to fix vulnerabilities.

We place you at Analyst I–Senior Analyst levels based on background, with opportunities to lead incidents and shape the security roadmap. The role emphasizes curiosity, hands-on skills, and ongoing learning.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent hands-on experience.
• Foundational knowledge of networking, operating systems, and common attack techniques.
• Familiarity with the CIA triad, least privilege, and defense in depth.
• Clear written and verbal communication.

Responsibilities

• Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud platforms.
• Lead (or support) incident response from detection to containment to post-incident review.
• Run vulnerability scans, prioritize findings by real-world risk, and work with engineering to fix them.
• Hunt for threats proactively instead of waiting for the alarm.
• Support risk assessments, audits, and compliance work (SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, depending on needs).
• Build detections, playbooks, and automation to speed the team.
• Run phishing simulations and security awareness efforts.

Skills

Cybersecurity fundamentals

Networking basics

Operating systems

Threat hunting

Communication skills

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Splunk

Microsoft Sentinel

CrowdStrike

Tenable/Qualys

Python

Job description

• Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud platforms
• Lead (or support, at earlier levels) incident response from detection to containment to post-incident review
• Run vulnerability scans, prioritize findings by real-world risk, and work with engineering to fix them
• Hunt for threats proactively instead of waiting for the alarm
• Support risk assessments, audits, and compliance work (SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS, depending on our needs)
• Build detections, playbooks, and automation that make the whole team faster
• Run phishing simulations and security awareness efforts people don’t dread

Level Typical experience What you'll own

• Analyst I - 0-2 years: Alert triage, vulnerability tracking, documentation, learning from senior teammates
• Analyst II - 2-5 years: Independent investigations, detection tuning, risk assessments, mentoring newer analysts
• Senior Analyst - 5+ years: Leading incidents, threat hunting, architecture input, shaping our security roadmap

We'll place you at the level that fits your background, and you'll know exactly what it takes to reach the next one.

What you bring

Must have

• A genuine curiosity about how systems break and how to protect them
• Foundational knowledge of networking, operating systems, and common attack techniques (phishing, malware, privilege escalation, lateral movement)
• Familiarity with security concepts such as the CIA triad, least privilege, and defense in depth
• Clear written and verbal communication
• Bachelor's degree in Cybersecurity, Computer Science, IT, or equivalent hands-on experience. We value skills over pedigree.

Nice to have (not required)

• Certifications: Security+, CySA+, GCIH, CEH, CISSP, CISM, or cloud security certs (AWS, Azure, GCP)
• Experience with tools such as Splunk, Microsoft Sentinel, CrowdStrike, Tenable/Qualys, or similar
• Scripting in Python, PowerShell, or Bash
• Knowledge of MITRE ATT&CK or the NIST Cybersecurity Framework
• Home lab, CTF, bug bounty, or open-source contributions. We love seeing what you build on your own time.