Information Security Engineer – Cloud & Incident Response

Vesync; Tustin (CA); On-site; USD 108,000 - 132,000; Full time

Benefits offered by this job

Medical/Dental/Vision insurance for员工和

401K with employer match

Generous PTO

Life Insurance

Disability Insurance

Healthy Living Programs

EAP

Fully stocked kitchen

Job summary

VeSync is seeking an Information Security Analyst to support security controls across on-premise and cloud environments. You will work with senior team members to identify risks, respond to incidents, and ensure regulatory compliance.

The role emphasizes CSF, ISO 27001, and cloud security with hands-on SIEM experience. This on-site position in Tustin, CA offers a comprehensive benefits package and opportunities to grow security maturity.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or related field.
• 3–6 years of experience in information security or related IT/security role.
• Hands-on experience with security monitoring, incident response, vulnerability management, or risk assessment.
• Familiarity with cloud environments (AWS, Azure, or GCP) and basic cloud security concepts.
• Working knowledge of frameworks and standards such as NIST CSF, ISO 27001, and CIS.
• Understanding of network security fundamentals and logging.
• Experience with SIEM or security monitoring tools (Splunk, QRadar, Rapid7, or Wazuh).
• Hands-on communication and analytical skills.

Responsibilities

• Support implementation and maintenance of information security controls across on-premise and cloud environments.
• Analyze business processes and data flows to identify security gaps and improvements.
• Apply best practices and CSF framework for confidentiality, integrity, and availability.
• Assist in development and maintenance of information security policies, standards, and procedures.
• Support compliance efforts with standards and regulations (ISO 27001, NIST, GDPR).
• Track evidence and controls using compliance/GRC tools (OneTrust, Drata, or similar).
• Monitor security controls for systems, networks, and cloud platforms (AWS, Azure, GCP).
• Assist with configuration, monitoring, and tuning of cloud security services.
• Participate in incident response activities; document incidents and lessons learned.
• Support identity and access reviews and access control processes.
• Assist with vulnerability management and risk reporting aligned with frameworks.
• Deliver security awareness training and phishing simulations; maintain security documentation.

Skills

Security monitoring

Incident response

Vulnerability management

Risk assessment

Cloud security

SIEM

NIST CSF

ISO 27001

CIS

Education

Bachelor's degree in Information Security or related field

Tools

Splunk

QRadar

Rapid7

Wazuh

Job description

VeSync is seeking an Information Security Analyst to support security controls across on-premise and cloud environments. You will work with senior team members to identify risks, respond to incidents, and ensure regulatory compliance.

The role emphasizes CSF, ISO 27001, and cloud security with hands-on SIEM experience. This on-site position in Tustin, CA offers a comprehensive benefits package and opportunities to grow security maturity.