Information Security Specialist

Cytek Biosciences; Fremont (CA); On-site; USD 110,000 - 150,000; Full time

Job summary

Cytek Biosciences in Fremont, CA seeks a hands‑on Information Security Specialist to protect digital assets and guide security strategy within the Global IT team. You will respond to incidents, deploy endpoint protection, and prepare audit documentation while strengthening our security posture across cloud, network, and endpoints.

The ideal candidate has 3–5+ years in security operations, hands‑on SIEM/EDR experience, and familiarity with ISO 27001 and SOC 2 Type II frameworks.

Qualifications

• Bachelor’s degree in Information Security, Computer Science, or related field.
• 3–5+ years in information security or cybersecurity operations.
• Hands-on experience with SIEM, EDR, and vulnerability scanners.
• Working knowledge of ISO 27001 and SOC 2 Type II frameworks and audit processes.
• Strong networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls, VPN).
• Excellent written and verbal communication; able to translate risk to business language.
• Industry certifications such as CISSP, CISM, Security+ or GIAC.
• Experience with cloud security in AWS/Azure/GCP.
• Familiarity with scripting/automation for security workflows.
• Experience building or contributing to a compliance program; penetration testing and red-team exposure.

Responsibilities

• Monitor, triage, and respond to security alerts from SIEM/EDR and cloud-native tools.
• Lead incident response activities including containment, eradication, and post‑incident reporting.
• Maintain and improve the incident response playbook and escalation procedures.
• Conduct proactive vulnerability assessments and coordinate remediation with owners.
• Evaluate and deploy endpoint protection; manage firewalls, VPNs, and proxies.
• Design and deliver semi-annual security awareness training for staff.
• Review vendor security, SOC reports, and certifications for third‑party risk.
• Draft and maintain information security policies and procedures; coordinate audits.

Skills

Incident response

Threat hunting

Security operations

Communication

Education

Bachelor’s degree in Information Security or Computer Science

Tools

SIEM

EDR

Vulnerability scanners

Firewalls & VPNs

Cloud security (AWS/Azure/GCP)

Scripting (Python/PowerShell/Bash)

Job description

We are seeking a hands‑on Information Security Specialist to serve as the primary individual contributor responsible for protecting the organization’s digital assets, infrastructure, and data. This role operates within the Global IT team and reports directly to the Head of Global IT, providing expert guidance on security strategy, risk posture, and compliance initiatives. The ideal candidate is equally comfortable responding to a live security incident, rolling out endpoint protection across the fleet, and preparing documentation for an external audit.

Essential Duties And Responsibilities

Incident Detection & Response

• Monitor, triage, and respond to security alerts from SIEM, EDR, and cloud‑native tools.
• Lead incident response activities including containment, eradication, root‑cause analysis, and post‑incident reporting.
• Maintain and continuously improve the incident response playbook and escalation procedures.

Threat Hunting & Vulnerability Management

• Proactively scan accounts, endpoints, and network segments for indicators of compromise and emerging threats.
• Conduct regular vulnerability assessments and coordinate remediation with system owners.
• Stay current on threat intelligence feeds and integrate findings into defensive operations.

Endpoint & Network Security

• Evaluate, deploy, and manage antivirus, EDR, and other endpoint threat‑detection tools across all company devices.
• Configure and maintain firewalls, VPNs, web proxies, and other perimeter controls.
• Ensure consistent security baselines across Windows, macOS, and Linux endpoints.

Security Awareness & Training

• Design, deliver, and track semi‑annual security awareness training for all employees.
• Develop supplemental materials such as phishing simulations, quick‑reference guides, and policy refreshers.
• Serve as a go‑to resource for security questions from staff at all levels.

Third‑Party & Vendor Security

• Evaluate third‑party security solutions, SaaS vendors, and cloud service providers against organizational requirements.
• Conduct vendor risk assessments and maintain an approved‑vendor security register.
• Negotiate security terms and review vendor SOC reports, penetration test results, and certifications.

Compliance & Audit Support

• Support the organization’s pursuit and maintenance of ISO 27001 and/or SOC 2 Type II certifications.
• Draft, review, and maintain information security policies, standards, and procedures.
• Gather evidence, coordinate with auditors, and remediate findings during internal and external audits.

Advisory

• Advise the Head of Global IT on security risks, investments, and strategic priorities.
• Provide security input on architecture reviews, new technology deployments, and change‑management processes.
• Produce regular security metrics and executive‑level reporting.

Requirements & Qualifications

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3‑5+ years of progressive experience in information security or cybersecurity operations.
• Demonstrated hands‑on experience with SIEM platforms, EDR solutions, and vulnerability scanners.
• Working knowledge of ISO 27001 and/or SOC 2 Type II frameworks and audit processes.
• Strong understanding of networking fundamentals (TCP/IP, DNS, HTTP/S, firewalls, VPN).
• Excellent written and verbal communication skills; able to translate technical risk into business language.
• Industry certifications such as CISSP, CISM, CompTIA Security+, or GIAC (e.g., GSEC, GCIH).
• Experience with cloud security in AWS, Azure, or GCP environments.
• Familiarity with scripting or automation (Python, PowerShell, Bash) for security workflows.
• Prior experience building or significantly contributing to a compliance program from the ground up.
• Experience conducting or managing penetration tests and red‑team exercises.

Physical Demands And Work Environment

• Frequently required to sit, stand, and move within the office environment.
• Regularly required to operate a computer and other office productivity machinery.
• The role may require occasional lifting of objects up to 20 pounds.
• Ability to travel between 5‑10% of the time.

Cytek is an equal‑opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, gender identity, sexual orientation, national origin, genetic information, disability status, veteran status, or any other characteristic protected by law.