InfoSec Analyst — Build Secure, Risk‑Driven Systems (Startup)

Nicely Co.; Tulsa (OK); On-site; USD 80,000 - 110,000; Full time

Job summary

Nicely Co. is seeking an Information Security Analyst to help strengthen risk-based security, threat detection, incident readiness, and secure-by-design practices across the company. You will own day-to-day security work with clear ownership in an early-stage environment.

You will partner with colleagues across functions to turn company priorities into reliable, measurable outcomes, develop repeatable processes, and help build scalable cybersecurity foundations as the organization grows.

Qualifications

• Demonstrated capability relevant to risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.

Responsibilities

• Own day-to-day work across risk-based security, threat detection, incident readiness, vulnerability reduction, identity, controls, and secure-by-design practices.
• Translate the priorities of the Information Security Analyst role into documented plans, decisions, and measurable outcomes.
• Build lightweight, repeatable processes that fit an early-stage company and can mature over time.
• Collaborate across functions to resolve dependencies and deliver complete outcomes.
• Identify risks early, recommend proportionate solutions, and escalate consequential decisions.
• Maintain accurate documentation and handle company, customer, and employee information responsibly.
• Use relevant evidence and feedback to improve quality, efficiency, and stakeholder experience.
• Communicate progress, constraints, priorities, and results clearly to affected teammates.

Skills

Risk-based security

Threat detection

Incident readiness

Vulnerability reduction

Identity& access controls

Secure-by-design

Communication

Ownership

Documentation

Job description

Nicely Co. is seeking an Information Security Analyst to help strengthen risk-based security, threat detection, incident readiness, and secure-by-design practices across the company. You will own day-to-day security work with clear ownership in an early-stage environment.

You will partner with colleagues across functions to turn company priorities into reliable, measurable outcomes, develop repeatable processes, and help build scalable cybersecurity foundations as the organization grows.