IT Security Analyst- Remote

Yoh; New York (NY); Remote; USD 58,000 - 83,000; Full time

Job summary

Yoh IT Security Analyst (Remote) is a 7-month contract focusing on security guidance, risk assessments, threat modeling, and security architecture across on‑prem, cloud, hybrid, and SaaS environments. This role supports large-scale transformation initiatives and partners with technology and business teams to embed security into the lifecycle.

The position requires 5+ years in security assessments, 3+ years in TRAs and threat modeling, and strong knowledge of U.S. regulatory requirements.

Qualifications

• 5+ years of hands-on experience performing security assessments for applications, infrastructure, and network environments.
• 3+ years of experience conducting Threat Risk Assessments and threat modeling across on-premises, cloud, hybrid, and SaaS environments.
• 2+ years of experience in security architecture, security engineering, software development, or hands-on implementation of security solutions.
• 3+ years of experience reviewing vulnerability reports, validating control effectiveness, and assessing server hardening requirements.
• Strong understanding of U.S. regulatory requirements and security compliance practices.
• Experience identifying security risks and providing practical remediation recommendations.

Responsibilities

• Provide security guidance during the planning, design, development, and implementation of technology solutions.
• Conduct Threat Risk Assessments (TRAs) and threat modeling activities for applications, infrastructure, cloud platforms, and enterprise initiatives.
• Review and assess security controls to ensure alignment with organizational standards and regulatory requirements.
• Perform security advisory reviews for complex applications, platforms, and network environments.
• Analyze security risks and recommend mitigation strategies.
• Support cloud initiatives by providing quality assurance reviews of threat assessments and security architecture designs.
• Collaborate with technology, infrastructure, development, and business teams to implement secure-by-design principles.
• Evaluate existing security solutions and recommend enhancements to address emerging threats and evolving business needs.
• Review vulnerability reports, validate security controls, and assess remediation plans.
• Provide guidance on security policies, standards, and best practices.
• Support security posture reviews and ensure appropriate security controls are implemented and maintained.
• Conduct industry research and benchmarking to identify emerging threats, trends, and mitigation strategies.
• Build strong relationships with business stakeholders and provide ongoing security consultation.

Skills

Security assessments

Threat modeling

Security architecture

Vulnerability review

Regulatory compliance

Cloud security

Education

Bachelor's degree in CS/Info Sec

Certifications: CISSP/CISM/CCSP/CRISC

Tools

ServiceNow

AWS

Azure

GCP

Job description

IT Security Analyst ( Remote)

Contract Length: 7 Months

Potential Extension: Yes

Pay Rate: $50-$60 hourly W2

We are seeking an experienced Information Security Advisor to join a growing security advisory team that supports enterprise-wide technology initiatives. This role focuses on providing security guidance, risk assessments, threat modeling, and security architecture recommendations across a diverse technology landscape that includes on-premises, cloud, hybrid, and SaaS environments.

This is an excellent opportunity to work on large-scale transformation initiatives, including cloud adoption and modernization efforts, while partnering with business and technology teams to ensure security is embedded throughout the project lifecycle.

Key Responsibilities

• Provide security guidance during the planning, design, development, and implementation of technology solutions.
• Conduct Threat Risk Assessments (TRAs) and threat modeling activities for applications, infrastructure, cloud platforms, and enterprise initiatives.
• Review and assess security controls to ensure alignment with organizational standards and regulatory requirements.
• Perform security advisory reviews for complex applications, platforms, and network environments.
• Analyze security risks and recommend mitigation strategies.
• Support cloud initiatives by providing quality assurance reviews of threat assessments and security architecture designs.
• Collaborate with technology, infrastructure, development, and business teams to implement secure-by-design principles.
• Evaluate existing security solutions and recommend enhancements to address emerging threats and evolving business needs.
• Review vulnerability reports, validate security controls, and assess remediation plans.
• Provide guidance on security policies, standards, and best practices.
• Support security posture reviews and ensure appropriate security controls are implemented and maintained.
• Conduct industry research and benchmarking to identify emerging threats, trends, and mitigation strategies.
• Build strong relationships with business stakeholders and provide ongoing security consultation.

Required Qualifications

• 5+ years of hands-on experience performing security assessments for applications, infrastructure, and network environments.
• 3+ years of experience conducting Threat Risk Assessments and threat modeling across on-premises, cloud, hybrid, and SaaS environments.
• 2+ years of experience in security architecture, security engineering, software development, or hands-on implementation of security solutions.
• 3+ years of experience reviewing vulnerability reports, validating control effectiveness, and assessing server hardening requirements.
• Strong understanding of U.S. regulatory requirements and security compliance practices.
• Experience identifying security risks and providing practical remediation recommendations.
• Strong knowledge of application security controls, compensating controls, and security best practices.

Preferred Qualifications

• Experience with ServiceNow.
• Knowledge of cloud platforms such as AWS, Azure, or Google Cloud Platform (GCP).
• Security certifications such as CISSP, CISM, CCSP, CRISC, or similar.
• Familiarity with security frameworks and standards including:
  • NIST 800-53
  • ISO 27001 / ISO 27002
  • ISO 27017 / ISO 27018
  • PCI DSS
  • CIS Controls

Desired Skills

• Excellent verbal and written communication skills.
• Ability to communicate complex security concepts to technical and non-technical audiences.
• Strong documentation and presentation skills.
• Ability to work independently while managing multiple priorities.
• Strong stakeholder management and relationship-building capabilities.

Education

• Bachelor's degree in Computer Science, Information Security, Information Technology, Cybersecurity, or a related field.
• Equivalent combination of education and professional experience will be considered.

Estimated Min Rate: $42.00

Estimated Max Rate: $60.00

What’s In It for You?

We welcome you to be a part of the largest and legendary global staffing companies to meet your career aspirations. Yoh's network of client companies has been employing professionals like you for over 65 years in the U.S., UK and Canada. Join Yoh's extensive talent community that will provide you with access to Yoh's vast network of opportunities and gain access to this exclusive opportunity available to you. Benefit eligibility is in accordance with applicable laws and client requirements. Benefits include:

• Medical, Prescription, Dental & Vision Benefits (for employees working 20+ hours per week)
• Health Savings Account (HSA) (for employees working 20+ hours per week)
• Life & Disability Insurance (for employees working 20+ hours per week)
• MetLife Voluntary Benefits
• Employee Assistance Program (EAP)
• 401K Retirement Savings Plan
• Direct Deposit & weekly epayroll
• Referral Bonus Programs
• Certification and training opportunities

Note: Any pay ranges displayed are estimations. Actual pay is determined by an applicant's experience, technical expertise, and other qualifications as listed in the job description. All qualified applicants are welcome to apply.

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.

Visit https://www.yoh.com/applicants-with-disabilities to contact us if you are an individual with a disability and require accommodation in the application process.

For California applicants, qualified applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. All of the material job duties described in this posting are job duties for which a criminal history may have a direct, adverse, and negative relationship potentially resulting in the withdrawal of a conditional offer of employment.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

By applying and submitting your resume, you authorize Yoh to review and reformat your resume to meet Yoh's hiring clients' preferences. To learn more about Yoh's privacy practices, please see our Candidate Privacy Notice: https://www.yoh.com/privacy-notice

Stay Safe During Your Job Search

Fraudulent recruiting communications have become increasingly common. Emails from Yoh recruiters will only come from an @yoh.com email address. Yoh will never ask candidates to pay fees, purchase equipment, send gift cards, or transfer funds as part of the recruiting or hiring process. If you receive a communication that appears suspicious or requests payment, contact Yoh directly before responding or sharing personal information.