Remote Senior Security Analyst - Cloud, Risk & Compliance

Energage, LLC; Exton (PA); Hybrid; USD 77,000 - 82,000; Full time

Benefits offered by this job

Remote work

Health insurance

401(k) plan

PTO and holidays

Training and professional development

Job summary

Energage is seeking a Senior Security Analyst to advance information security, privacy, and compliance programs by implementing and improving technical controls, governance processes, and risk management practices. You’ll work with Engineering, Product, IT, Legal, and HR to embed security into operations and ensure regulatory alignment.

Reporting to the Director of Information Security & Data Privacy, you will support SSDLC, threat modeling, and vulnerability management, while maintaining a

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent professional experience.
• 3+ years of progressive experience in Information Security, Cybersecurity, Security Engineering, or related discipline.
• Experience supporting security and compliance programs involving ISO 27001, SOC 2, NIST CSF, or similar standards and frameworks.
• Experience performing security risk assessments and vulnerability management.
• Working knowledge of cloud security principles and technologies in environments such as AWS, Azure, or Google Cloud.
• Strong written and verbal communication skills, including the ability to communicate security risks to technical and non-technical stakeholders.

Responsibilities

• Support the integration of security throughout the Secure Software Development Lifecycle (SSDLC).
• Partner with Engineering teams to implement secure coding standards, code scanning, dependency management, and application security testing.
• Perform application security reviews, threat modeling, and architecture assessments.
• Evaluate new technologies and software solutions for security risks before implementation.
• Support vulnerability remediation efforts within internally developed applications.
• Continuously monitor the organization's security posture using SIEM, endpoint protection, cloud security tools, and vulnerability management solutions.
• Investigate security alerts, suspicious activity, and potential incidents and coordinate response activities as appropriate.
• Implement and maintain cloud security controls across SaaS and cloud infrastructure.
• Manage encryption, key management, secure storage, identity management, and DLP technologies.

Skills

Strong written and verbal comms

Security monitoring tools

Networking principles

Identity and access management

Education

Bachelor's degree in Information Security/CS/IT or equivalent

Tools

SIEM

Endpoint security

Vulnerability management

Identity management

Cloud security (AWS/Azure/Google)

DLP technologies

Job description

Energage is seeking a Senior Security Analyst to advance information security, privacy, and compliance programs by implementing and improving technical controls, governance processes, and risk management practices. You’ll work with Engineering, Product, IT, Legal, and HR to embed security into operations and ensure regulatory alignment.

Reporting to the Director of Information Security & Data Privacy, you will support SSDLC, threat modeling, and vulnerability management, while maintaining a