Security Analyst

Cybersecurity Jobs; New York (NY); On-site; USD 52,000 - 62,000; Full time

Job summary

Vnsure Business Solution is seeking a Security Analyst for an onsite role in New York, NY. You will monitor security events with SIEM, conduct vulnerability assessments, and support incident response to protect the IT environment.

The role emphasizes compliance with ISO 27001/27002, NIST, PCI DSS, RMF, and working with Azure, AWS, and on-prem networks. Strong scripting skills and firewall experience are valued.

Qualifications

• Bachelor’s degree in computer science or information technology.
• Certifications such as CISSP, CEH or CompTIA Security+ are highly desirable.
• Experience with network security monitoring and incident response.

Responsibilities

• Monitor and analyze security events using SIEM tools to detect threats.
• Perform vulnerability assessments and support security risk investigations.
• Manage firewall configurations (Cisco ASA) and VPN/IPsec deployments.
• Support incident response activities and document findings.
• Develop system security plans aligned with ISO 27001, ISO 27002, NIST, FedRAMP, PCI DSS, RMF.

Skills

Networking concepts

Routing protocols

LAN/WAN architecture

SIEM tooling

EDR/IDS

Python scripting

Bash scripting

Security frameworks

Education

Bachelor’s degree in computer science or information technology

Certifications such as CISSP CEH or CompTIA Security+

Tools

Splunk

SolarWinds

Nmap

Fiddler

Job description

Vnsure Business Solution is looking for a Security Analyst to help safeguard the company’s IT environment. This onsite role in New York, NY focuses on proactive monitoring, vulnerability assessments, and incident response support, with an emphasis on maintaining security and compliance alignment with ISO 27001 and NIST.

What you will do

You will monitor and analyze security events using SIEM tools to detect potential threats and weaknesses. The role also includes investigating security risk across LAN, WAN, and cloud environments.

• Use Security Information and Event Management (SIEM) capabilities to review security events and identify potential threats and vulnerabilities.
• Perform vulnerability assessments and support security risk investigations across network infrastructure, including LAN, WAN, and cloud environments.
• Manage and configure firewalls such as Cisco ASA, and implement network security protocols including IPsec, SSL, and VPNs to protect data transmission.
• Support incident response activities by investigating breaches, coordinating recovery actions, and documenting findings following established procedures.
• Help develop and maintain system security plans aligned with standards such as ISO 27002, FIPS, and FedRAMP.
• Partner with IT teams on system hardening through security configurations, patch management, and hardening practices on Windows, Linux (Debian, CentOS), and macOS.
• Contribute to security engineering initiatives involving Azure, Google Cloud Platform, vSphere, load balancing, and high availability solutions.

What you bring

• Proven experience with computer networking concepts, including routing protocols such as OSPF and BGP, plus LAN/WAN architecture and network support.
• Strong understanding of cybersecurity tooling, including SIEM platforms like Splunk and SolarWinds, IDS/IPS, Endpoint Detection and Response (EDR), and threat detection and response methodologies.
• Familiarity with security standards and compliance expectations, including ISO 27001/ISO 27002, NIST frameworks, PCI DSS, and RMF.
• Hands-on capability with firewall configuration (including Cisco ASA), VPN setup using IPsec, IDS/IPS deployment, and core networking protocols such as TCP/IP, DNS, and DHCP.
• Ability to automate security tasks using scripting languages such as Python or Bash (experience with Nmap or Fiddler is a plus).
• Capability to conduct vulnerability research and assessments, support system hardening, and handle incident management in complex IT environments.
• Educational background in computer science or information technology. Certifications such as CISSP, CEH, or CompTIA Security+ are highly desirable.

Tools and technologies

• SIEM: Splunk, SolarWinds
• Security controls: IDS/IPS, EDR
• Network security: Cisco ASA, IPsec, SSL, VPNs
• Compliance and frameworks: ISO 27001, ISO 27002, NIST, FIPS, FedRAMP, PCI DSS, RMF
• Networking: OSPF, BGP, TCP/IP, DNS, DHCP
• Scripting and tooling: Python, Bash, Nmap, Fiddler
• Cloud and virtualization: Azure, Google Cloud Platform, vSphere

Compensation and location

Pay: Up to $30.00 per hour.
Work location: Onsite in New York, NY.