Security Analyst II

Yes Energy; Boston (MA); Remote; USD 80,000 - 95,000; Full time

Job summary

Yes Energy is hiring a Security Analyst II to help keep the grid secure and customers protected. You will join a growing Security & Compliance team, build automations, support on-prem and cloud baselines, and assist with audits across AWS, Azure, and Oracle Cloud.

You’ll work with DevOps and engineering to remediate risks, create evidence for frameworks, and contribute to incident response and threat intelligence efforts. This role offers remote or office options.

Qualifications

• Bachelor’s degree or equivalent experience.
• Minimum of two years of security exposure in IT, security, or DevOps.
• Scripting abilities in Python, PowerShell, or Bash.
• Strong OS, networking, and cloud fundamentals.
• Familiarity with security frameworks (NIST, SOC 2, ISO 27001).
• Experience with vulnerability management tools (Tenable/Qualys/Rapid7).

Responsibilities

• Review and triage findings from vulnerability scans and tests to identify risks.
• Remediate vulnerabilities with DevOps, engineers, and system owners.
• Support secure baselines for AWS, Azure, and Oracle Cloud resources.
• Monitor cloud environments for misconfigurations and suspicious activity.
• Assist with IAM policy reviews and privilege audits.
• Write scripts to automate detection, reporting, or remediation of security issues.
• Integrate security data into dashboards or workflow tools (Jira, SIEM, etc.).
• Provide evidence and control mapping for SOC 2, ISO 27001, or customer audits.
• Collaborate with compliance to map technical controls to frameworks.
• Assist with incident triage, response, and root-cause analysis.
• Support endpoint protection, log monitoring, and threat intel initiatives.

Skills

Python scripting

PowerShell

Bash

Cloud security

Vulnerability mgmt

AWS/Azure security

Education

Bachelor’s degree or equivalent

Tools

Tenable

Qualys

Rapid7

AWS Inspector

Microsoft Defender

Job description

Join the Market Leader in Electric Power Data and Analytics Solutions

The electrical grid is the largest and most complicated machine ever built. Yes Energy's industry-leading electric power trading analytics software provides real-time visibility into the massive amount of data generated by the North American electrical grid daily. Our unique and innovative view of the data informs real-time trading decisions and mid-to-long-term investment decisions that keep utility prices low, support the energy transition, and keep the grid running. It's both challenging work and work with a purpose.Be a part of our successful, growing business during international transformation.

Position Summary

As a Security Analyst II, you will be helping keep the grid safe and our customers secure. You will be part of our growing Security & Compliance team, building security automations, creating baselines for on-premises and cloud environments, assisting teams with vulnerability scans and management, supporting our compliance team with evidence gathering and audits, and more. This is an opportunity to be part of a small team with increasing importance and responsibility. You will help Yes Energy stay secure into the future.

Position Details

• Salary range: 80,000 - 95,000
• Location: Yes Energy Core Offices or Remote
• Full-time
• Reporting to: Senior Manager, IT and Compliance
• Travel requirement: up to 15% to Yes Energy's core offices

Primary Responsibilities

• Review and triage findings from vulnerability scans, penetration tests, and configuration assessments to identify potential security risks.
• Work with DevOps, engineers, and system owners to remediate vulnerabilities across multi-cloud and on-prem assets.
• Support secure configuration baselines for AWS, Azure, and Oracle Cloud resources.
• Monitor cloud environments for misconfigurations and suspicious activity.
• Assist with IAM policy reviews and privilege audits.
• Write scripts (Python, PowerShell, or Bash) to automate detection, reporting, or remediation of security issues.
• Integrate security tools and data into dashboards or workflow systems (e.g., Jira, SIEM, or ticketing).
• Provide technical evidence and control implementation support for SOC 2, ISO 27001, or customer security assessments.
• Partner with the compliance team to map technical controls to framework requirements.
• Assist with incident triage, response, and root cause analysis.
• Support endpoint protection, log monitoring, and threat intelligence initiatives.

Minimum Qualifications

• Bachelor’s degree in a related field or equivalent related experience
• Minimum of two years of experience with security exposure in information security, systems administration, or DevOps.Proficient in at least one scripting language (Python, PowerShell, or Bash).Strong understanding of operating systems, networking, and cloud fundamentals.Knowledge of security frameworks such as NISTFamiliarity with vulnerability management tools (e.g., Tenable, Qualys, Rapid7, AWS Inspector, or Microsoft Defender).Working knowledge of AWS, Azure, and/or Oracle Cloud security controls and services.Comfortable working cross-functionally with engineering, IT, and compliance teams.

Knowledge, Skills, And