Senior Information Security Analyst

Bi3 Careers; Philadelphia (Philadelphia County); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Hybrid schedule

Job summary

Bi3 Careers seeks an Information Security Analyst to join our security operations team in a hybrid Philadelphia office. The role focuses on protecting multicloud environments (GCP, Azure, AWS) and on-prem systems, with emphasis on CSPM, IAM, and incident remediation.

You will monitor alerts, perform security assessments, and develop playbooks while collaborating with infrastructure and engineering teams. Ideal candidates have hands-on cloud security experience and strong documentation skills.

Qualifications

• Hands-on GCP security experience with Security Command Center and IAM.
• Experience with Azure Defender for Cloud.
• Experience with CSPM in multicloud environments.
• Strong security monitoring, incident response, and remediation skills.

Responsibilities

• Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on-prem.
• Perform cloud security assessments and remediation of high-risk findings.
• Support CSPM and improve enterprise security controls.
• Collaborate with infra and engineering teams to troubleshoot security issues.
• Develop detailed playbooks for incidents and remediation procedures.
• Support security initiatives including cloud security improvements and email security migrations.
• Conduct risk assessments and support regulatory compliance requirements.

Skills

GCP Security

Azure Defender

CSPM (multicloud)

Incident Response

Tools

Qualys

Palo Alto

Proofpoint

Job description

Seeking a hands‑on Information Security Analyst to support enterprise security operations across multicloud and on‑premises environments. This position focuses heavily on Google Cloud Platform (GCP), Azure Defender for Cloud, Cloud Security Posture Management (CSPM), and security incident remediation.

The team is open to both Information Security Analysts and Senior Information Security Analysts.

Key Responsibilities

• Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on‑premises environments.
• Perform cloud security assessments, secure score reviews, vulnerability analysis, and remediation of high‑risk findings.
• Support Cloud Security Posture Management (CSPM) and proactively improve enterprise security controls.
• Collaborate with infrastructure and engineering teams to troubleshoot and resolve security issues.
• Develop detailed technical playbooks documenting security incidents, troubleshooting, and remediation procedures.
• Support security initiatives, including cloud security improvements and email security migrations.
• Conduct risk assessments and support regulatory compliance requirements.

Required Qualifications

• 5-8 years of information security experience, or 3-5 years in IT systems administration with significant security responsibilities.
• Hands‑on GCP security experience, particularly Security Command Center and Identity and Access Management (IAM).
• Experience with Azure Defender for Cloud.
• Experience with CSPM in a multicloud enterprise environment.
• Strong security monitoring, incident response, vulnerability assessment, and remediation experience.
• Knowledge of security compliance frameworks such as HITRUST, NIST, HIPAA, PCI, or SOC 2.
• Strong technical documentation and communication skills.

Preferred Qualifications

• Qualys vulnerability management and Palo Alto firewalls.
• Proofpoint and Microsoft Defender for Office 365 experience.
• CCSP, AZ-500, or Google Professional Cloud Security Engineer certification.
• Healthcare or other regulated industry experience.

Work Arrangement

• Hybrid: Onsite Tuesday-Thursday in Center City Philadelphia; remote Monday and Friday.
• Must reside in Pennsylvania, New Jersey, or Delaware.