Senior Information Security Analyst

Bi3 Careers; Philadelphia (Philadelphia County); Hybrid; USD 110,000 - 140,000; Full time

Benefits offered by this job

Hybrid work schedule

Job summary

Bi3 Careers is seeking a hands-on Information Security Analyst to support enterprise security operations across multicloud and on-premises environments, with heavy emphasis on Google Cloud Platform (GCP), Azure Defender for Cloud, CSPM, and security incident remediation.

The role welcomes both Information Security Analysts and Senior Information Security Analysts, offering a hybrid work setup with onsite Center City Philadelphia on Tue-Thu and remote Mon/Fri.

Qualifications

• 5–8 years of information security experience.
• Hands-on GCP security experience with Security Command Center and IAM.
• Experience with Azure Defender for Cloud and CSPM in a multi-cloud environment.
• Strong security monitoring, incident response, vulnerability assessment and remediation experience.

Responsibilities

• Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on-premises environments.
• Perform cloud security assessments and secure score reviews.
• Remediate high-risk findings.
• Support CSPM and improve enterprise security controls.
• Collaborate with infrastructure and engineering teams to resolve security issues.
• Develop detailed technical playbooks documenting security incidents, troubleshooting and remediation procedures.
• Support security initiatives including cloud security improvements and email security migrations.
• Conduct risk assessments and support regulatory compliance requirements.

Skills

Security monitoring

Incident response

Vulnerability assessment

Documentation

Communication skills

Tools

GCP Security Command Center

Azure Defender for Cloud

CSPM tools

Qualys

Palo Alto firewalls

Proofpoint

Microsoft Defender for Office 365

Job description

Seeking a hands-on Information Security Analyst to support enterprise security operations across multicloud and on-premises environments. This position focuses heavily on Google Cloud Platform (GCP), Azure Defender for Cloud, Cloud Security Posture Management (CSPM), and security incident remediation.

The team is open to both Information Security Analysts and Senior Information Security Analysts.

Key Responsibilities

• Monitor, investigate, and remediate security alerts across GCP, Azure, AWS, and on-premises environments.
• Perform cloud security assessments, secure score reviews, vulnerability analysis, and remediation of high-risk findings.
• Support Cloud Security Posture Management (CSPM) and proactively improve enterprise security controls.
• Collaborate with infrastructure and engineering teams to troubleshoot and resolve security issues.
• Develop detailed technical playbooks documenting security incidents, troubleshooting, and remediation procedures.
• Support security initiatives, including cloud security improvements and email security migrations.
• Conduct risk assessments and support regulatory compliance requirements.

Required Qualifications

• 5-8 years of information security experience, or 3-5 years in IT systems administration with significant security responsibilities.
• Hands on GCP security experience, particularly Security Command Center and Identity and Access Management (IAM).
• Experience with Azure Defender for Cloud.
• Experience with CSPM in a multicloud enterprise environment.
• Strong security monitoring, incident response, vulnerability assessment, and remediation experience.
• Knowledge of security compliance frameworks such as HITRUST, NIST, HIPAA, PCI, or SOC 2.
• Strong technical documentation and communication skills.

Preferred Qualifications

• Qualys vulnerability management and Palo Alto firewalls.
• Proofpoint and Microsoft Defender for Office 365 experience.
• CCSP, AZ-500, or Google Professional Cloud Security Engineer certification.
• Healthcare or other regulated industry experience.

Work Arrangement

• Hybrid: Onsite Tuesday-Thursday in Center City Philadelphia; remote Monday and Friday.
• Must reside in Pennsylvania, New Jersey, or Delaware.