Senior Information Security Analyst

Bitsoft International, Inc; Philadelphia (Philadelphia County); Hybride; USD 83 000 - 152 000; Plein temps

Résumé du poste

Bitsoft International, Inc. is seeking a Senior Information Security Analyst in Philadelphia, PA for a 12+ month hybrid engagement. The role requires onsite presence three days a week and performance in incident response, risk management, and security operations.

The ideal candidate has 5–8 years of information security experience with strong policy and compliance know-how across HITRUST, PCI, NIST, HIPAA, and SOC2. Strong communication and project management skills are essential.

Qualifications

• 5–8 years of information security experience or 3–5 years in IT with strong security responsibilities.
• Experience with incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge of compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.

Connaissances

Information security experience

Incident response

System monitoring

Risk assessments

Vulnerability assessment

Project management

Change management

Technical writing

Description du poste

Job Title: Senior Information Security Analyst

Location: Philadelphia, PA 19103 (Hybrid 3 Days/Week Onsite)

Duration: 12+ Months

Pay Rate: $Market/Hour

Eligibility

Must currently reside in PA, NJ, or DE (Tri–State Area) OR be willing to relocate to Philadelphia, PA, upon confirmation and be available onsite from Day 1.

Work Authorization

W2 only Open to US Citizens, Green Card Holders (No C2C / No Third Parties)

Qualifications

Required:

• 5 8 years of relevant information security experience (or 3 5 years in IT systems administration with strong security responsibilities).
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws.
• Knowledge with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2.
• Knowledge across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints.
• Experience with vulnerability assessment and penetration testing engagements.
• Experience with change management and project management.
• Excellent technical writing and presentation skills; ability to translate technical risk to business impact.

Preferred:

• CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer.
• Experience securing Azure, AWS, GCP in enterprise/hybrid environments.
• Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE ATT&CK.