Senior Information Security Analyst II

Freenome Holdings, Inc.; United States; Remote; USD 131,000 - 201,000; Full time

Job summary

Join a leading biotech company as a Senior Information Security Analyst, where you will protect vital information assets and ensure compliance with security standards. This remote role involves implementing security measures, conducting investigations, and collaborating with teams to enhance security protocols. If you have extensive experience in information security and a passion for making a difference, we want you on our team.

Benefits

Pre-IPO equity

Cash bonuses

Full range of medical benefits

Qualifications

• 8+ years of experience in Information Security.
• Current CISSP certification required.
• 3 years' hands-on experience with SIEM tools.

Responsibilities

• Implement and monitor security systems to detect incidents.
• Conduct security investigations and root cause analysis.
• Ensure compliance with regulations and standards.

Skills

Analytical

Problem Solving

Communication

Education

Bachelor's degree in Information Security

Tools

SIEM

IDS/IPS

Cloud Security

Job description

Help set a new direction in the fight against cancer.

At Freenome, we’re on a mission to empower everyone to prevent, detect, and treat disease.

That’s why we’re developing next-generation blood tests for early cancer detection, so that we can find cancer when it’s most treatable.

Notice to candidates: Please be aware of recruiting scams. Learn More.

Job Openings

New

Senior Information Security Analyst II

Remote

Freenome is a high-growth biotech company developing tests to detect cancer using a standard blood draw. To do this, Freenome uses a multiomics platform that combines tumor and non-tumor signals with machine learning to find cancer in its earliest, most-treatable stages.

Cancer is relentless. This is why Freenome is building the clinical, economic, and operational evidence to drive cancer screening and save lives. Our first screening test is for colorectal cancer (CRC) and advanced adenomas, and it’s just the beginning.

Founded in 2014, Freenome has ~400 employees and continues to grow to match the scope of our ambitions to provide access to better screening and earlier cancer detection.

At Freenome, we aim to impact patients by empowering everyone to prevent, detect, and treat their disease. This, together with our high-performing culture of respect and cross-collaboration, is what motivates us to make every day count.

Become a Freenomer

Do you have what it takes to be a Freenomer? A “Freenomer” is a determined, mission-driven, results-oriented employee fueled by the opportunity to change the landscape of cancer and make a positive impact on patients’ lives. Freenomers bring their diverse experience, expertise, and personal perspective to solve problems and push to achieve what’s possible, one breakthrough at a time.

About this opportunity:

At Freenome, the Senior Information Security Analyst plays a key role in protecting the organization's information assets by implementing, maintaining and monitoring security related events and incidents. This role investigates, analyzes, and responds to cyber incidents within the Freenome's local and cloud networks, or enclaves and will provide expertise regarding collecting evidence and do forensic analysis. This role will also define and implement security controls, ensuring compliance with relevant regulations and standards, and providing expertise in securing cloud of office environments. This position requires a blend of technical security skills, compliance knowledge, and a proactive approach to identifying and mitigating risks.

This position will report directly to the Director of Information Security. This role will be a Remote role.

What you’ll do:

Security Operations:

• Implement, maintain, monitor and improve security systems (e.g., SIEM, IDS/IPS) to detect, alert and respond to security incidents.
• Conduct security investigations and perform root cause analysis.
• Ensure that incidents are correctly reported, documented, investigated andconcluded in accordance with operational policies and procedures.
• Manage security events as part of security operations, responding to urgent alerts, which may include off-hours investigation activities.
• Manage and maintain security infrastructure (e.g., cloud firewalls, VPNs).
• Perform vulnerability assessments and penetration testing.
• Excellent knowledge of Endpoint protection.
• Provide technical security expertise and guidance to other teams.
• Evaluate and recommend new security technologies and solutions.
• Provide ideas and feedback to improve the overall SOC capabilities andmaturity.
• Perform all other Information Security related duties as assigned andcontribute to the success of the Information Security Team.
  

Compliance:

• Participate in internal and external security audits.
• Perform regular asset, account and access reviews.
• Assist in the development, maintenance, and implementation of security policies, standards, and procedures.
• Ensure compliance with relevant regulations and standards (e.g., HITRUST, NIST 800-53r5 and SOC 2 Type 2).
• Track and remediate compliance findings.
  
• Design, implement, and maintain security controls for cloud environments.
• Collaborate with IT to ensure the security of Cloud services, including virtualmachines, storage, networking, and databases.
• Conduct security assessments of cloud configurations and deployments.
• Develop and maintain cloud security best practices and guidelines.
• Stay up-to-date on security best practices and emerging threats

Must haves:

• Bachelor's degree in Information Security, or a related field.
• 8+ years of experience working in Information Security.
• Current CISSP certification.
• Strong understanding of security principles, technologies, and best practices.
• At least 3 years' hands-on experience in SIEM tools implementing,operating, maintaining, and incident management in mission criticalenvironments.
• Experience with vulnerability management and penetration testing.
• Familiarity with relevant regulations and standards (HITRUST, NIST 800-53r5,SOC 2 Type 2).
• Strong analytical and problem-solving skills.
• Ability to work independently and as part of a team.
  

Nice to haves:

• Other Security certifications (e.g., CCSP, CCAK, CCSK, CISM, GCIH, GCIA, GSEC, Azure Security Engineer Associate, GCP Cloud Security Engineer).
• Experience with scripting languages (e.g., Python, PowerShell, Bash).
• In-depth knowledge of Microsoft Azure security services and best practices.
• Experience with security automation and orchestration.
• Experience with Governance, Risk, and Compliance (GRC) tools.
• Knowledge and expertise in a myriad of Information Security Solutions across cloud and IT security.
• Excellent analytical, interpersonal and communication skills both oral andwritten.
• An unwavering personal integrity and work ethic.
• A systematic problem-solving approach, coupled with effectivecommunication skills and a sense of ownership and drive.

Benefits and additional information:

The US target range of our base salary for new hires is $131,325 - $201,000 . You will also be eligible to receive pre-IPO equity, cash bonuses, and a full range of medical, financial, and other benefits depending on the position offered. Please note that individual total compensation for this position will be determined at the Company’s sole discretion and may vary based on several factors, including but not limited to, location, skill level, years and depth of relevant experience, and education. We invite you to check out our career page @ freenome.com/job-openings/ for additional company information.

Freenome is proud to be an equal-opportunity employer, and we value diversity. Freenome does not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.

Applicants have rights under Federal Employment Laws.

Accepted file types: pdf, doc, docx, txt, rtf

Enter manually

Accepted file types: pdf, doc, docx, txt, rtf

What SIEM tools are you most experienced with? *

Do you currently have a CISSP certification? * Select...

Are you fully authorized to work in the United States without need for sponsorship now or in the future? * Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Freenome’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...

Voluntary Self-Identification of Disability

Form CC-305

Page 1 of 1

OMB Control Number 1250-0005

Expires 04/30/2026

Voluntary Self-Identification of Disability

Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026
Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities. We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal. To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential. No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way. If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .

How do you know if you have a disability?

A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability. Disabilities include, but are not limited to:

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

Disability Status Select...

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.