Senior InfoSec Analyst: Lead Incident Response & Security

SageNet; Tulsa (OK); Hybrid; USD 90,000 - 130,000; Full time

Job summary

SageNet is seeking a Senior Information Security Analyst to drive and mature the information security program. You will own security operations, governance, risk, and compliance activities while partnering with the Director of Information Security for day-to-day execution.

This role blends hands-on security work with cross-functional leadership across IT, Network Engineering, Operations, and Development teams to embed security into infrastructure, applications, and processes.

Qualifications

• 5+ years of experience in information security, network security, or security governance roles.
• Bachelor’s degree in information security, Computer Science, MIS, or equivalent professional experience.
• At least one security certification (e.g., Security+, CySA+, SSCP, GSEC) is required.
• Strong working knowledge of vulnerability management tools, SIEM platforms, and log analysis.
• Solid understanding of firewall architectures and access control review methodologies.
• Working knowledge of PCI DSS 4.0 and MSP shared-responsibility models.
• Strong understanding of application security principles and OWASP Top 10.
• Experience coordinating remediation across technical and non-technical teams.

Responsibilities

• Oversee security operations and incident response coordination.
• Lead security governance, risk, and compliance activities incl. PCI DSS.
• Partner with IT, Network Engineering, Operations, and Development to embed security.
• Develop and deliver security awareness and training initiatives.

Skills

Vulnerability management

SIEM platforms

Communication skills

Risk & compliance

Education

Bachelor’s degree in information security / CS / MIS

Tools

SIEM platforms

Vulnerability scanners

Job description

SageNet is seeking a Senior Information Security Analyst to drive and mature the information security program. You will own security operations, governance, risk, and compliance activities while partnering with the Director of Information Security for day-to-day execution.

This role blends hands-on security work with cross-functional leadership across IT, Network Engineering, Operations, and Development teams to embed security into infrastructure, applications, and processes.