Senior IT Security Analyst – California Academy of Sciences

ISC2 East Bay Chapter; San Francisco (CA); Hybrid; USD 112,000 - 131,000; Full time

Job summary

California Academy of Sciences in San Francisco is seeking a Senior Security Analyst to configure, maintain, and monitor internal security controls across the academy’s IT environment. You will integrate security tools into daily operations, mature security architecture, and protect departments through proactive risk management.

The role requires strong hands-on experience with firewalls, VPNs, SIEM, and security frameworks (NIST, CISA, ISO 27001); collaboration with the IT team and external

Qualifications

• Minimum 5 years in IT and 3+ years in enterprise IT security.
• Bachelor's degree or equivalent training and experience.
• Security certifications (CISSP, CISM, GIAC) preferred.
• Experience with firewalls, VPNs, SIEM, and security tools.

Responsibilities

• Configure, maintain, and monitor internal security controls to prevent, detect, and respond to threats.
• Implement security best practices on network devices, firewalls, servers and workstations.
• Collaborate with IT Infrastructure to enforce security policies and improvements.
• Evaluate training programs and security awareness effectiveness.
• Participate in security incident response and patch management.
• Maintain awareness of standards (NIST, CISA, ISO 27001).
• Support external security advisors and tabletop exercises.

Skills

IT experience

Enterprise IT security

Firewall/VPN experience

Automation

SIEM

Problem solving

Communication

Teamwork

InfoSec management

Education

Bachelor's degree or equivalent

Tools

Trellix

FireEye

Tenable

Nessus

Sophos

Splunk

Job description

California Academy of Sciences

A globally renowned scientific and cultural institution located in San Francisco’s Golden Gate Park. Our mission is to regenerate the natural world through science, learning, and collaboration.

• Full Time
• San Francisco, CA
• Posted 5 months ago

About The Opportunity

Reporting to the Director of Information Technology, the Senior Security Analyst is responsible for configuring, maintaining, and monitoring internal security controls to prevent, detect, and respond to cyber threats. The Analyst will bring information security expertise to integrate security tools into daily operations, contribute to the improvement of security architecture, and assess/improve security in departments across the Academy. This position plays a critical role in maturing our IT and security programs at the Academy.

Key Responsibilities

• Manage, coordinate, and implement the latest security best practices on network devices, firewalls, servers, and workstations.
• Partner with the IT Infrastructure Manager to establish and maintain a system for ensuring security policies are met.
• Evaluate the effectiveness of awareness and security training programs and recommend improvements.
• Analyze, research, and resolve security breaches and vulnerability issues.
• Evaluate, prioritize, and coordinate patching.
• Provide security expertise and consulting to the IT Team and CAS internal technology partners.
• Partner with external security advisors to evaluate security posture and review/remediate issues.
• Participate in team exercises to identify potential security risks and tabletop scenarios.
• Maintain awareness of industry-standard security trends, benchmarks, and frameworks (e.g., NIST, CISA, ISO 27001).
• Perform off‑hour/weekend work as required.

Qualifications

• 5+ years of experience in Information Technology.
• 3+ years of enterprise IT security experience.
• Experience with administration/use of security software such as Trellix, FireEye, Tenable, Nessus, Sophos, Splunk.
• BS/BA or equivalent training and experience.
• Information Security Certifications (CISSP, CISM, GIAC) strongly preferred.
• Hands‑on experience with firewalls, network security, and VPNs preferred.
• Hands‑on experience with SIEM preferred.
• Automation experience preferred.
• Strong problem‑solving and troubleshooting skills.
• Ability to interact with users of varying technical knowledge.
• Team collaboration skills.
• Advanced knowledge of information security management processes, tools, and techniques.

Physical Environment

Must be able to carry 50 lbs. and perform repetitive motions 75% of time. Reasonable accommodations may be made.

Compensation & Benefits

Salary: $121,762.00. Compensation commensurate with qualifications, with a total package emphasizing base salary and comprehensive benefits.

Schedule

Full-time, 40 hours per week, Hybrid (3 days onsite).

EEO Statement

The California Academy of Sciences will give full consideration for employment to all qualified applicants with criminal histories in a manner consistent with the requirements of the San Francisco Fair Chance Ordinance (SF Police Code, Article 49).