Senior IT Security Analyst — Hybrid SF: Protect & Elevate

ISC2 East Bay Chapter; San Francisco (CA); Hybrid; USD 112,000 - 131,000; Full time

Job summary

California Academy of Sciences in San Francisco is seeking a Senior Security Analyst to configure, maintain, and monitor internal security controls across the academy’s IT environment. You will integrate security tools into daily operations, mature security architecture, and protect departments through proactive risk management.

The role requires strong hands-on experience with firewalls, VPNs, SIEM, and security frameworks (NIST, CISA, ISO 27001); collaboration with the IT team and external

Qualifications

• Minimum 5 years in IT and 3+ years in enterprise IT security.
• Bachelor's degree or equivalent training and experience.
• Security certifications (CISSP, CISM, GIAC) preferred.
• Experience with firewalls, VPNs, SIEM, and security tools.

Responsibilities

• Configure, maintain, and monitor internal security controls to prevent, detect, and respond to threats.
• Implement security best practices on network devices, firewalls, servers and workstations.
• Collaborate with IT Infrastructure to enforce security policies and improvements.
• Evaluate training programs and security awareness effectiveness.
• Participate in security incident response and patch management.
• Maintain awareness of standards (NIST, CISA, ISO 27001).
• Support external security advisors and tabletop exercises.

Skills

IT experience

Enterprise IT security

Firewall/VPN experience

Automation

SIEM

Problem solving

Communication

Teamwork

InfoSec management

Education

Bachelor's degree or equivalent

Tools

Trellix

FireEye

Tenable

Nessus

Sophos

Splunk

Job description

California Academy of Sciences in San Francisco is seeking a Senior Security Analyst to configure, maintain, and monitor internal security controls across the academy’s IT environment. You will integrate security tools into daily operations, mature security architecture, and protect departments through proactive risk management.

The role requires strong hands-on experience with firewalls, VPNs, SIEM, and security frameworks (NIST, CISA, ISO 27001); collaboration with the IT team and external