Information Security Analyst

This is a fully remote position, open to applicants in Poland, +5 more states.

📋 Description

• Oversee, evaluate, and enhance the organization's security posture across cloud infrastructure, internal systems, and compliance initiatives.

• Engage directly with security tools, cloud configurations, and compliance standards to safeguard company and client information.

• Manage the complete security lifecycle: monitoring and detection, vulnerability management, enforcement of access controls, compliance assistance (HIPAA, SOC 2), and incident response.

• Examine alerts, validate security controls, perform assessments, manage access reviews, and assist in audit preparations.

• Leverage AI tools for log analysis, automate reporting processes, and expedite daily tasks.

⛳️ Requirements

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field.

• 2–4 years of experience in one or more of the following areas:

• - Information security and security operations

• - Security monitoring, detection, and incident response

• - Vulnerability management and assessment

• - IT security and access management

• - Compliance support (HIPAA, SOC 2, or similar frameworks)

• - Practical experience with cloud platforms (GCP and/or Azure)

• - Understanding of security fundamentals: IAM, encryption, network security, and endpoint protection

• - Experience managing identity and access controls (SSO, MFA, RBAC) and conducting regular access reviews

• - Capability to monitor security events, investigate alerts, and assist in incident detection, response, and post-incident analysis

• - Experience in conducting or aiding vulnerability assessments and coordinating remediation efforts

• - Familiarity with HIPAA, SOC 2, or similar compliance frameworks, including evidence collection and control documentation

• - Strong documentation abilities and meticulous attention to detail

• - Comfortable working independently in a fast-paced, fully remote, distributed setting

• - Proficient in utilizing AI tools in day-to-day operations

• **Preferred Requirements:**

• - Relevant certifications: CompTIA Security+, CEH, GSEC, SSCP, or equivalent

• - Experience with SIEM platforms or security monitoring and alerting tools (Splunk, Datadog, Chronicle, or similar)

• - Scripting skills for automation (Python, Bash, or similar)

• - Background in vulnerability management, penetration testing coordination, or threat analysis

• - Experience in supporting vendor security assessments and data processing reviews

• - Experience managing or configuring endpoint protection and device security solutions

• - Background in healthcare, financial services, or other regulated sectors

• - Experience with security awareness training or internal security educational programs

• - Familiarity with GDPR or other regional data protection laws

🏝️ Benefits

• Base salary: Approximately $25,000–$32,000 USD per year (calibrated for target regions).

• Performance bonus: Potential to earn up to 100% of base salary in performance-based bonuses.

• Salary and total compensation are influenced by experience, location, and demonstrated performance throughout the hiring process.