Information Security Analyst

This is a fully remote position, open to applicants in Ukraine.

📋 Description

• Analyze vulnerability reports, investigate the findings, suggest scalable remediation methods, and monitor the progress of remediation until completion.

• Collaborate with Support, NOC, Engineering, and other technical teams to execute security remediations while minimizing client impact and organizing maintenance activities.

• Create or assist with scripts, automation, and repeatable processes to enhance vulnerability remediation across various client environments.

• Address vulnerabilities identified through both internal and third-party vulnerability management systems.

• Complete Due Diligence Questionnaires and manage responses to requests for security and risk-related information.

• Review findings from risk assessments and penetration testing, identifying necessary remediation actions.

• Engage in Business Impact Analyses and tabletop exercises.

• Measure and enhance alignment with Microsoft security benchmarks, including configurations for Microsoft Intune.

• Fortify workstation, cloud, infrastructure, and security configurations.

• Support system hardening across endpoints, cloud environments, identity, and other security technologies.

• Assist with SOC 2 and security operations tasks, including test restores, KnowBe4 phishing and training reviews, SIEM log evaluations, and related security-control activities.

• Aid in cybersecurity incident response, investigation, remediation, and follow-up activities.

• Collaborate with NOC and outsourced SOC resources to refine security remediation runbooks and response procedures.

• Maintain security documentation, ticketing systems, remediation records, and supporting evidence.

• Contribute to the continuous improvement of the Information Security function.

⛳️ Requirements

• In-depth understanding of cybersecurity principles, security controls, risk management, and industry security practices.

• Experience in vulnerability management, including analysis, remediation, and tracking.

• Knowledge of Microsoft Intune, Microsoft security benchmarks, and endpoint or cloud security configurations.

• Proficiency with SIEM platforms, IDS/IPS solutions, vulnerability scanners, or similar security tools.

• Familiarity with RMM, SOAR, or other automation and security orchestration platforms.

• Experience in scripting or automation, with the ability to develop scalable solutions for security remediation and operational tasks.

• Proven experience in creating and maintaining technical documentation, security procedures, and remediation runbooks.

• Strong analytical, troubleshooting, and problem-solving abilities.

• Excellent written and verbal communication skills.

• Capability to work both independently and collaboratively in a remote, fast-paced environment while managing multiple security priorities.

• Desirable: experience in a Managed Service Provider setting.

• Desirable: experience supporting security or compliance efforts in a multi-client or highly regulated environment.

• Desirable: exposure to SOC 2, penetration testing, security assessments, due diligence, or related compliance initiatives.

• Desirable: relevant cybersecurity, Microsoft, or cloud certifications such as AZ-500, SC-900, SC-300, CompTIA Security+, or similar credentials.

🏝️ Benefits

• Competitive salary.

• Comprehensive benefits package.

• Attractive perks.

• Opportunities for professional and career development.

• Flexible remote work arrangement.