InfoSec Analyst

InfoSec Analyst

(Onsite in Santa Rosa, CA)

Compensation: $80,000-$117,300
• Determining compensation for this role (and others) at Vaco depends upon a wide array of factors including but not limited to the individual's skill sets, experience and training, licensure and certifications, office location and other geographic considerations, as well as other business and organizational needs. With that said, as required by local law, Vaco believes that the following salary range reasonably estimates the base compensation for an individual hired into this position in geographies that require salary range disclosure: [$80,000-$117,300].

Overview

:

This is a confidential search conducted by Vaco, representing a client company

directly. Detailed information about the company will be shared with shortlisted candidates. The company cannot sponsor visas at this time or in the future. This role requires 100% onsite presence in Santa Rosa, California.

Role Summary


We are seeking a dedicated Information Security Specialist to join our cybersecurity team. The ideal candidate will have extensive experience in information security, working independently to support and enhance our security posture. This role involves collaborating with various departments and external vendors to ensure the integrity and security of our information systems.

Key Responsibilities


Security Monitoring:

Conduct daily, weekly, monthly, and quarterly monitoring of security events using a variety of platforms including anti-phishing, vulnerability management, patch management, endpoint protection, and data protection systems.

Incident Response:

Assist in responding to and mitigating security threats across the organization.

Collaboration:

Work closely with IT, compliance, and audit teams to ensure secure deployment of new technologies and adherence to security policies.

Policy Implementation:

Develop and enforce security policies and procedures, ensuring compliance with organizational standards and regulatory requirements.

Vendor Management:

Coordinate with third-party Managed Security Providers (MSPs) to address and resolve security vulnerabilities.

Audit Support:

Help prepare for and respond to internal and external audits, tracking remediation efforts to completion.

Security Research:

Stay updated on emerging cybersecurity threats, recommend adjustments to security measures, and implement proactive strategies to prevent incidents.

System Maintenance:

Perform regular checks and upgrades on security systems, occasionally requiring after-hours work.

Qualifications


Experience:

Minimum of 4 years in an information security role or similar position.

Education:

Bachelor's degree in Computer Science or related field, or equivalent combination of education and experience.

Certifications:

Security-related certifications such as Security+, CEH, or similar are advantageous.

Industry Knowledge:

Preferably experienced in the banking or highly regulated industries.

Technical Skills:

Proficient in networking, server management, firewalls, SD-WAN, virtualization technologies, and public cloud security (AWS, Azure).

Framework Familiarity:

Understanding of security frameworks and standards like NIST CSF, NIST 800-53, CIS Controls, and MITRE ATT&CK.

Technological Proficiency:

Working knowledge of Windows 10, Server 2016/2019, Microsoft Office 2019, M365, and antivirus/anti-malware software.

Documentation:

Intermediate experience in creating technical documentation.

Adaptability:

Ability to learn quickly and adapt to changing requirements in a fast-paced, team-oriented environment.