Source Job

$64,970–$108,040/yr
Canada

  • Identify vulnerabilities, monitor threats, and strengthen security controls across cloud, identity, and infrastructure platforms.
  • Support compliance audits, client assessments, and penetration testing aligned with ISO 27001, SOC 2, and NIST CSF.
  • Manage security tools including Tenable, SIEM, EDR, and Microsoft 365/Azure/AWS to reduce organizational risk.

Vulnerability Management Security Monitoring Cloud Security IAM Incident Response

20 jobs similar to Information Security Analyst

Jobs ranked by similarity.

UK

  • Provide senior-level response to security alerts and own escalations.
  • Conduct threat hunting, vulnerability scanning, and penetration testing.
  • Create security alerts, dashboards, and response mechanisms while mentoring junior staff.

KnowBe4 empowers the modern workforce to make smarter security decisions every day, providing security awareness training and attack simulation. Trusted by more than 70,000 organizations worldwide, the company fosters a modern, high-tech, and fun work environment.

Global

  • Monitor security systems, logs, and alerts to detect and respond to threats.
  • Run vulnerability scans and coordinate remediation with IT and engineering.
  • Maintain compliance with SOC 2 and support security awareness programs.

Power Digital is an AI-native growth firm combining talent and proprietary technology to help brands drive measurable business outcomes. With a people-first culture, the company values diversity and collaboration, using its AI operating system Omega to amplify capacity for strategy, creativity, and analysis.

$110,000–$140,000/yr
US Unlimited PTO

  • Own day-to-day security operations including monitoring, incident response, access governance, and vulnerability management.
  • Drive remediation with internal teams, MSPs, and vendors to improve security posture and reduce recurring misdirection incidents.
  • Support compliance evidence for SOC 2 Type II and HITRUST i1, cloud security in Azure and AKS, and vendor risk assessments.

Private Health Management guides patients and families through the complexity of serious medical care, providing independent advocacy and support. It is a remote-first company with employees across the United States, focused on delivering measurable outcomes.

$108,735–$127,923/yr
US

  • Independently monitor and analyze security events across networks, systems, cloud platforms, and SaaS applications.
  • Manage vulnerability scanning, incident response, and remediation tracking through closure.
  • Administer security controls and support compliance audits under frameworks like NIST 800-171 and CMMC.

Kairos Power is a new nuclear energy technology and engineering company commercializing fluoride-salt-cooled, high-temperature reactors for clean energy. They are an equal opportunity employer building a diverse workforce and rewarding employees with competitive compensation and benefits.

$100,000–$120,000/yr
US

  • Strengthen identity security and manage security tools including Microsoft Entra ID, Defender XDR, and Sentinel.
  • Own vulnerability management, incident response, and third-party vendor security risk programs.
  • Align security program with NIST CSF 2.0, CIS Controls, and SOC 2 Type II audits.

BCC Software develops innovative software and data solutions that power critical customer communications for organizations across North America. With more than 45 years of industry leadership, they combine deep postal expertise with modern technology to help customers streamline operations and improve efficiency.

$6,024–$10,843/yr
India Philippines

  • Monitor, triage, and resolve security alerts in Microsoft Defender XDR and Sentinel.
  • Lead incident response end-to-end and maintain ISO 27001 documentation and audits.
  • Administer IAM, PAM, and patch management to enforce least privilege and compliance.

Appen is a leader in AI training data, specializing in human-generated data to train, fine-tune, and evaluate models across generative AI, LLMs, computer vision, and speech. With over 1 million contributors in more than 200 countries, the company fosters a culture of innovation, collaboration, and humility.

US

  • Work on real-world security and compliance challenges with the Security and Compliance Team.
  • Support GRC tools like Drata, security tools like Crowdstrike, and AI-powered vulnerability dashboards.
  • Contribute to audit evidence collection, vulnerability analysis, and AWS cloud security operations.

OpenSesame is transforming workforce development with an AI-powered marketplace of skill-building courses and learning pathways. More than 2,000 companies, including 150+ of the Global 2000, rely on OpenSesame to develop the world's most productive and admired workforces.

US 3w PTO

  • Lead as the SME for security tools including CASB, vulnerability scanning suite, and EPP, improving tool functionality.
  • Lead the vulnerability management program, working with the patching team to minimize the attack surface.
  • Provide security engineering expertise on projects, implement standards, and research advanced security technologies.

First Quality is a family-owned group of companies that produces high-quality personal care and household products for large retailers and healthcare organizations. It employs over 5,000 team members across 8 manufacturing campuses in the U.S. and Canada, maintaining a collaborative culture rooted in humility, unity, and integrity.

$180,000–$200,000/yr
US

  • Own security infrastructure: implement, configure, and monitor technical controls supporting SOC 2 and ISO 27001, including Vanta, SSO, endpoint management, and security monitoring.
  • Manage identity and access: design and operate IAM policies, enforce least-privilege access, and keep SSO configured correctly across the stack.
  • Run technical incident response: own detection, triage, and technical response, maintaining runbooks that hold up under pressure.

Syllo is defining the Litigation AI category with a unified platform that autonomously manages the entire litigation lifecycle end-to-end. Founded in 2019, the company supports Fortune 500 and AmLaw 200 firms, and its team has doubled in six months with a fast-scaling, enterprise-focused culture.

US

  • Plan, implement, and upgrade security controls and architecture to safeguard systems and sensitive information.
  • Conduct risk assessments, penetration testing, and vulnerability assessments, then track mitigation plans.
  • Support compliance with NIST 800-171, develop governance documentation, and deliver security awareness training.

Insitu, a Boeing Company, provides unmanned air systems and software solutions for collecting, processing, and understanding sensor data to support critical decision-making. With over 1 million operational flight hours, the company values integrity, collaboration, and adaptability in a fast-paced, mission-driven environment.

North America Latin America Europe Unlimited PTO

  • Monitor and triage security alerts, coordinate incident response, and run tabletop exercises.
  • Maintain technical security controls including encryption, key/certificate management, and secrets rotation.
  • Support SOC 2 and GDPR compliance through vendor reviews, client questionnaires, and evidence collection.

Graphite is a technology-enabled growth agency that helps fast-growing companies like Masterclass, Notion, and BetterUp unlock sustainable revenue through content, SEO, and AEO. We are a fully distributed team across North America, Latin America, and Europe, obsessed with impact and delivering outcomes for clients.

$150,000–$160,000/yr
US Unlimited PTO

  • Implement and maintain AWS security configurations across development, staging, and production environments.
  • Operate SAST, DAST, and SCA tools integrated into CI/CD pipelines to remediate vulnerabilities.
  • Support compliance efforts such as SOC 2 Type II and ISO 27001 audits and improve security processes.

Pacvue is a leading software suite for eCommerce advertising, sales, and intelligence, helping brands grow on Amazon, Walmart, Instacart, and other marketplaces. The team is energetic, passionate, and focused on innovation, with a mission to help brands and sellers succeed.

US

  • Perform security risk assessments for various IT solutions and identify remediation or mitigation requirements.
  • Apply guidance from policies and best practices to support internal and external customers on security safeguards.
  • Collaborate with teams across IT, privacy, compliance, legal, and procurement to protect institutional assets.

Emory University is a leading research university that fosters excellence and attracts world-class talent to innovate today and prepare leaders for the future. It offers a diverse and inclusive culture with many employees supporting academic and healthcare missions.

$120,000–$150,000/yr
US

  • Protect cloud infrastructure, applications, and customer data across a modern technology environment.
  • Identify and remediate vulnerabilities directly in application repositories and infrastructure code.
  • Build and tune SIEM detections, strengthen AWS security controls, and lead incident response.

Cloudbeds is a hospitality technology company providing cloud-based management solutions for lodging businesses. It operates as a remote-first organization with a globally distributed team across 40+ countries and a small, senior security team.

India

  • Own security architecture across Azure and AWS, covering tenant design, network segmentation, and workload isolation.
  • Raise the engineering bar with hardened infrastructure-as-code modules, secure defaults, and policy-as-code signals at commit time.
  • Own vulnerability and exposure management end to end, delivering findings as pull requests, not tickets.

One Identity enables organizations to secure, manage, monitor, protect, and analyze information and infrastructure to drive innovation. With a globally distributed team, we build enterprise products at scale and foster a collaborative, improvement-driven culture.

US Unlimited PTO 12w maternity 12w paternity

  • Lead the process to build security into the Dscout SaaS environment throughout the software development lifecycle.
  • Collaborate with Engineering to plan and implement cybersecurity controls, including securing AWS resources and improving monitoring with SIEM and logging.
  • Assess evolving threats, respond to incidents, and provide recommendations to mitigate risk and improve security policies.

Dscout builds a flexible and powerful UX research platform trusted by top brands to understand the humans behind their products. The company is a remote-first team of passionate, empathetic, and curious professionals recognized as a leader in experience research technology.

US

  • Administer and maintain Microsoft Azure and Microsoft 365 cloud environments, including backups, disaster recovery, and cloud migrations.
  • Monitor security alerts, manage endpoint protection, conduct audits, and respond to security incidents.
  • Manage user access, SSO, MFA, Conditional Access, and support server, workstation, and network administration.

Aspire Living & Learning provides support services for individuals with disabilities and their families. They foster a collaborative, dedicated team culture that values belonging, care, diversity, and professional growth.

$115,000–$140,000/yr
US

  • Perform systems administration, patching, vulnerability scanning, and remediation for AWS and GCP cloud workloads.
  • Configure and maintain security tools for endpoint protection, log collection, vulnerability scanning, and compliance monitoring.
  • Support 24x7 on-call rotation and collaborate with security analysts to deliver secure solutions for FedRAMP and FISMA customers.

Quantum Sky is a technology company that engineers solutions for cyber, networks, software, and quantum for mission-driven clients. They foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role.

$95,000–$130,000/yr
US

  • Run continuous vulnerability scanning in Tenable and CrowdStrike Falcon to ensure full coverage of cloud assets.
  • Prioritize findings by real-world risk using exploitability, threat intelligence, and asset context, and validate high-priority findings hands-on.
  • Automate scan-to-ticket workflows with Python, push validated fixes through Jira, and help define vulnerability management standards and SLAs.

Revinate is the hotel data activation platform that connects and cleans guest data from every system into Rich Guest Profile data, powered by an AI intelligence layer trained on 17 years of hospitality data. Revinate powers 1.1 billion data points across 12,500+ hotels, driving over $24 billion in direct revenue, and is proud to be a Great Place To Work Certified company.

Canada 4w PTO

  • Lead the design and implementation of secure software architecture and CI/CD pipelines for .NET applications on Azure.
  • Provide technical leadership and mentorship on DevSecOps practices to development teams.
  • Conduct penetration testing and security assessments to identify vulnerabilities and implement mitigations.

MEDFAR Clinical Solutions develops cloud-based electronic medical record solutions for healthcare clinics, founded in 2010 by aeronautical engineers. The company values transparency, collaboration, and innovation, with a focus on clinical success and patient safety.