Information Security Technical Analyst
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.1
Reclaim your time by letting our AI handle the grunt work of job searching.
We continuously scan millions of openings to find your top matches.
Overview
Remote
On-site
Compensation
$49-$54/hour
Job Description
Information Security Technical Analyst Location: Remote ( PST based) Duration:12 Months
- This role is within the Security Governance, Risk, and Compliance (SGRC) team, within client Information Security Org. The SGRC team collaborates with cross-functional teams across client (Security, Counsel, Engineering, Industry Relations, Procurement, and Product teams) to ensure client products can launch anywhere in the world while maintaining compliance with industry, partner, regulatory information security standards, requirements, and obligations.
- As an Information Security Technical Analyst, you will partner with various teams across client in support of the execution of client's Information Security programs which primarily focuses on risk-reduction through vulnerability management, vendor security monitoring and reviews, development & implmentation of automated controls assessments.
- You will report to the Security Risk, and V2 (Vulnerability & Vendor Security) Lead, and collaborate across client as you contribute to the evolution and automation of security risk reduction programs across the organization to enable client to take principled risks and unlock velocity.
- This role is responsible for driving down the potential risks and impact of vulnerabilities by making expert-informed decisions regarding remediation guidance.
- Manage and maintain the flow of incoming vulnerability cases, including CVE notifications, cloud-based vulnerabilities, cloud misconfigurations, access control issues, web application vulnerabilities, and source code vulnerabilities.
- Conduct technical assessments of vulnerabilities to assist engineering teams and DRIs with remediation efforts, including the implementation of available patches where possible.
- Partner across security and product teams to identify and burn down vulnerabilities and security issues using a prioritized approach that is grounded in risk management principles.
- Research and report vendor advisories, zero days, bug trackers, and other sources for Client to analyze any potential impact to client'.
- Manage the risk exception process by partnering across Security teams to identify areas of risk and collaborate with business units to make informed, risk-based decisions.
- Proactively identify opportunities to reduce toil by suggesting and championing the automation of manual triage, case management, and escalation workflows.
- Minimize recurring vulnerabilities by collaborating with partners to identify and solve root causes, ensuring long-term remediation.
- Monitor vulnerability metrics, including backlog status, historical trends, and remediation rates, to assess the overall security posture of the organization.
- Maintain runbooks or playbooks and document any new processes or procedures.
- Collaborate with Engineering and Compliance teams to manage pentest results and address PCI-related vulnerabilities.
- Support ongoing bug bounty programs with a third-party vendor and internal stakeholders to prioritize and fix vulnerabilities.
- Support ongoing and periodic security risk assessment exercises that involves identifying, evaluating and monitoring cybersecurity risks using both quantitative and qualitative methodologies
- Collaborate with cross-functional teams (engineering, product, others) to gather relevant data required for risk analysis, provide domain and subject matter expertise in security and risk.
- Support risk mitigation and control improvement actions to drive risk remediation.
- Support the adoption, evolution, and continuous improvement of a risk program.
- Five or more years of demonstrated security, intelligence, and risk management experience in a technology-focused company
- General understanding of cloud infrastructure (AWS, GCP, Azure), networking, and containerization
- Experience with scripting skills in designing and implementing security automation workflows
- Experience with multiple vulnerability scanning tools
- Deep technical understanding of common security vulnerabilities such as web application vulnerabilities, OWASP top 10, cloud vulnerabilities plus misconfigurations, and source code vulnerabilities
- Strong knowledge of risk countermeasures and compensating controls
- Ability to work independently and in a collaborative environment with excellent communication and interpersonal skills
- An Ideal Candidate Would Have:.
- Fundamental knowledge of information security principles, including threats, vulnerabilities, and risk management
- Proficient in utilizing AI agents and workflows automation for process improvements
- Technical problem-solving mindset with strong work ethic, motivation, and results-driven attitude
- Hold security certifications such as CISSP, Security , CySA , or GIAC equivalent
Automate your job search with Sonara.
Submit 10x as many applications with less effort than one manual application.
FAQs About Information Security Technical Analyst Jobs at eTeam Inc.
What is the work location for this position at eTeam Inc.?
This job at eTeam Inc. is located in Oakland, CA, according to the details provided by the employer. Some roles may also include multiple work locations depending on the requirement.
What pay range can candidates expect for this role at eTeam Inc.?
Candidates can expect a pay range of $49–$54 per hour for this role.
What employment applies to this position at eTeam Inc.?
The employer has not provided this information. This may be discussed during the hiring process.
What is the process to apply for this position at eTeam Inc.?
You can apply for this role at eTeam Inc. either through Sonara's automated application system, which helps you submit applications 10X faster with minimal effort, or by applying manually using the direct link on the job page.