Information Security Analyst

About the Role

SMARTFOX is hiring an Information Security Analyst.

Key Responsibilities

• Monitor, triage, and investigate security alerts across SIEM, EDR, and cloud platforms.
• Lead (or support) incident response from detection to containment to post-incident review.
• Run vulnerability scans, prioritize findings by real-world risk, and work with engineering to fix them.
• Hunt for threats proactively.
• Support risk assessments, audits, and compliance work (e.g., SOC 2, ISO 27001, NIST, HIPAA, PCI-DSS).
• Build detections, playbooks, and automation.
• Run phishing simulations and security awareness efforts.

Requirements & Tech Stack

• Foundational knowledge of networking, operating systems, and common attack techniques (phishing, malware, privilege escalation, lateral movement).
• Familiarity with security concepts such as the CIA triad, least privilege, and defense in depth.
• Clear written and verbal communication.
• Experience with tools such as Splunk, Microsoft Sentinel, CrowdStrike, Tenable/Qualys, or similar.
• Scripting in Python, PowerShell, or Bash.
• Knowledge of MITRE ATT&CK or the NIST Cybersecurity Framework.

Qualifications

• A genuine curiosity about how systems break and how to protect them.
• Bachelor’s degree in Cybersecurity, Computer Science, IT, or equivalent hands-on experience.
• Certifications: Security+, CySA+, GCIH, CEH, CISSP, CISM, or cloud security certs (AWS, Azure, GCP).
• Experience with a home lab, CTF, bug bounty, or open-source contributions.

Levels of Experience

• Analyst I: 0-2 years: Alert triage, vulnerability tracking, documentation, learning.
• Analyst II: 2-5 years: Independent investigations, detection tuning, risk assessments, mentoring.
• Senior Analyst: 5+ years: Leading incidents, threat hunting, architecture input, shaping security roadmap.