Senior Information Security Analyst

Now Hiring: Senior Information Security Analyst | CST
Location: CST Time Zone candidates only
Employment: W2
Contract-to-Hire

Key Responsibilities
Lead vulnerability management, prioritization, remediation tracking, and reporting
Reduce vulnerability aging, backlog, and overall security exposure
Monitor and report exposure to CISA Known Exploited Vulnerabilities (KEV)
Support security risk governance, exceptions, risk acceptance, and compensating controls
Evaluate security controls across cloud, identity, endpoint, data, and application environments
Support security architecture, threat modeling, DevSecOps, IAM/PAM, and third-party risk reviews
Provide audit, compliance, regulatory, and due diligence support
Build security dashboards, metrics, executive summaries, and risk reports

Must-Have / Preferred Technical Skills
Microsoft Defender: Endpoint, Identity, Office 365, Cloud
Microsoft Sentinel & Microsoft Purview
Microsoft Entra ID
Qualys
ServiceNow: ITSM, CMDB, IRM, Vulnerability Response
Azure strong experience
AWS working knowledge
Splunk
SonarQube
Power BI & Power Automate
Vulnerability Management / DLP / Cloud Security
CIS Controls & SOC 2

Experience
7 12 years of progressive Information Security experience
Strong background in vulnerability management, security operations, cloud security, GRC, compliance, and audit support
Bachelor s degree in Cybersecurity, IT, Computer Science, or related field preferred
CISSP, CCSP, SSCP, GCED or similar certifications are a plus

Key Focus Areas:
Timely vulnerability remediation | Reduction of vulnerability aging & backlog | Overall vulnerability reduction | CISA KEV exposure monitoring | Security risk metrics & reporting | Audit readiness | Control effectiveness