Information Security Analyst

Dice is the leading career destination for tech experts at every stage of their careers. Our client, Shrinq Consulting Group INC, is seeking the following. Apply via Dice today!

The Information Security Analyst is responsible for protecting the organization’s information systems, networks, and data from security threats. This role focuses on monitoring, analysis, incident response, risk management, and ensuring compliance with security policies, standards, and regulatory requirements.

• Security Monitoring & Incident Response:
  Monitor security alerts and events using SIEM and security tools; investigate, respond to, and remediate security incidents; conduct root cause analysis and document incident reports.
• Threat & Vulnerability Management:
  Perform vulnerability assessments and support penetration testing; track, prioritize, and remediate security vulnerabilities; stay current on emerging threats, attack vectors, and security trends.
• Risk Management & Compliance:
  Support risk assessments and security control evaluations; assist with compliance requirements (ISO 27001, SOC 2, PCI-DSS, HIPAA, GDPR, etc.); maintain security policies, procedures, and documentation.
• Security Operations & Controls:
  Implement and maintain security controls across networks, endpoints, and cloud environments; support identity and access management (IAM) processes; assist with data protection, encryption, and secure configuration standards.
• Awareness &
  
  Collaboration:
  
  Support security awareness and training programs; collaborate with IT, Dev Ops, and business teams to embed security best practices; participate in audits and third-party security reviews.

• Required
• Bachelor’s degree in Information Security, Computer Science, IT, or related field.
• 2–5 years of experience in information security, cybersecurity, or IT operations; hands-on experience with security monitoring and incident response.
• Technical Skills
  : SIEM tools (Splunk, Sentinel, QRadar);
  Vulnerability scanning tools (Nessus, Qualys, Rapid7);
  Endpoint and network security tools (EDR, firewalls, IDS/IPS);
  Cloud security fundamentals (AWS, Azure, or Google Cloud Platform);
  Operating systems:
  Windows, Linux.
• Soft Skills
  :
  Strong analytical and investigative skills; attention to detail and risk-based thinking; clear communication and documentation abilities.
• Preferred Qualifications
  :
  Security certifications (Security+, CEH, CISSP, CISM, GCIH); experience with cloud security and Dev Sec Ops ; knowledge of scripting or automation (Python, Power Shell); familiarity with SOAR platforms.

Note: This job description reflects the current requirements and may be amended at any time.