Information Security Analyst

Ve Sync is a portfolio company with brands covering different categories of health & wellness products. We have a young, energetic team that has achieved recognition from CES Innovation, iF Design, IGA, and Red Dot. We need driven, talented people to join our growing team.

The Information Security Analyst supports the organization’s security posture by implementing, monitoring, and maintaining security controls across systems, networks, and cloud environments. The role works closely with senior security team members to identify risks, respond to incidents, and ensure compliance with security standards and regulatory requirements.

• Information Security Operations & Planning
• Support the implementation and maintenance of information security controls to protect company data and assets across on‑premise and cloud environments.
• Assist in analyzing business processes, systems, and data flows to identify security gaps and improvement opportunities.
• Apply industry best practices and frameworks such as the NIST Cybersecurity Framework (CSF).

• Policy Support & Compliance
• Assist in developing, implementing, and maintaining information security policies, standards, and procedures.
• Support compliance with ISO 27001, NIST, GDPR, and other regulations.
• Track controls using GRC tools such as One Trust, Drata, or similar.
• Monitor regulatory trends and report changes to senior team members.

• System, Network, and Cloud Security
• Maintain security controls for systems, networks, and public cloud platforms (AWS, Azure, GCP).
• Configure, monitor, and tune cloud security services and tools.
• Use SIEM and dashboards to detect threats and vulnerabilities.
• Support AWS security services and baseline configurations.

• Security Monitoring & Incident Response
• Monitor alerts using SIEM and security monitoring tools.
• Participate in incident response activities, including investigation, containment, remediation, and post‑incident analysis.
• Support blue‑team activities, tabletop exercises, and response drills.
• Document incidents and lessons learned.

• Identity & Access Management
• Support user access reviews, permission audits, and access control processes.
• Assist with identity management systems to ensure proper authentication and authorization.
• Remediate excessive or inappropriate access.

• Risk Assessment & Vulnerability Management
• Participate in risk assessments and vulnerability identification.
• Assist with scanning, tracking, and remediation coordination.
• Maintain risk documentation aligned with NIST CSF.
• Report basic security metrics and KPIs.

• Security Awareness & Documentation
• Deliver security awareness training and phishing simulations.
• Develop and maintain security procedures, controls, detection rules, and playbooks.

• Bachelor’s degree in Information Security, Computer Science, or a related field (or equivalent experience).
• 3–6 years of experience in information security or a related IT/security role.
• Hands‑on experience with monitoring, incident response, vulnerability management, or risk assessment.
• Familiarity with AWS, Azure, or GCP and basic cloud security concepts.
• Knowledge of NIST CSF, ISO 27001, and CIS.
• Understanding of network security fundamentals, including firewalls, IDS/IPS, endpoint protection, and logging.
• Experience with SIEM or security monitoring tools such as Splunk, QRadar, Rapid7, or Wazuh.
• Strong analytical, troubleshooting, and communication skills.

• Experience supporting compliance or audit activities.
• Familiarity with GRC or compliance automation tools (One Trust, Drata, or similar).
• Security certifications such as Security+, CEH, GSEC, or progress toward CISSP/CISM.

• On‑site, office‑based role in Tustin, CA.

• Starting at $90K annually.

• 100% covered Medical/Dental/Vision insurance for employee, spouse, and dependents.
• 401K with 4% employer match (eligible after 90 days) and 100% vesting immediately.
• Generous PTO policy and paid holidays.
• Life Insurance.
• Voluntary Life Insurance.
• Disability Insurance.
• Critical Illness Coverage.
• Accident Insurance.
• Healthcare FSA.
• Dependent Care FSA.
• Travel Assistance Program.
• Employee Assistance Program (EAP).
• Fully stocked kitchen.