Sign upLog in
Information Security Jobs in Jersey City, NJ

Sr Information Security Analyst

Expert In Recruitment Solutions
  • Jersey City, NJ
  • Quick Apply
30+ days ago

Job Description

Required
• 5+ years of relevant information security experience (or 3+ years in IT systems administration with 2+ years of security responsibilities)
• Cloud security experience with GCP or Azure and strong knowledge of cloud security frameworks
• Expertise in incident response, system monitoring/analysis, and risk assessments aligned with compliance and privacy laws
• Hands-on experience with email security platforms such as Proofpoint (threat protection, phishing detection, and email filtering)
• Experience implementing and managing Microsoft Purview DLP, including policy creation, data classification, and incident response for sensitive data protection
• Experience with compliance requirements: HITRUST, PCI, NIST, HIPAA, SOC2
• Experience across multiple platforms: Windows, Linux/Unix, macOS; networks and endpoints
• Experience with vulnerability assessments and penetration testing engagements
• Experience with change management and project management
• Excellent technical writing and presentation skills; able to translate technical risk into clear business impact
Preferred
  • CCSP preferred; other certs: AZ 500, AWS Security Specialty, GCP Professional Cloud Security Engineer.
  • Experience securing Azure, AWS, GCP in enterprise/hybrid environments.
  • Familiarity with NIST CSF, ISO 27001, CIS Benchmarks, MITRE Telecommunication&CK.
  • Automation, scripting experience a plus.
Responsibilities:
Cloud & Enterprise Security (SME)
  • Serve as SME on security fundamentals, techniques, and technologies across Azure, AWS, GCP, and on prem environments.
  • Guide cloud security architecture: IAM, encryption/key management, network controls, data protection, workload hardening.
  • Implement process improvements aligned to security frameworks (NIST CSF/800 53, ISO 27001) and business needs; optimize technology to improve customer experience.
Security Operations & Incident Response
  • Implement and monitor controls for unusual and suspicious activity across endpoints, networks, and cloud platforms.
  • Perform advanced monitoring, data/log analysis, threat hunting, and forensic investigations; contribute to SOC/IR workflows.
  • Plan, contribute to, and participate in incident plan exercises and tabletop scenarios.
Governance, Risk & Compliance (GRC)
  • Draft or revise local policies, standards, guidelines, and procedures to supplement enterprise frameworks; identify and remediate gaps based upon NIST standards.
  • Interface with internal/external auditors and examiners; maintain vendor management standards, questionnaires, and regulatory documentation (HITRUST, PCI, NIST, HIPAA, SOC2).
  • Review contracts and provide security guidance; support project scoping, costing, and cost–benefit analyses.
Stakeholder Engagement & Communication
  • Act as a liaison for the security team; clearly communicate business risk as it relates to information security.
  • Create technical documentation (reports, white papers, technical notes, implementation/configuration guides).
  • Use visual aids to convey complex topics to large, diverse audiences; communicate clearly in high pressure, high visibility situations.
Continuous Improvement
  • Recommend new security solutions and improvements that do not impede innovation.
  • Stay current with the evolving threat landscape; consistently learn and grow to remain a step ahead of attackers.

Technical Expertise
Cloud Security (Azure, AWS, GCP)
  • GCP: IAM, Security Command Center, Cloud Audit Logs, VPC Service Controls, CMEK/KMS, Cloud Armor, Workload Identity; container security (GKE).
  • Azure: Defender for Cloud, Microsoft Sentinel, Entra ID (Azure AD), Conditional Access, Key Vault, NSGs/Azure Firewall, storage encryption, Defender for Endpoint integration.
  • AWS: IAM roles/policies, Security Hub, GuardDuty, KMS, CloudTrail/CloudWatch, VPC security controls, AWS WAF, Secrets Manager. (experience with AWS is not required)
Additional Technologies
  • Operating Systems: Linux, Windows Server, Windows Desktop; hardening, patching, CIS Benchmarks.
  • Forensics & eDiscovery: Symantec, Purview, Proofpoint; email/file discovery; incident response.
  • Network & Perimeter: Palo Alto firewalls, URL filtering, DNS blackhole/geo filtering, WildFire; F5 AWAF.
  • SIEM & Logging: MS Sentinel, MDE, Elastic; Endpoint management/log forwarding. Microsoft Data Lake, CRIBL
  • Vulnerability & AppSec: Qualys, NexusIQ; OWASP aligned testing and remediation.
  • Endpoint: Microsoft Defender, Microsoft ATP/Defender for Endpoint.
  • Identity & MFA: Okta, Microsoft (Entra ID MFA).
  • Core Services: DNS zone management; network micro segmentation; zero trust aligned controls.
  • Secure Productivity: Securing Microsoft 365 (Exchange Online, SharePoint/OneDrive, Teams, Purview).

Numbers & Facts

LocationJersey City, NJ

Skills

  • Amazon Web Services (AWS)unmatched
  • Benchmarkingunmatched
  • CCSP - Cisco Certified Security Professionalunmatched
  • Change Managementunmatched
  • Cloud Architectureunmatched
  • Cloud Computingunmatched
  • Communication Skillsunmatched
  • Computer Securityunmatched
  • Continuous Improvementunmatched
  • Contract Reviewunmatched
  • Cost Benefit Analysisunmatched
  • Cryptographyunmatched
  • Customer Experienceunmatched
  • DNS (Domain Name System)unmatched
  • Data Analysisunmatched
  • Data Lakeunmatched
  • Email Securityunmatched
  • F5 Network Softwareunmatched
  • Firewallsunmatched
  • Forensic Scienceunmatched
  • GCP (Good Clinical Practices)unmatched
  • HIPAA (Health Insurance Portability and Accountability Act)unmatched
  • Huntingunmatched
  • IR (Infrared)unmatched
  • ISO (International Organization for Standardization)unmatched
  • Incident Responseunmatched
  • Information Systems/Technology IS/IT Administrationunmatched
  • Information Technology & Information Systemsunmatched
  • Information/Data Security (InfoSec)unmatched
  • Linux Operating Systemunmatched
  • Mac Operating Systemunmatched
  • Microsoft Access Databaseunmatched
  • Microsoft Exchange Serverunmatched
  • Microsoft Product Familyunmatched
  • Microsoft SharePointunmatched
  • Microsoft Windows Azureunmatched
  • Microsoft Windows Desktopunmatched
  • Microsoft Windows Operating Systemunmatched
  • Microsoft Windows Serverunmatched
  • Multiplatform/Cross-Platformunmatched
  • Operating Systemsunmatched
  • PCIunmatched
  • Penetration Testingunmatched
  • Phishingunmatched
  • Policy Developmentunmatched
  • Presentation/Verbal Skillsunmatched
  • Privacy Regulationsunmatched
  • Problem Solving Skillsunmatched
  • Process Improvementunmatched
  • Project/Program Managementunmatched
  • Regulatory Complianceunmatched
  • Riskunmatched
  • Risk Analysisunmatched
  • Scripting (Scripting Languages)unmatched
  • Security Analysisunmatched
  • Security Architectureunmatched
  • Security Information and Event Management (SIEM)unmatched
  • Security Infrastructureunmatched
  • Software Engineeringunmatched
  • Software Patchesunmatched
  • Symantec Product Familyunmatched
  • Systems Administration/Managementunmatched
  • Systems Analysisunmatched
  • Technical Writingunmatched
  • Technology White Papersunmatched
  • Telecommunicationsunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • Unix Operating Systemsunmatched
  • Writing Skillsunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder