[Remote] Information Security Analyst $100K/yr - $125K/yr

Note: The job is a remote job and is open to candidates in USA. 360CyberX, LLC is a security-focused technology partner dedicated to helping organizations prevent breaches and achieve compliance. The Information Security Analyst supports enterprise cybersecurity initiatives by enhancing risk visibility and contributing to the overall security posture of client and internal environments.

Responsibilities

• Support enterprise information security and risk management activities aligned with industry frameworks
• Perform security assessments, control reviews, and gap analyses across systems, applications, and infrastructure
• Monitor, analyze, and investigate security alerts, logs, and events across endpoint, network, cloud, and identity platforms
• Assist with vulnerability identification, prioritization, and remediation tracking
• Support third-party and vendor security risk assessments as required
• Document security findings, risks, and remediation activities in a centralized tracking system
• Collaborate with IT, cloud, and engineering teams to validate security controls and mitigation strategies
• Assist in the development and refinement of security policies, procedures, and standards
• Contribute to incident response activities, including investigation support and post-incident analysis
• Participate in security improvement initiatives, audits, and special projects as assigned

Skills

• Minimum of 1 year of experience in one or more of the following areas: Information security operations, Security monitoring and incident analysis, Vulnerability management, Risk or compliance support within a cybersecurity function
• Strong understanding of core information security concepts and control domains
• Hands-on experience with security tools such as SIEM, EDR/XDR, vulnerability scanners, or cloud security platforms
• Experience working in enterprise or multi-client environments
• Strong analytical, investigative, and documentation skills
• Excellent written and verbal communication skills
• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Risk Management, or a related field (or equivalent hands-on experience)
• Foundational understanding of cybersecurity frameworks or standards, such as: NIST (CSF, RMF, or select SP 800-series guidance), ISO/IEC 27001 / 27002, CIS Critical Security Controls, SANS or PCI DSS concepts
• Entry-level or early-career cybersecurity certifications are a plus, including: CompTIA Security+, CySA+, or Network+, GIAC (foundational-level) certifications
• Basic awareness of cybersecurity regulations, compliance concepts, and data privacy principles
• Ability to follow established processes, document findings clearly, and learn new security concepts quickly
• Comfortable working both independently and as part of a team in a structured, professional environment

Company Overview