Information Security Analyst

About the role

We are seeking a technically‑focused Information Security Analyst to join our growing cybersecurity team in Boston. This hybrid position supports vulnerability management, security operations, and incident response while offering a clear path toward engineering or security architecture roles.

Key responsibilities

• Operate, configure, and tune enterprise vulnerability scanning platforms; identify, validate, prioritize, and track vulnerabilities across endpoints, servers, cloud environments, and applications.
• Monitor and respond to alerts from SIEM, EDR, email security, and identity management platforms; perform Tier 1‑2 incident triage, containment, eradication, and remediation.
• Assist with tuning and optimization of security monitoring and detection tools, onboarding new log sources, maintaining SOAR workflows, and contributing to security hardening initiatives.

Required profile

• 3+ years of hands‑on experience in cybersecurity, security operations, or vulnerability management.
• Strong technical background with experience in security tooling rather than pure governance or compliance.
• Ability to work collaboratively with infrastructure and IT teams and support reporting for leadership and audits.

Required skills

• Vulnerability scanners
• SIEM platforms
• Endpoint Detection and Response (EDR) solutions
• Email security solutions
• SOAR workflow automation
• Understanding of CVE, CVSS, EPSS, and threat‑intelligence prioritization

What we offer

• Competitive salary range $85,000‑$105,000 per year
• Hybrid work model (Boston office + remote)
• Opportunities for growth into security engineering or architecture roles