[Hiring] Senior Security Analyst @Energage

Role Description

The Senior Security Analyst is responsible for advancing Energage's information security, privacy, and compliance programs by implementing and continuously improving technical controls, governance processes, and risk management practices. This role serves as a senior technical and operational resource responsible for protecting company systems, customer data, and business operations while enabling the organization's continued growth.

The position partners closely with Engineering, Product, IT, Legal, HR, and business leaders to embed security and privacy into company operations, ensuring compliance with regulatory requirements and industry best practices while maintaining a practical, business-focused approach to risk management. The position reports to the Director of Information Security & Data Privacy.

Accountability & Impact:

In this role, you’ll...

Network and Endpoint Protection

• Maintain and improve network, endpoint, and related security controls.
• Monitor security tools and investigate alerts or suspicious activity; coordinate escalation and response as appropriate.
• Help assess and prioritize weaknesses in network and endpoint configurations.
• Partner with IT and other technical teams to implement and maintain effective protections.
• Participate in security reviews of systems, integrations, cloud services, and significant technology changes.
• Identify security risks and recommend practical mitigations that account for business needs.
• Review designs involving authentication, authorization, access control, encryption, and secure data handling.
• Help incorporate security requirements early in projects and technology decisions.

GRC Support

• Support audit and assurance activities, including ISO 27001, SOC 2, customer security assessments, and related reviews.
• Help prepare evidence, maintain security documentation, and track findings and remediation actions.
• Contribute to risk assessments, policies, procedures, and ongoing improvements to the security program.
• Escalate significant risks, overdue actions, and decisions requiring leadership or business-owner input.

Shared Team Responsibilities

• Assist with incident response, including investigation, coordination, documentation, and follow-up.
• Support general security awareness and help employees understand and follow security practices.
• Contribute to the Privacy Program in partnership with Legal, Product, Engineering, and other stakeholders.
• Maintain working familiarity with CSPM, IAM, threat and vulnerability management, and other security and privacy functions so they can provide peer coverage when needed.
• Share knowledge, maintain useful documentation, and contribute to a team that can respond flexibly as priorities change.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent professional experience.
• 3+ years of progressive experience in Information Security, Cybersecurity, Security Engineering, or related discipline.
• Experience supporting security and compliance programs involving ISO 27001, SOC 2, NIST CSF, or similar standards and frameworks.
• Experience performing security risk assessments and vulnerability management.
• Working knowledge of cloud security principles and technologies in environments such as AWS, Azure, or Google Cloud.
• Strong understanding of networking, authentication, encryption, access control, and security architecture principles.
• Strong written and verbal communication skills, including the ability to communicate security risks and recommendations to technical and non-technical stakeholders.
• Intellectual Curiosity, someone who asks the questions to understand the “what and why”.

Requirements

• Experience supporting privacy compliance initiatives involving regulations such as GDPR and CCPA/CPRA.
• Experience with SIEM, endpoint security, vulnerability management, identity management, and security monitoring tools.
• One or more relevant information security, privacy, audit, or cloud certifications are preferred, such as:
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Cloud Security Professional (CCSP)
  • CompTIA Security+
  • Equivalent or comparable industry-recognized certifications will also be considered.

Benefits

• The base pay range for this role is $77,000 - $82,000.
• The base pay range is dependent on factors including, but not limited to, experience, skills, qualifications, relevant education, certifications, seniority, and location.
• This role is also bonus eligible.
• PTO policy includes company holidays, sick time, vacation time, and floating holidays.
• Remote work options available.
• Company pays a portion of individual health care premium.
• Option to participate in a company-sponsored 401(k).
• Training and education opportunities.
• Professional development; all employees have access to a third party professional coach.
• Tuition reimbursement program.
• Opportunity to work for a purpose-driven organization using business as a force for good.

Company Description

Energage is a purpose-driven company that helps organizations turn employee feedback into useful business intelligence and credible employer recognition through Top Workplaces. Built on 19 years of culture research and the results from 23 million employees surveyed across more than 70,000 organizations, Energage delivers the most accurate competitive benchmark available. With access to a unique combination of patented analytic tools and expert guidance, Energage customers lead the competition with an engaged workforce and an opportunity to gain recognition for their people-first approach to culture.

Energage is committed to fostering a diverse and inclusive environment. We are proud to be an equal opportunity employer. Energage encourages all qualified candidates to apply, including those of any race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.