Senior Security Analyst

Your Mission as Senior Security Analyst

The Senior Security Analyst is responsible for advancing Energage's information security, privacy, and compliance programs by implementing and continuously improving technical controls, governance processes, and risk management practices. This role serves as a senior technical and operational resource responsible for protecting company systems, customer data, and business operations while enabling the organization's continued growth.

The position partners closely with Engineering, Product, IT, Legal, HR, and business leaders to embed security and privacy into company operations, ensuring compliance with regulatory requirements and industry best practices while maintaining a practical, business-focused approach to risk management.

The position reports to the Director of Information Security & Data Privacy.

Accountability & Impact: In this role, you'll

Network and Endpoint Protection

• Maintain and improve network, endpoint, and related security controls.
• Monitor security tools and investigate alerts or suspicious activity; coordinate escalation and response as appropriate.
• Help assess and prioritize weaknesses in network and endpoint configurations.
• Partner with IT and other technical teams to implement and maintain effective protections.
• Participate in security reviews of systems, integrations, cloud services, and significant technology changes.
• Identify security risks and recommend practical mitigations that account for business needs.
• Review designs involving authentication, authorization, access control, encryption, and secure data handling.
• Help incorporate security requirements early in projects and technology decisions.

GRC Support

• Support audit and assurance activities, including ISO 27001, SOC 2, customer security assessments, and related reviews.
• Help prepare evidence, maintain security documentation, and track findings and remediation actions.
• Contribute to risk assessments, policies, procedures, and ongoing improvements to the security program.
• Escalate significant risks, overdue actions, and decisions requiring leadership or business-owner input.

Shared Team Responsibilities

• Assist with incident response, including investigation, coordination, documentation, and follow-up.
• Support general security awareness and help employees understand and follow security practices.
• Contribute to the Privacy Program in partnership with Legal, Product, Engineering, and other stakeholders.
• Maintain working familiarity with CSPM, IAM, threat and vulnerability management, and other security and privacy functions so they can provide peer coverage when needed.
• Share knowledge, maintain useful documentation, and contribute to a team that can respond flexibly as priorities change.

What You Bring to the Role

• Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent professional experience.
• 3+ years of progressive experience in Information Security, Cybersecurity, Security Engineering, or related discipline.
• Experience supporting security and compliance programs involving ISO 27001, SOC 2, NIST CSF, or similar standards and frameworks.
• Experience performing security risk assessments and vulnerability management.
• Working knowledge of cloud security principles and technologies in environments such as AWS, Azure, or Google Cloud.
• Strong understanding of networking, authentication, encryption, access control, and security architecture principles.
• Strong written and verbal communication skills, including the ability to communicate security risks and recommendations to technical and non-technical stakeholders.
• Intellectual Curiosity, someone who asks the questions to understand the" what and why".

Nice to haves

• Experience supporting privacy compliance initiatives involving regulations such as GDPR and CCPA/CPRA.
• Experience with SIEM, endpoint security, vulnerability management, identity management, and security monitoring tools.One or more relevant information security, privacy, audit, or cloud certifications are preferred, such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Cloud Security Professional (CCSP)
• CompTIA Security+

Equivalent or comparable industry-recognized certifications will also be considered.

Success in the Role

Success includes reliable operation and improvement of network and endpoint protections; useful, timely security input on architecture and technology decisions; dependable support for audit and GRC activities; and effective collaboration across incident response, security awareness, privacy, and peer coverage. The analyst is expected to surface risks clearly, help move agreed actions forward, and involve the right owners when decisions or remediation are outside their authority.

Compensation and Benefits

• The base pay range for this role is $77,000 - $82,000.
• The base pay range is dependent on factors including, but not limited to, experience, skills, qualifications, relevant education, certifications, seniority, and location.
• The range listed is just one component of the total compensation package for employees.
• This role is also bonus eligible.

In addition to base pay, our total rewards package includes

• PTO policy includes company holidays, sick time, vacation time, and floating holidays
• Remote
• Company pays a portion of individual health care premium
• Option to participate in a company-sponsored 401(k)
• Training and education
• Professional development; all employees have access to a third party professional coach
• Tuition reimbursement program
• Opportunity to work for a purpose-driven organization using business as a force for good

• Energage is a remote workplace with employees in various US locations.
• While our employees enjoy the flexibility of daily remote work, they are also given the occasional opportunity for in person interaction.
• This includes in our office in Exton Pa, or in a coworking space/out in their local area.
• This role is available for remote work in the following states:

• Arizona
• Colorado
• Delaware
• Florida
• Georgia
• Maryland
• Michigan
• North Carolina
• Nebraska
• New Jersey
• New York STATE (NYC residents excluded)
• Pennsylvania
• South Carolina
• Tennessee
• Texas
• Wisconsin

If you reside outside of the above locations, you will not be considered for this role.