Security Posture Analyst I (Remote)

Role overview Support a cybersecurity threat exposure program by monitoring and explaining the security posture of on-premises, cloud, SaaS, identity, endpoint, network, application, and security technology environments. The analyst turns security and asset data into reliable metrics and risk insights so teams can prioritize remediation and leaders can make informed decisions.

Responsibilities - Monitor for exposed assets, control weaknesses, configuration drift, and emerging risks across technology environments. - Build and maintain posture scorecards, dashboards, key performance and risk indicators, trend analysis, and management reports. - Assess vulnerabilities, misconfigurations, and control gaps by considering exploitability, threat intelligence, business criticality, and potential impact. - Correlate and validate information from security, cloud, SaaS, asset, vulnerability, and threat intelligence tools. - Track remediation, check corrective actions, and escalate material exposure or control concerns through established processes. - Provide reports and evidence for audits, regulatory reviews, and risk assessments; identify opportunities to improve measurement and program visibility.

Requirements - Two to four years of experience in cybersecurity, IT, risk management, technical analysis, security operations, or a related area; relevant internships, military service, or technical support experience may count. - Strong analytical skills and attention to data accuracy, consistency, and documentation. - Ability to communicate technical findings clearly in writing, conversation, and presentations. - Ability to work independently and collaborate across security, technology, risk, and audit teams. - Working knowledge of security frameworks or requirements such as NIST, CIS Controls, PCI DSS, or FFIEC. - Proficiency with office tools, especially spreadsheets and presentations, and with data analysis or reporting platforms. - Strong organization and time management, with the ability to handle recurring deadlines and multiple assignments.

Nice to have - A degree in cybersecurity, IT, computer science, information systems, data analytics, or a related field; equivalent education, military experience, certifications, or relevant work may be considered. - Exposure to vulnerability management, cloud or identity security, endpoint protection, attack surface management, or security reporting platforms. - Certifications such as Security+ or related credentials; no certification is required.

Benefits and work setup The position is listed as remote. A secure, distraction-free workspace and reliable cable or fiber internet are required; mobile hotspots are not accepted. The stated anticipated pay range is $87,282–$139,425, based on skills, experience, and education.