Cisive
Information Security Analyst
United States · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerCisive
- LocationUnited States
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
It's fun to work in a company where people truly BELIEVE in what they're doing!
We're committed to bringing passion and customer focus to the business.
Job Description:
Security Operations & Tooling
Monitor, tune, and triage alerts across the SIEM platform, escalating confirmed incidents per established runbooks
Manage the vulnerability management lifecycle— including scanning, prioritization, remediation tracking, and executive reporting
Support endpoint security, email security, and network monitoring tools; identify gaps and recommend configuration improvements
Conduct periodic threat hunting activities and contribute to the development of detection rules and playbooks
Participate in incident response activities including containment, eradication, and post-incident reviews
Governance, Risk & Compliance (GRC)
Show full description
Support ongoing SOC 2 Type II compliance efforts, including evidence collection, control testing, and coordination with external auditors
Assist with NIST CSF assessments — mapping current controls to framework functions and identifying gaps for remediation
Maintain and update security policies, standards, and procedures in collaboration with senior team members
Conduct periodic security risk assessments and contribute findings to the organization risk register
Track remediation efforts for identified risks and control deficiencies through to closure
Collaboration & Communication
Partner with IT, Engineering, and business stakeholders to embed security best practices into day-to-day operations
Assist in security awareness initiatives and provide guidance to staff on security topics
Prepare clear, concise reporting on security metrics, vulnerability status, and compliance posture for management
Qualifications
Required
3–5 years of experience in an information security role with exposure to both technical operations and compliance functions
Hands-on experience with SIEM platforms (Splunk, Microsoft Sentinel, or equivalent)
Working knowledge of vulnerability management tools such as Tenable Nessus/IO or Qualys
Demonstrated understanding of SOC 2 Trust Service Criteria and NIST Cybersecurity Framework
Familiarity with common attack techniques and defensive countermeasures (MITRE ATT&CK familiarity a plus)
Strong analytical and problem-solving skills with the ability to work both independently and collaboratively
Excellent written and verbal communication skills; ability to translate technical findings for non-technical audiences
Preferred
Relevant certifications such as CompTIA Security+, CySA+, CEH, CISM, or equivalent
Experience supporting a SOC 2 audit from end to end
Scripting or automation skills (Python, PowerShell) for security tooling and reporting
Exposure to cloud security (AWS, Azure, or GCP) environments
Experience working with GRC platforms (e.g., Archer, ServiceNow GRC, Drata, Vanta)
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.