Information Security Analyst - Remote

Sangoma Technologies - Dulles, VA

Full-time - Mid Level

Remote - Dulles, VA

10,001+ employees

Telecommunications

About the position

The Information Security Analyst at Sangoma plays a crucial role in maintaining the security of the company's networks and systems. This position involves responding to security incidents, collaborating with various departments to address security challenges, and ensuring the reliability and efficiency of operations within a dynamic global network. The analyst will also be responsible for monitoring systems for vulnerabilities, providing detailed reports, and maintaining strong relationships with vendors and stakeholders.

Responsibilities

• Respond to security incidents and resolve issues in real-time.
• Partner with other departments to tackle escalated security challenges.
• Guide and collaborate with stakeholders, vendors, and consultants.
• Play a key role in security planning and response to support business needs.
• Build strong relationships with Internet carriers and vendors.
• Monitor systems for security issues and investigate operational impacts.
• Use and maintain software to protect information and system function.
• Check for vulnerabilities in systems.
• Provide detailed after-action reports and summaries.
• Coordinate the dispatch of technicians and engineers.
• Be a reliable resource during escalations, responding quickly via various communication methods.
• Rotate after-hours on-call duties with the team.
• Operate and maintain systems that ensure reliability and security.
• Recommend system enhancements.

Requirements

• A minimum of 2+ years of compliance, governance, risk, and/or audit experience with relevant industry regulations and standards (e.g. SOX, PCI, GDPR, ISO/IEC 27001, HIPAA, SOC2, NIST, etc.)
• Compliance, technology, risk, privacy, governance or other industry-related certifications (current or in progress; e.g. CISA, CISSP, QSA, CIS LA, etc.) highly preferred.
• Strong communication skills—clear, concise, and professional in both written and verbal forms.
• A proactive, detail-oriented mindset that ensures thoroughness.
• Ability to stay flexible and thrive in a fast-paced environment.
• Experience with vulnerability management and discovery tools (e.g. Tenable, Qualys, Kali Linux, Metasploit).
• Experience with consuming data from various sources such as logs and external threat intelligence.
• Knowledge of operating systems to assist operational teams.

Nice-to-haves

• Experience with security incident response and management.
• Familiarity with cloud security practices.
• Knowledge of network security protocols and technologies.

Benefits

• Extensive Benefit Options (Health, Vision, Dental, Long & Short term Disability) effective after a short waiting period
• Matching 401K program - 100% match on 4%
• Flexible Time Off & Company Holidays
• Entrepreneurial work environment partnered with high-growth career opportunities