Information Security Analyst

NEOSOL is hiring an Information Security Analyst in the United States (onsite). In this role, you will help safeguard the organization by monitoring security activity, evaluating risk, and supporting the implementation of controls and security technologies. The work focuses on practical protection against real threats, with clear opportunities to contribute to policies, incident response, and continuous improvement.

What you’ll do

• Monitor security systems to detect and respond to potential threats, including malware, phishing, and social engineering attacks.
• Perform regular vulnerability assessments and penetration testing to identify weaknesses and drive remediation.
• Develop and maintain security policies, procedures, and standards to support compliance with relevant regulations and best practices.
• Investigate security incidents, then provide recommendations for remediation and prevention.
• Collaborate with the security team to implement and maintain security controls and technologies, including firewalls, intrusion detection and prevention systems (IDPS), and security information and event management (SIEM) systems.
• Keep current on emerging security trends, vulnerabilities, and threat vectors to strengthen defenses over time.

What you’ll bring

• Bachelor’s degree in computer science, information security, or a related field.
• Experience in information security, with a focus on threat detection and response.
• Knowledge of security principles, best practices, and technologies, including firewalls, IDPS, SIEM, and encryption.
• Familiarity with relevant regulations such as GDPR, HIPAA, and PCI-DSS.
• Strong analytical and problem-solving skills.
• Excellent written and verbal communication skills.
• Ability to work independently and as part of a team.
• Willingness to work irregular hours and be on-call if necessary.

Helpful experience (preferred)

• Professional certification such as CISSP or CEH.
• Experience with cloud-based environments and cloud security best practices.
• Knowledge of incident response and forensic analysis.
• Familiarity with security frameworks such as NIST or ISO 27001.
• Understanding of network protocols and network architectures.

Technologies and frameworks: firewalls, intrusion detection and prevention systems (IDPS), security information and event management (SIEM) systems, encryption, GDPR, HIPAA, PCI-DSS, NIST, ISO 27001.