Security Analyst

Vnsure Business Solution is looking for a Security Analyst to help safeguard the company’s IT environment. This onsite role in New York, NY focuses on proactive monitoring, vulnerability assessments, and incident response support, with an emphasis on maintaining security and compliance alignment with ISO 27001 and NIST.

What you will do

You will monitor and analyze security events using SIEM tools to detect potential threats and weaknesses. The role also includes investigating security risk across LAN, WAN, and cloud environments.

• Use Security Information and Event Management (SIEM) capabilities to review security events and identify potential threats and vulnerabilities.
• Perform vulnerability assessments and support security risk investigations across network infrastructure, including LAN, WAN, and cloud environments.
• Manage and configure firewalls such as Cisco ASA, and implement network security protocols including IPsec, SSL, and VPNs to protect data transmission.
• Support incident response activities by investigating breaches, coordinating recovery actions, and documenting findings following established procedures.
• Help develop and maintain system security plans aligned with standards such as ISO 27002, FIPS, and FedRAMP.
• Partner with IT teams on system hardening through security configurations, patch management, and hardening practices on Windows, Linux (Debian, CentOS), and macOS.
• Contribute to security engineering initiatives involving Azure, Google Cloud Platform, vSphere, load balancing, and high availability solutions.

What you bring

• Proven experience with computer networking concepts, including routing protocols such as OSPF and BGP, plus LAN/WAN architecture and network support.
• Strong understanding of cybersecurity tooling, including SIEM platforms like Splunk and SolarWinds, IDS/IPS, Endpoint Detection and Response (EDR), and threat detection and response methodologies.
• Familiarity with security standards and compliance expectations, including ISO 27001/ISO 27002, NIST frameworks, PCI DSS, and RMF.
• Hands-on capability with firewall configuration (including Cisco ASA), VPN setup using IPsec, IDS/IPS deployment, and core networking protocols such as TCP/IP, DNS, and DHCP.
• Ability to automate security tasks using scripting languages such as Python or Bash (experience with Nmap or Fiddler is a plus).
• Capability to conduct vulnerability research and assessments, support system hardening, and handle incident management in complex IT environments.
• Educational background in computer science or information technology. Certifications such as CISSP, CEH, or CompTIA Security+ are highly desirable.

Tools and technologies

• SIEM: Splunk, SolarWinds
• Security controls: IDS/IPS, EDR
• Network security: Cisco ASA, IPsec, SSL, VPNs
• Compliance and frameworks: ISO 27001, ISO 27002, NIST, FIPS, FedRAMP, PCI DSS, RMF
• Networking: OSPF, BGP, TCP/IP, DNS, DHCP
• Scripting and tooling: Python, Bash, Nmap, Fiddler
• Cloud and virtualization: Azure, Google Cloud Platform, vSphere

Compensation and location

Pay: Up to $30.00 per hour.
Work location: Onsite in New York, NY.