BCM One · 3 days ago

Senior Information Security Analyst

Blue Bell, PA

Full-time

Onsite

Senior Level

5+ years exp

Wonder how qualified you are to the job?

Maximize your interview chances

Information ServicesInformation Technology

Insider Connection @BCM One

Discover valuable connections within the company who might provide insights and potential referrals, giving your job application an inside edge.

Responsibilities

Lead digital forensics investigations and incident response efforts to mitigate threats and analyze breaches to improve security posture.

Design, implement, and manage security automation workflows on our SOAR platform to streamline security operations and response processes.

Collaborate with our IT team to administer and secure Office 365 and Active Directory environments, ensuring robust access control and identity management processes are in place.

Develop and implement security measures across Windows, Mac, and Linux platforms to protect organizational assets.

Use Crowdstrike to monitor, detect, and respond to threats, leveraging its capabilities for proactive threat hunting and incident analysis.

Collaborate with the internal audit team to support SOC 2 and ISO 27001 compliance initiatives, including gap analysis, documentation, and implementation of required controls.

Demonstrate presence and leadership during high-pressure incidents, effectively communicating with stakeholders across the organization.

Conduct security assessments and audits to identify vulnerabilities and ensure adherence to security policies and standards.

Participate in a partial on-call rotation to respond to security incidents and emergencies outside of normal business hours.

Stay abreast of the latest security trends, threats, and technologies to continuously enhance the security posture of the organization.

Other responsibilities as required.

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

DFIRSecurity AutomationWindowsMacLinuxCrowdStrikeEndpoint DetectionResponseSOC 2ISO 27001Audit SupportCompliance ProjectsCISSPCISMGCIHGCFAOn-Call RotationProblem-SolvingAnalyticalCommunicationInterpersonalLeadership

Required

Bachelor’s degree in Information Security, Computer Science, or related field.

5+ years of experience in information security, specifically in roles involving DFIR and security automation.

Strong technical proficiency across Windows, Mac, and Linux operating systems.

Experience with CrowdStrike or similar endpoint detection and response (EDR) tools.

Knowledge of SOC 2 and ISO 27001 standards, with experience supporting audit and compliance projects highly desirable.

Professional certifications such as CISSP, CISM, GCIH, or GCFA are not required, but are a plus.

Excellent analytical and problem-solving skills, with the ability to think strategically about security.

Strong communication and interpersonal skills, capable of working effectively with technical and non-technical teams.

Demonstrated ability to lead effectively during critical incidents, maintaining poise and providing clear, calm, and consistent movement toward a resolution.

Ability to participate in an on-call rotation, providing timely responses to critical security incidents outside of standard work hours.