Senior Security Analyst

The Senior Security Analyst is responsible for advancing Energage's information security, privacy, and compliance programs by implementing and continuously improving technical controls, governance processes, and risk management practices. This role serves as a senior technical and operational resource responsible for protecting company systems, customer data, and business operations while enabling the organization's continued growth. 

The position partners closely with Engineering, Product, IT, Legal, HR, and business leaders to embed security and privacy into company operations, ensuring compliance with regulatory requirements and industry best practices while maintaining a practical, business-focused approach to risk management. 

The position reports to the Director of Information Security & Data Privacy. 

• →Bachelor's degree in Information Security, Computer Science, Information Technology, or equivalent professional experience. 
• →3+ years of progressive experience in Information Security, Cybersecurity, Security Engineering, or related discipline. 
• →Experience supporting security and compliance programs involving ISO 27001, SOC 2, NIST CSF, or similar standards and frameworks. 
• →Experience performing security risk assessments and vulnerability management. 
• →Working knowledge of cloud security principles and technologies in environments such as AWS, Azure, or Google Cloud. 
• →Strong understanding of networking, authentication, encryption, access control, and security architecture principles. 
• →Strong written and verbal communication skills, including the ability to communicate security risks and recommendations to technical and non-technical stakeholders. 
• →Intellectual Curiosity, someone who asks the questions to understand the” what and why”. 

• Experience supporting privacy compliance initiatives involving regulations such as GDPR and CCPA/CPRA. 
• Experience with SIEM, endpoint security, vulnerability management, identity management, and security monitoring tools.One or more relevant information security, privacy, audit, or cloud certifications are preferred, such as: 
• Certified Information Systems Security Professional (CISSP) 
• Certified Information Security Manager (CISM) 
• Certified Cloud Security Professional (CCSP) 
• CompTIA Security+ 

Equivalent or comparable industry-recognized certifications will also be considered.