Trevipay1mo ago

Senior Information Security Analyst

United States·Overland ParkFull-Time Regularsenior

SecurityOtherInformation Security Analyst

3 views0 saves0 applied

Apply Now

Quick Summary

Overview

Key Responsibilities

Security Operations • Monitor and triage security alerts from SIEM, EDR, IDS/IPS, CSPM, and other telemetry sources; validate true positives and reduce false positives.

Requirements Summary

• 7+ years of information security experience. • Bachelor’s Degree in Information Security, Computer Science, MIS/CIS, or equivalent experience. • Hands-on SOC responsibilities. • Experience supporting PCI DSS and/or ISO 27001 audits.

Technical Tools

b2b

TreviPay, The Pay by Invoice Company™, is the global B2B payments infrastructure partner for manufacturers, retailers, travel companies and banks. With our fully managed platform, intelligent apps, and 40 years of buyer intelligence, we help buyers buy, and sellers grow and get paid faster. Enabling more than $8B in global trade annually, TreviPay operates in 35 countries, with offices in Kansas, Mexico City, San Jose CR, Rijswijk NL, and Melbourne AU.

We are seeking a Senior Information Security Analyst with deep experience in both security operations and audit/compliance execution. This role blends hands-on detection and incident response with ownership of audit readiness and evidence management for frameworks including PCI DSS and ISO/IEC 27001. The ideal candidate is comfortable working across technical and business teams, can translate security requirements into actionable controls, and can drive improvements to reduce risk and improve security posture.

Responsibilities

~1 min read

• Monitor and triage security alerts from SIEM, EDR, IDS/IPS, CSPM, and other telemetry sources; validate true positives and reduce false positives.

• Conduct incident investigations and document findings, scope, root cause, and remediation actions.

• Lead or support incident response activities including containment, eradication, and recovery.

• Develop, maintain, and tune detection logic, alerting, and response playbooks and runbooks.

• Maintain, administer, and optimize security tools and platforms (e.g., SIEM, EDR, vulnerability scanners, email security, DLP), including upgrades, configuration changes, health monitoring, and integrations.

• Partner with IT and Engineering teams to remediate vulnerabilities, harden configurations, and improve overall security controls.

• Support and lead audit readiness for PCI DSS and ISO/IEC 27001.

• Coordinate evidence collection and manage auditor interactions.

• Perform gap assessments and track remediation efforts.

• Maintain ISMS documentation, policies, and procedures.

• Assist with risk assessments and continuous compliance activities.