Senior Analyst - Infrastructure Security Posture

Role Overview

We are seeking a highly motivated Senior Analyst Infrastructure Security Posture to support and enhance security configuration compliance across enterprise technology environments. The role will focus on policy compliance scanning, security baseline management, findings remediation, automation, and stakeholder engagement to strengthen the organization's overall security posture.

The ideal candidate will have strong experience in cyber security, configuration compliance scanning, infrastructure security, scripting/automation, and security tools such as Qualys, Wiz, and SNAB. Experience with AI-driven automation and agentic frameworks for security compliance is highly desirable.

Key Responsibilities

Security Compliance & Posture Management

• Support enterprise-wide policy compliance scanning for internal, external, cloud, and third-party hosted assets.
• Develop, maintain, and improve technology security configuration standards and specifications.
• Drive adoption of minimum security baselines across infrastructure, applications, cloud services, and security platforms.
• Monitor compliance status, identify configuration gaps, and support remediation activities.

Security Automation & AI Enablement

• Build and automate security compliance documentation and scanning processes using scripting, coding, AI tools, and agentic frameworks.
• Develop compliance checks and controls for technologies not currently supported by existing platforms.
• Improve efficiency, repeatability, and sustainability of security posture management processes through automation.

Findings & Vulnerability Management

• Manage and track security findings, policy violations, and configuration risks.
• Support identification, prioritization, and remediation of security misconfigurations.
• Collaborate with technology teams to reduce vulnerability exposure and improve compliance outcomes.

Stakeholder Engagement

• Provide guidance and support to infrastructure teams, application teams, and service owners on improving security posture.
• Build strong relationships with business, technology, audit, and risk stakeholders.
• Assist teams in understanding compliance findings, remediation requirements, and security best practices.

Reporting & Governance

• Produce meaningful security metrics, dashboards, and reporting for leadership teams.
• Measure control effectiveness, compliance coverage, and risk reduction initiatives.
• Support audits, assessments, and regulatory security compliance activities.

Vendor & Tool Management

• Support operation and optimization of security compliance platforms and scanning tools.
• Work with vendors to resolve issues, manage upgrades, evaluate new features, and maximize tool effectiveness.
• Assist in managing tool release cycles and ROI from security investments.

Required Skills & Experience

Technical Skills

• 6+ years of overall Cyber Security experience.
• 3+ years of experience in Policy Compliance Scanning and custom security control development.
• 3+ years of experience in scripting, application development, automation, or technical support.
• Hands-on experience with:
• Qualys
• Wiz
• SNAB
• Security compliance and configuration scanning tools
• Knowledge of:
• Infrastructure Security
• Cloud Security
• Security Baselines
• Findings Management
• Vulnerability Management
• Security Controls & Compliance
• Experience with automation using:
• Python
• PowerShell
• Shell Scripting
• AI-powered automation frameworks

Soft Skills

• Excellent problem-solving and analytical skills.
• Strong stakeholder management and communication abilities.
• Ability to work independently and manage multiple priorities.
• Strong collaboration and relationship-building skills.
• Self-driven with a passion for improving security posture.