About this Opportunity:
The Senior Security Analyst ensures the adherence of security best practices and validates the confidentiality, integrity, and availability of the data within Orion’s multiple environments. The Senior Security Analyst will contribute to the development and implementation of internal security requirements and provide guidance to technical teams around these developed security requirements. The Senior Security Analyst monitors and assesses information security controls and works with technical teams to remediate any security vulnerabilities identified in a timely manner. The Senior Security Analyst works with other members of the Information Security Department to test and validate security controls and supports the Orion security program in general.
Location Status:
It is anticipated that an incumbent in this role will work as a Hybrid employee, with three (3) or more days each week required on-site at one of the listed office locations.
Candidates should be located within a commutable distance to an office. Internal candidates currently aligned to an Orion office location may be given preference; however, internal candidates with varying work arrangements may be considered based on experience and business needs. Work location is subject to change based on business needs.
In this role, you’ll get to:
- Serve as SME on security controls and provide evidence for security audits and due diligence questionnaires
- Manage assigned Information Security projects through cross-team collaboration and focus on continual process improvement
- Ensure adherence to Orion’s Information Security Management System (ISMS) and other security policies
- Continually review and assess Orion’s environment for controls effectiveness and for potential vulnerabilities. Document findings, evaluate risk, and make recommendations for remediation efforts
- Identify emerging security and privacy threats. Recommend and implement appropriate responses as necessary
- Design, implement, and maintain Orion’s DSPM tooling
- Maintain and contribute to the Information Security awareness and training program
- Mentor other members of the team
- Assist the Security Governance and Compliance team with policy creation and maintenance and validate policy effectiveness
- Work closely with the Development, Platform, and InfoSec teams for various security tasks and initiatives
We’re looking for talent who:
- Has extensive hands-on experience utilizing common information security tools, including IDS/IPS, EDR, DLP, DSPM and CSPM technologies
- Has strong analytical skills and experience correlating information from multiple sources to discern patterns
- Has an advanced understanding of the existing cyber threat landscape and the desire to keep abreast of emerging threats and challenges
- Has strong understanding of information systems
- Has strong Knowledge of security principles, architecture, and infrastructure best practices
- Has working knowledge of cybersecurity frameworks: ISO, NIST, MITRE ATT&CK
- Has familiarity with control frameworks and a general understanding of cyber risk
- Has strong technical writing and communication skills with the ability to articulate security vulnerabilities, best practices, and requirements to technical and nontechnical teams
- Has experience with control test automation and scripting languages preferred
- Documents information security standards/guidelines and control requirements
- Leverages AI to improve efficiency
- Multi-tasks while maintaining careful attention to detail
- Works independently with minimal direction and within a team environment
- Works with a sense of urgency to meet deadlines and address competing priorities
- Has effective written, listening, and verbal communication skills
- Has effective problem solving and organizational skills
- Has a minimum of a bachelor’s degree in MIS, Computer Science, Network Technology, Cybersecurity, Application Development, Cloud Computing preferred
- Has two or more Industry certifications, or the ability to obtain within 12 months: ISC2 , CompTIA , GIAC , AWS , Azure
- Has a minimum of 6 years of experience in Information Technology, Cybersecurity, Application Development, or related field
- Has a minimum 3 years of experience with security tools and technologies
- Owns and manages relationships with stakeholders directly and works effectively with people at all levels in an organization
#LI-AP1
#LI-Onsite
#LI-Hybrid
Recommended Skills:
Client-Centric, Effective Communication, Information Security Management, Innovation, Security Controls, Technical Proficiency, Time Management, Vulnerability Management, Work Collaboratively
Salary Range:
$99,862.00 - $154,679.00
The pay listed in this posting indicates the estimated pay at the time of this posting; however, may vary depending on geographic location, job-related knowledge, skills, and experience. In addition, Orion offers a competitive benefits package which includes health, dental, vision, and disability coverage on day one, 401(k) plan with employer match, paid parental leave, pet benefits including pawternity leave and pet insurance, student loan repayment and more.
About Us
At Orion, we achieve our best work when we support one another, staying personally accountable to each other and the clients we serve. We create a welcoming environment where everyone is respected, valued, and heard. Our commitment to create raving fans ensures we consistently exceed client expectations. Thinking differently is in our DNA—we innovate always, push boundaries, and reject the status quo to deliver transformative outcomes. Together, we support one another and see it through to success, driving our collective achievements and those of our clients.
