Security analyst Jobs in Berkeley, CA

Our client, a global financial services and digital payments company, is seeking an Information Security Technical Analyst.

This position is a remote 12-month contract. You must be able to work in the PT zone, and be authorized to work in the US, no H1B Visa status. Hourly rate is $54.86, W2 + paid holidays through Talent Table. NO C2C.

You Will:

• Manage and maintain the flow of incoming vulnerability cases, including CVE notifications, cloud-based vulnerabilities, cloud misconfigurations, access control issues, web application vulnerabilities, and source code vulnerabilities.
• Conduct technical assessments of vulnerabilities to assist engineering teams and DRIs with remediation efforts, including the implementation of available patches where possible.
• Partner across security and product teams to identify and resolve vulnerabilities and security issues using a prioritized approach that is grounded in risk management principles.
• Research and report on vendor advisories, zero-day vulnerabilities, bug trackers, and other sources to gather intelligence and analyze any potential impact to Client.
• Manage the risk exception process by partnering across Security teams to identify areas of risk and collaborate with business units to make informed, risk-based decisions.
• Proactively identify opportunities to reduce toil by suggesting and championing the automation of manual triage, case management, and escalation workflows.
• Minimize recurring vulnerabilities by collaborating with partners to identify and solve root causes, ensuring long-term remediation.
• Monitor vulnerability metrics, including backlog status, historical trends, and remediation rates, to assess the overall security posture of the organization.
• Maintain runbooks or playbooks and document any new processes or procedures.
• Collaborate with Engineering and Compliance teams to manage penetration testing (pentest) results and address PCI-related vulnerabilities.
• Support ongoing bug bounty programs with a third-party vendor and internal stakeholders to prioritize and fix vulnerabilities.
• Support ongoing and periodic security risk assessment exercises that involve identifying, evaluating, and monitoring cybersecurity risks using both quantitative and qualitative methodologies.
• Collaborate with cross-functional teams (engineering, product, and others) to gather relevant data required for risk analysis and provide domain and subject matter expertise in security and risk.
• Support risk mitigation and control improvement actions to drive risk remediation.
• Support the adoption, evolution, and continuous improvement of a risk program.

Qualifications:

• Five or more years of demonstrated security, intelligence, and risk management experience in a technology-focused company.
• General understanding of cloud infrastructure (AWS, GCP, Azure), networking, and containerization.
• Experience with scripting to design and implement security automation workflows.
• Experience with multiple vulnerability scanning tools.
• Deep technical understanding of common security vulnerabilities such as web application vulnerabilities, OWASP Top 10, cloud vulnerabilities and misconfigurations, and source code vulnerabilities.
• Strong knowledge of risk countermeasures and compensating controls.
• Ability to work independently and in a collaborative environment with excellent communication and interpersonal skills.
• Minimum of 5 years of experience in Information Security, Information Technology, or a related field.
• Information Security degree preferred.

An Ideal Candidate Would Have:

• Fundamental knowledge of information security principles, including threats, vulnerabilities, and risk management.
• Proficient in utilizing AI agents and workflow automation for process improvements.
• Technical problem-solving mindset with a strong work ethic, motivation, and results-driven attitude.
• Holds security certifications such as CISSP, Security+, CySA+, or equivalent GIAC certifications.