Senior Security Analyst

Stack

Responsibilities

• ▹Support the ongoing operation of the ISO 27001-aligned ISMS, including evidence collection, control implementation, and audit readiness.
• ▹Work with DevOps and cloud teams to implement and monitor security controls across AWS infrastructure (EC2, IAM, S3, RDS).
• ▹Manage vulnerability management using tools like Tenable, AWS Inspector, and Snyk — scheduling scans, triaging findings, and tracking remediation.
• ▹Administer and ensure compliance of endpoints using Jamf (macOS) and Microsoft Intune (Windows).
• ▹Monitor alerts from AWS-native tools (GuardDuty, Security Hub) and help coordinate incident response.
• ▹Produce and maintain management reports and dashboards on vulnerability status, ISMS control effectiveness, and endpoint compliance.
• ▹Maintain ISMS documentation, including the Statement of Applicability, risk assessments, and corrective actions.
• ▹Participate in internal and external audits, preparing evidence and delivering technical walkthroughs.
• ▹Support policy implementation, security training, and DevOps-aligned security processes.
• ▹Help prepare the organization for SOC 2 certification and contribute to building a hybrid external/internal SOC.

Requirements

• ▹Bachelor's degree in Information Security, Computer Science, or a related field, or significant equivalent technical security industry experience.
• ▹5+ years of hands-on experience in technical security roles.

Soft skills

About the company

Alchemy is preparing its SaaS products for SOC 2 certification while operating an ISO 27001-aligned information security program.