Information Security Analyst at Orioninnovation

Orion Innovation is a premier, award-winning, global business and technology services firm. Orion delivers game-changing business transformation and product development rooted in digital strategy, experience design, and engineering, with a unique combination of agility, scale, and maturity. We work with a wide range of clients across many industries including financial services, professional services, telecommunications and media, consumer products, automotive, industrial automation, professional sports and entertainment, life sciences, ecommerce, and education. Responsibilities: • Leads the security operations for the platform, focusing on identifying and responding to threats. • Implements and manages security monitoring tools and incident response procedures. • Conducts vulnerability assessments and penetration testing to proactively identify security weaknesses. • Ensures the platform complies with internal security policies and external regulations. Qualifications: • Minimum seven years of Information Technology and Information Technology security experience with a background in software security, software develop using Agile and DevOps methods and tools • Bachelor's degree in Business Administration or Management, Computer Science(s), Information Technology/Security; Professional privacy or security qualifications such as CIPP and/or CISSP preferred • Experience in documenting processes and reviewing or drafting technical architecture and cloud security architecture material better practice; prefer prior Azure experience • A holistic understanding of attack vectors, current threats, and remediation strategies; Experience with computer forensics practices and procedures, basic investigations, and evidence handling is preferred • Implement and govern GitHub and GitHub Advanced Security within Agile/DevOps pipelines, embedding DevSecOps practices and tooling (e.g., CodeQL code scanning, secret scanning, dependency/SCA, IaC scanning, secure CI/CD and branch protections) to proactively identify, triage, and remediate vulnerabilities and continuously mature the secure SDLC. • Apply AI capabilities across the firm’s AI ecosystem—including the aIQ Chat agent space—by rapidly learning and integrating new models/tools; design and maintain secure AI workflows and guardrails (data protection, access controls, prompt safety, model risk management, compliance Orion is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, creed, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, citizenship status, disability status, genetic information, protected veteran status, or any other characteristic protected by law. Candidate Privacy Policy Orion Systems Integrators, LLC and its subsidiaries and its affiliates (collectively, “Orion,” “we” or “us”) are committed to protecting your privacy. This Candidate Privacy Policy (orioninc.com) (“Notice”) explains: • What information we collect during our application and recruitment process and why we collect it; • How we handle that information; and • How to access and update that information. Your use of Orion services is governed by any applicable terms in this notice and our general Privacy Policy.