Sr Information Security Analyst
SageNet
- Tulsa, Oklahoma, United States
- Tulsa, Oklahoma, United States
À propos
SageNet is the single accountable partner unifying connectivity and digital experiences for widely distributed enterprises. We design, deploy, manage, and monitor critical infrastructure across thousands of locations. Our U.S.-based Network Operations Centers operate 24/7, and our national field force delivers consistent outcomes from pilot to scale.
About the Role The Senior Information Security Analyst plays a critical role in executing and maturing SageNet’s information security program. This position supports and extends the Director of Information Security by owning key security operations, governance, risk, and compliance activities while acting as a delegated decision-maker for day-to-day security program execution.
Responsibilities
Oversee SIEM alert tuning, investigation, triage, and escalation in coordination with SOC providers.
Serve as the primary incident response coordinator during security events, including investigation, documentation, and follow-up.
Develop and deliver security awareness and training initiatives.
Maintain operational security metrics and prepare reporting for leadership.
Partner with IT and system owners to manage IAM controls, access reviews, and privileged access governance.
Act as a subject matter expert for secure network architecture, including firewalls, VPNs, SD‑WAN, wireless, and authentication systems.
Lead firewall and network security review processes to ensure alignment with internal policies and PCI DSS requirements.
Serve as the primary security stakeholder for internally developed and customer‑facing applications.
Define and maintain application security requirements aligned with PCI DSS 4.0, OWASP ASVS, and secure SDLC practices.
Partner with development and engineering teams to integrate security into the software development lifecycle.
Review application designs and architectures for security risks related to authentication, authorization, data handling, and segmentation.
Oversee application vulnerability management activities, including SAST, DAST, and software composition analysis (SCA).
Coordinate remediation, risk acceptance, and exception tracking for application security findings.
Support and validate application‑layer penetration testing and remediation efforts.
Act as a security escalation point for application‑related incidents.
Own the end‑to‑end vulnerability management lifecycle across infrastructure and applications.
Coordinate remediation efforts with Network Engineering, IT Infrastructure, Operations, and Development teams.
Conduct targeted risk assessments and support enterprise risk management activities.
Lead coordination of PCI DSS compliance activities, including evidence collection, control validation, and engagement with external QSAs.
Manage the lifecycle of security policies and procedures, ensuring alignment with regulatory and business requirements.
Support customer, regulatory, and internal audit activities.
Required Qualifications
5+ years of experience in information security, network security, or security governance roles.
Bachelor’s degree in information security, Computer Science, MIS, or equivalent professional experience.
At least one security certification (e.g., Security+, CySA+, SSCP, GSEC).
Strong working knowledge of vulnerability management tools, SIEM platforms, and log analysis.
Solid understanding of firewall architectures and access control review methodologies.
Working knowledge of PCI DSS 4.0 and managed service provider shared‑responsibility models.
Strong understanding of application security principles, including common web vulnerabilities (OWASP Top 10).
Experience coordinating remediation efforts across technical and non‑technical teams.
Excellent communication, documentation, and analytical skills.
Ability to independently manage multiple priorities in a fast‑paced environment.
Preferred Qualifications
Advanced security certifications such as CISSP, CISM, ISA/QSA, or equivalent.
Familiarity with SD‑WAN, WAF, IDS/IPS, VPN, identity management, and network segmentation.
Experience supporting or reviewing SAST, DAST, and penetration testing activities.
Comfortable serving as a functional lead and escalation point across security domains.
Work Environment & Expectations
Hybrid work model; may be performed in office or fully remote based on business needs and candidate location.
Standard business hours with occasional after‑hours availability required to support incident response or critical security events.
Professional work environment requiring a dedicated and secure workspace.
Regular collaboration with technical and non‑technical teams across multiple time zones.
Work performed primarily using computers, secure systems, and standard office equipment.
Equal Opportunity Employer SageNet is committed to providing equal employment opportunity to all employees and applicants without regard to race, color, sex, sexual orientation, gender identity, age, religion, national origin, disability, genetic information, veteran or military status, marital status, or any other legally protected status. SageNet prohibits and does not tolerate discrimination, harassment, or retaliation on the basis of any protected status.
Legal Disclaimer This job description is intended to provide a general overview of the position. It is not an exhaustive list of all responsibilities, duties, and skills required. SageNet reserves the right to modify this job description at any time, with or without notice. Employment with SageNet is at‑will, meaning that either the employee or the company may terminate the employment relationship at any time, with or without cause or notice. SageNet will provide reasonable accommodations for qualified individuals with disabilities.
#J-18808-Ljbffr
Compétences linguistiques
- English
Avis aux utilisateurs
Cette offre provient d’une plateforme partenaire de TieTalent. Cliquez sur « Postuler maintenant » pour soumettre votre candidature directement sur leur site.