Security Analyst

{
  "content_hash": "8de90e3ffd580d497d49dfe18b31544605577c491850b02510b134f524cf162f",
  "source_hash": "d330af44b31b232be25b331bc3e4eac4e6a92350fbce69e9f00b5f5b66755373",
  "last_changed_at": "2026-06-04T11:26:46.754Z",
  "active_status": "deleted"
}

{
  "language": "en",
  "location": {
    "raw": "San Diego, CA",
    "city": "San Diego",
    "region": "CA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.9
  },
  "salary_max": 140000,
  "salary_min": 120000,
  "inferred_at": "2026-06-02T10:37:53.858Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "San Diego, CA",
      "city": "San Diego",
      "region": "CA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": "year",
  "workplace_type": "on_site",
  "salary_currency": "USD"
}

{}

{
  "lists": [
    {
      "text": "Responsibilities",
      "content": "<div>\n<div><span style=\"text-decoration: underline;\"><strong>Monitor and Respond to Security Threats</strong></span></div>\n\n<li>Monitor, triage, and respond to security alerts across endpoint, email, and SIEM platforms</li>\n<li>Investigate security incidents impacting:\n\n</li><li>GMP systems and regulated environments</li>\n<li>SOX in-scope systems (financial applications, identity systems, etc.</li>\n\n\n<li>Execute incident response procedures aligned with validated and auditable processes</li>\n<li>Maintain detailed, audit-ready documentation of all incidents and remediation actions</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>Manage Security Technology Stack</strong></span></div>\n\n<li>Administer and implement CrowdStrike Falcon for endpoint detection and response (EDR)</li>\n<li>Manage Abnormal Security for phishing, business email compromise (BEC), and account takeover threats</li>\n<li>Perform vulnerability assessments using <strong>Rapid7</strong> <strong>InsightVM</strong></li>\n<li>Oversee <strong>KnowBe4</strong> security awareness training and phishing simulations</li>\n<li>Coordinate with SIEM platforms for log analysis and threat correlation</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>SOX IT General Controls (ITGCs)</strong></span></div>\n\n<li>Support SOX ITGC control execution and evidence collection, including:\n\n</li><li>User Access Reviews (UARs)</li>\n<li>Logical access controls (joiner/mover/leaver processes)</li>\n<li>Change management controls</li>\n<li>Logging and monitoring controls</li>\n\n\n<li>Prepare and maintain audit-ready documentation for SOX compliance testing</li>\n<li>Coordinate with Finance and IT teams on control execution and remediation</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>Policy Development &amp; Regulatory Compliance</strong></span></div>\n\n<li>Draft, review, and maintain information security policies, standards, and SOPs aligned with:\n\n</li><li>GxP requirements (GMP, GCP, GLP)</li>\n<li>SOX IT General Controls</li>\n<li>21 CFR Part 11 (where applicable)</li>\n\n\n<li>NIST CSF, NIST 800-53, or CIS Controls</li>\n<li>Ensure all policies are version-controlled, formally approved, and audit-ready</li>\n<li>Partner with IT, Finance, QA, and Compliance to align controls across regulated and financial systems</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>Audit Support</strong></span></div>\n\n<li>Support internal and external audits including SOX, FDA, SOC 2, and regulatory inspections</li>\n<li>Prepare control evidence and documentation packages</li>\n<li>Track audit findings and coordinate remediation activities</li>\n<li>Maintain relationships with internal audit and external assessors</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>Vulnerability Management</strong></span></div>\n\n<li>Conduct regular vulnerability scans across the environment</li>\n<li>Prioritize remediation based on:\n\n</li><li>Regulatory impact (GMP systems)</li>\n<li>Financial/reporting risk (SOX systems)</li>\n<li>Threat landscape and exploitability</li>\n\n\n<li>Coordinate remediation through appropriate change control processes</li>\n<li>Track and document remediation evidence for compliance reporting</li>\n\n<div><span style=\"text-decoration: underline;\"><strong>Security Awareness &amp; Training</strong></span></div>\n\n<li>Administer security awareness training programs for all staff</li>\n<li>Deliver targeted training for users with access to:\n\n</li><li>Regulated systems</li>\n<li>Financial/SOX in-scope systems</li>\n\n\n<li>Conduct phishing simulation campaigns and analyze results</li>\n<li>Track training metrics and maintain compliance records</li>\n\n<div><strong><span style=\"text-decoration: underline;\">Continuous Improvement</span></strong></div>\n\n<li>Develop and maintain security playbooks, SOPs, and runbooks</li>\n<li>Contribute to security metrics, KPIs, and executive reporting</li>\n<li>Identify gaps in controls, detection capabilities, and governance processes</li>\n<li>Recommend and implement security improvements aligned with business objectives</li>\n\n</div>"
    },
    {
      "text": "Requirements",
      "content": "<div><span style=\"text-decoration: underline;\"><strong>Required Experience</strong></span></div>\n\n<li>Minimum 3 years of hands-on cybersecurity experience</li>\n<li>At least 2 years in a regulated environment (biotech, pharma, healthcare, or financial services)</li>\n<li>At least 1 year supporting SOX ITGC controls or similar compliance frameworks</li>\n<li>Demonstrated experience with security policy and SOP development</li>\n\n<div>\n<div><span style=\"text-decoration: underline;\"><strong>Technical Skills</strong></span></div>\n\n<li>Strong experience with <strong>Endpoint Detection &amp; Response (EDR) </strong>platforms\n\n</li><li>CrowdStrike Falcon highly preferred, or equivalent (Carbon Black, SentinelOne, Microsoft Defender for Endpoint)</li>\n\n\n<li>Hands-on experience with vulnerability management tools\n\n</li><li>Rapid7 InsightVM preferred, or equivalent (Qualys, Tenable, Nexpose)</li>\n\n\n<li>Experience with email security platforms\n\n</li><li>Abnormal Security, Proofpoint, Mimecast, or similar</li>\n\n\n<li>Familiarity with <strong>security awareness platforms</strong>\n\n</li><li>KnowBe4 or equivalent</li>\n\n\n<li>Working knowledge of SIEM tools and log analysis (Splunk, Microsoft Sentinel, or similar)</li>\n\n<p><span style=\"text-decoration: underline;\"><strong>Compliance &amp; Governance</strong></span></p>\n\n<li>Proven experience with <strong>SOX ITGC controls</strong> including:\n\n</li><li>User access reviews and recertifications</li>\n<li>Logical access provisioning and deprovisioning</li>\n<li>Change management oversight</li>\n<li>Audit evidence collection</li>\n\n\n<li>Understanding of <strong>GMP (Good Manufacturing Practice)</strong> requirements and regulated system controls</li>\n<li>Experience supporting security and compliance audits</li>\n<li>Strong documentation and evidence management skills with an audit-ready mindset</li>\n\n<p><span style=\"text-decoration: underline;\"><strong>Core Competencies</strong></span></p>\n\n<li>Exceptional attention to detail and commitment to process adherence</li>\n<li>Analytical and investigative thinking for threat analysis</li>\n<li>Strong written and verbal communication skills</li>\n<li>Ability to translate technical security concepts for non-technical stakeholders</li>\n<li>Proven collaboration skills across IT, Finance, QA, and Compliance teams</li>\n<li>Self-motivated with ability to manage multiple priorities in a dynamic environment</li>\n\n</div>"
    },
    {
      "text": "Education & Certifications",
      "content": "\n<li>Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field</li>\n<li><strong>Security+ certification or equivalent</strong></li>\n<li>Advanced certifications such as:\n\n</li><li>CISSP or CISSP Associate</li>\n<li>CISA (Certified Information Systems Auditor)</li>\n<li>CySA+ (Cybersecurity Analyst)</li>\n<li>GIAC Security Essentials (GSEC) or similar</li>\n\n\n"
    },
    {
      "text": "Preferred Experience",
      "content": "\n<li>Deep familiarity with <strong>21 CFR Part 11 </strong>(electronic records and signatures)</li>\n<li>Experience with additional security frameworks:\n\n</li><li>NIST Cybersecurity Framework (CSF)</li>\n<li>NIST 800-53 controls</li>\n<li>CIS Critical Security Controls</li>\n\n\n<li>Prior experience supporting <strong>FDA inspections</strong> or pharmaceutical regulatory audits</li>\n<li>Experience with <strong>SOC 2 </strong>attestation and controls</li>\n<li>Basic scripting or automation experience (PowerShell, Python, Bash)</li>\n<li>Experience with identity and access management (IAM) platforms</li>\n<li>Familiarity with cloud security (Azure, AWS, or GCP)</li>\n"
    }
  ],
  "country": "US",
  "createdAt": 1779212909861,
  "updatedAt": null,
  "categories": {
    "team": "IT",
    "location": "San Diego, CA",
    "commitment": "Full-time (exempt)",
    "department": "Capricor Therapeutics",
    "allLocations": [
      "San Diego, CA"
    ]
  },
  "salaryRange": {
    "max": 140000,
    "min": 120000,
    "currency": "USD",
    "interval": "per-year-salary"
  },
  "workplaceType": "onsite"
}