Senior Security Analyst

Job not on LinkedIn

🕒 March 28

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Alchemy

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2017

🏪 Marketplace

🛍️ eCommerce

🤝 B2B

Marketplace • eCommerce • B2B

Alchemy is a circular tech company that designs and operates end-to-end trade-in, refurbishment, recovery and remarketing solutions for consumer electronics. It combines proprietary software platforms and a global physical infrastructure to power OEM, retailer, carrier and wholesale programs, run marketplaces for secondary tech, and sell certified refurbished devices to consumers and businesses. Alchemy emphasizes sustainability through CO2 measurement and certification, and provides B2B wholesale, resale and logistics services to maximize value from used and overstock devices.

📋 Description

• Support the ongoing operation of the ISO 27001-aligned Information Security Management System (ISMS), including evidence collection, control implementation, and audit readiness. • Work with DevOps and cloud teams to implement and monitor security controls across AWS infrastructure and services (e.g., EC2, IAM, S3, RDS). • Manage and operationalise vulnerability management using tools like Tenable, AWS Inspector, and Snyk: schedule scans, triage findings, and track remediation efforts. • Administer and ensure compliance of endpoints using Jamf (macOS) and Microsoft Intune (Windows). • Monitor alerts and findings from AWS-native tools (e.g., GuardDuty, Security Hub) and assist in coordinating incident response activities. • Produce and maintain management reports and dashboards detailing: • Vulnerability status and trends • ISMS control effectiveness • Endpoint security compliance • Audit readiness and risk treatment status. • Support maintenance of ISMS documentation, including SoA, risk assessments, corrective actions, and control mapping. • Participate in internal and external audits by preparing evidence and delivering technical walkthroughs. • Support policy implementation, training activities, and DevOps-aligned security processes. • Prepare the organisation for also achieving SOC 2 certification. • Specify and implement security and compliance protocols for Alchemy SaaS products. • Begin to identify and work with tooling and partners to initiate the creation of a hybrid external/internal SOC. • Contribute to incident response testing and post-incident reviews when applicable.

🎯 Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field or significant alternative relevant technical security industry experience. • 5+ years of hands-on experience in technical security roles in a SaaS context, with a focus on ISO 27001, SOC, AWS, and vulnerability management. • At least 2 years team lead experience in a 24x7 global SOC • Experience with AWS security tools and services in a production SaaS environment. • Experience with Tenable and/or similar tools for vulnerability management. • Familiarity with Jamf and Intune for endpoint compliance and hardening. • Good understanding of network security fundamentals, including cloud networking, segmentation, firewalls, and VPNs. • Ability to generate and present clear and actionable security and compliance reports to stakeholders. • Experience with DevOps tools, infrastructure-as-code, and CI/CD pipelines.

🏖️ Benefits

• Health insurance • Professional development • Flexible working arrangements