Administer Qualys and strengthen Harbor’s security posture as a fully remote Security Analyst supporting Canada or the Philippines during United States EST hours.
Harbor’s internal IT Operations team needs a Security Analyst with four or more years in information security, cybersecurity, or related work. The position emphasizes vulnerability management, third-party risk management, and client-facing security assurance. You will analyze scan results, coordinate remediation, manage vendor reviews, and answer security questionnaires. Familiarity with network security, risk principles, and frameworks including SOC 2 or ISO 27001 supports the work.
Key Responsibilities: Operate Qualys across infrastructure, endpoints, and cloud environments
Prioritize vulnerabilities and coordinate remediation with technical teams
Track remediation and produce leadership dashboards and metrics
Manage vendor assessments, reviews, and risk inventory
Respond to client questionnaires, RFPs, and due diligence requests
Requirements: Four or more years in information security or related work
Hands-on vulnerability management experience, preferably with Qualys
Experience answering client security questionnaires or audit requests
Foundational knowledge of firewalls, SIEM, IDS/IPS, and endpoint protection
Familiarity with third-party risk management principles
Apply vulnerability analysis, remediation tracking, and security assurance expertise to strengthen Harbor’s internal security operations and governance.