Administer Qualys and strengthen Harbor's security posture as a fully remote Security Analyst supporting Canada or the Philippines during United States EST hours.
Harbor's internal IT Operations team needs a Security Analyst with four or more years in information security, cybersecurity, or related work. The position emphasizes vulnerability management, third-party risk management, and client-facing security assurance. You will analyze scan results, coordinate remediation, manage vendor reviews, and answer security questionnaires. Familiarity with network security, risk principles, and frameworks including SOC 2 or ISO 27001 supports the work.
Key Responsibilities:
- Operate Qualys across infrastructure, endpoints, and cloud environments
- Prioritize vulnerabilities and coordinate remediation with technical teams
- Track remediation and produce leadership dashboards and metrics
- Manage vendor assessments, reviews, and risk inventory
- Respond to client questionnaires, RFPs, and due diligence requests
Requirements:
- Four or more years in information security or related work
- Hands-on vulnerability management experience, preferably with Qualys
- Experience answering client security questionnaires or audit requests
- Foundational knowledge of firewalls, SIEM, IDS/IPS, and endpoint protection
- Familiarity with third-party risk management principles
Apply vulnerability analysis, remediation tracking, and security assurance expertise to strengthen Harbor's internal security operations and governance.