Remote Information Security Analyst Jobs
Remote information security analyst jobs are open across the U.S. in finance, healthcare, technology, and government contracting, from entry-level analyst positions at cloud-native startups to senior roles on distributed security teams. Companies hiring right now include Fisher Investments, Gainwell Technologies, and Sumitomo Mitsui Trust Bank. See the openings below and apply to the ones that match your experience.
Find JobsOverview
Showing 5 of 79+ Remote Information Security Analyst jobs
- Team:Corporate Functions
- Location:United States of America, Sleepy Hollow
- Req ID:R52887
- Contract:Full time
- Work Pattern:Remote
The role
Build our future together
We’re looking for a hands-on leader to own the platforms that give our security teams visibility across the enterprise. You’ll lead a team supporting the Security Monitoring function. The team builds and maintains the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards. It also supports the systems that feed our Security Information and Event Management (SIEM) platform, which correlates it all.
This is a player-coach role, roughly 50/50 technical work and team leadership. You’ll lead a mixed team of employees and vendor staff and act as the escalation point when monitoring platforms or security incidents need senior attention. You’ll also explain complex technical topics clearly to non-technical stakeholders.
At Regeneron, our SIEM has grown tremendously, and we support business functions beyond security, including Finance, IT, Manufacturing, and Research. We cautiously push the boundaries of the product, evaluating cutting-edge technology in our test environment and deploying capabilities that reshape how Regeneron and other users think about a SIEM.
Where and When
Location: 100% remote (US East Coast time zone).
Team: 4-10 employees and vendor resources.
Discover your role
Platform health and operations
- Own the availability, performance, and data quality of the SIEM and log collection infrastructure.
- Drive the team and platform toward zero skipped searches, zero unplanned downtime, and no logging errors that affect monitoring.
- Forecast data growth and manage ingest and compute within licensed capacity.
- Provide metrics, performance reports, and dashboards to leadership.
- Apply ITIL practices to incident, request, and change management.
Vendor and service management
- Manage vendor relationships and contracts, including SLA definition, performance reviews, and service review meetings.
- Direct a mixed team of employees and external resources, assigning work in line with shared strategy and goals.
- Lead responses to audit requests related to monitoring systems and controls.
Incident escalation and response
- Escalate incidents and enhancement requests to internal owners and vendors as needed.
- Coordinate with stakeholders during cybersecurity incidents.
- Support triage and escalation of security events and threats, using SIEM data to assist investigations.
Improvement and engineering partnership
- Partner with engineering and architecture teams to define requirements and set feasible timelines.
- Deliver projects that improve security event collection, detection, analysis, correlation, and response.
- Advise infrastructure and security teams on configuration changes that improve event collection.
- Track emerging trends in AI, machine learning, and analytics for security monitoring, and recommend where they add value.
Team management
- Align the team with common short- and long-term goals.
- Make sure the team has the tools it needs, and remove blockers.
- Give team members frequent performance feedback, so they know they’re valued and where they can improve.
- Build a trusting environment where it’s safe to ask for support and to suggest better ways of working. 1 Team; 1 Platform.
This role requires:
- 10+ years in IT, including 5+ years in security operations or as a monitoring system manager or lead engineer.
- 5+ years leading or directing technical teams, including contractor staff.
- Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise.
- Advanced Red Hat Linux skills.
- Advanced scripting in Python and Bash.
- Advanced rsyslog configuration experience.
- Experience writing technical requirements and working with engineering teams to deliver them.
- Strong written and verbal communication, with the ability to build relationships and present to audiences from engineers to executives.
- Sound judgment in weighing security controls against technical and administrative standards and making risk-appropriate tradeoffs.
Preferred Qualifications
- Experience with Splunk Enterprise Security and SOC operations, including triaging security incidents and threats.
- Experience overseeing managed service delivery and vendor SLAs.
- Experience with security telemetry sources such as syslog, Universal Forwarder and heavy forwarder deployments, Splunk DB Connect, and the VMware Data Collection Node.
- Familiarity with modern detection technologies (EDR/XDR) and cloud security logging.
- Experience in a large, complex organization working across multiple business lines.
Why Join Us
- We share a common goal: to build the best Security Monitoring platform and SIEM, and to be trusted advisors to our partners on the Security team and across the business. We work regularly with Splunk product management to shape cutting-edge tools such as Ingest Processor, UEBA, Dashboard Studio, and SOAR, helping the platform become what Regeneron and the industry need.
- 1 Team; 1 Platform; 1 Common Goal. Our sub-goals are ambitious, and we’re still working toward them: no skipped searches, no downtime, and no errors that affect logging or monitoring.
- Our team members are regularly invited to speak at industry conferences.
- Health, Family, Work (in that order).
Does this sound like you? Apply now to take your first step towards living the Regeneron Way! We are committed to building a workplace with an inclusive culture. Regeneron is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion or belief (or lack thereof), sex, sexual orientation, gender identity or expression, gender reassignment, marital or civil partnership status, civil status, pregnancy or parental status, age, disability, nationality, citizenship status, ethnic or national origin, membership of the Traveler community, familial status, genetic information, military or veteran status, or any other characteristic protected under applicable law. Where required, we will provide reasonable accommodation to applicants with known disabilities or chronic illnesses during the recruitment process, unless such accommodation would impose undue hardship.
Where necessary, we disclose salary ranges for roles in all countries in which we operate. The final offer will be determined within the relevant range based on the country of employment, specific role level, and your skills and experience. In some countries, collective bargaining agreements (CBAs) may apply and influence certain elements of pay or benefits. Regeneron offers a competitive and comprehensive total rewards package which may include, depending on country and role: annual bonuses or other incentive plans, equity awards, pension or retirement benefits, 401(k) company match, health and wellness programs, fitness centers, insurance benefits (e.g. medical, dental, vision, life and disability), paid time off, and family support benefits. For additional information about Regeneron benefits in the U.S., please visit https://careers.regeneron.com/en/working-at-regeneron/total-rewards/. For other locations, additional information will be provided during the recruitment process. If you have any questions, please speak with your recruiter.
Please be advised that at Regeneron, we believe we do our best work when we are together. For that reason, many roles are required to be performed on‑site. Please speak with your recruiter and hiring manager for more information about on‑site expectations for your role and location.
As part of the recruitment process, certain background checks may be conducted in accordance with the laws of the country where the position is based. The purpose of such checks is to verify certain information prior to the commencement of employment such as identity, right to work and educational qualifications.
For jobs in Canada: this posting is for an existing position.
Salary Range (annually)
$153,500.00 - $250,500.00
- Team:Corporate Functions
- Location:United States of America, Sleepy Hollow
- Req ID:R52887
- Contract:Full time
- Work Pattern:Remote
The role
Build our future together
We’re looking for a hands-on leader to own the platforms that give our security teams visibility across the enterprise. You’ll lead a team supporting the Security Monitoring function. The team builds and maintains the Splunk log ingestion pipeline, RBAC, searches, reporting, and dashboards. It also supports the systems that feed our Security Information and Event Management (SIEM) platform, which correlates it all.
This is a player-coach role, roughly 50/50 technical work and team leadership. You’ll lead a mixed team of employees and vendor staff and act as the escalation point when monitoring platforms or security incidents need senior attention. You’ll also explain complex technical topics clearly to non-technical stakeholders.
At Regeneron, our SIEM has grown tremendously, and we support business functions beyond security, including Finance, IT, Manufacturing, and Research. We cautiously push the boundaries of the product, evaluating cutting-edge technology in our test environment and deploying capabilities that reshape how Regeneron and other users think about a SIEM.
Where and When
Location: 100% remote (US East Coast time zone).
Team: 4-10 employees and vendor resources.
Discover your role
Platform health and operations
- Own the availability, performance, and data quality of the SIEM and log collection infrastructure.
- Drive the team and platform toward zero skipped searches, zero unplanned downtime, and no logging errors that affect monitoring.
- Forecast data growth and manage ingest and compute within licensed capacity.
- Provide metrics, performance reports, and dashboards to leadership.
- Apply ITIL practices to incident, request, and change management.
Vendor and service management
- Manage vendor relationships and contracts, including SLA definition, performance reviews, and service review meetings.
- Direct a mixed team of employees and external resources, assigning work in line with shared strategy and goals.
- Lead responses to audit requests related to monitoring systems and controls.
Incident escalation and response
- Escalate incidents and enhancement requests to internal owners and vendors as needed.
- Coordinate with stakeholders during cybersecurity incidents.
- Support triage and escalation of security events and threats, using SIEM data to assist investigations.
Improvement and engineering partnership
- Partner with engineering and architecture teams to define requirements and set feasible timelines.
- Deliver projects that improve security event collection, detection, analysis, correlation, and response.
- Advise infrastructure and security teams on configuration changes that improve event collection.
- Track emerging trends in AI, machine learning, and analytics for security monitoring, and recommend where they add value.
Team management
- Align the team with common short- and long-term goals.
- Make sure the team has the tools it needs, and remove blockers.
- Give team members frequent performance feedback, so they know they’re valued and where they can improve.
- Build a trusting environment where it’s safe to ask for support and to suggest better ways of working. 1 Team; 1 Platform.
This role requires:
- 10+ years in IT, including 5+ years in security operations or as a monitoring system manager or lead engineer.
- 5+ years leading or directing technical teams, including contractor staff.
- Expert-level Splunk experience; Splunk Certified Consultant or equivalent demonstrated expertise.
- Advanced Red Hat Linux skills.
- Advanced scripting in Python and Bash.
- Advanced rsyslog configuration experience.
- Experience writing technical requirements and working with engineering teams to deliver them.
- Strong written and verbal communication, with the ability to build relationships and present to audiences from engineers to executives.
- Sound judgment in weighing security controls against technical and administrative standards and making risk-appropriate tradeoffs.
Preferred Qualifications
- Experience with Splunk Enterprise Security and SOC operations, including triaging security incidents and threats.
- Experience overseeing managed service delivery and vendor SLAs.
- Experience with security telemetry sources such as syslog, Universal Forwarder and heavy forwarder deployments, Splunk DB Connect, and the VMware Data Collection Node.
- Familiarity with modern detection technologies (EDR/XDR) and cloud security logging.
- Experience in a large, complex organization working across multiple business lines.
Why Join Us
- We share a common goal: to build the best Security Monitoring platform and SIEM, and to be trusted advisors to our partners on the Security team and across the business. We work regularly with Splunk product management to shape cutting-edge tools such as Ingest Processor, UEBA, Dashboard Studio, and SOAR, helping the platform become what Regeneron and the industry need.
- 1 Team; 1 Platform; 1 Common Goal. Our sub-goals are ambitious, and we’re still working toward them: no skipped searches, no downtime, and no errors that affect logging or monitoring.
- Our team members are regularly invited to speak at industry conferences.
- Health, Family, Work (in that order).
Does this sound like you? Apply now to take your first step towards living the Regeneron Way! We are committed to building a workplace with an inclusive culture. Regeneron is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion or belief (or lack thereof), sex, sexual orientation, gender identity or expression, gender reassignment, marital or civil partnership status, civil status, pregnancy or parental status, age, disability, nationality, citizenship status, ethnic or national origin, membership of the Traveler community, familial status, genetic information, military or veteran status, or any other characteristic protected under applicable law. Where required, we will provide reasonable accommodation to applicants with known disabilities or chronic illnesses during the recruitment process, unless such accommodation would impose undue hardship.
Where necessary, we disclose salary ranges for roles in all countries in which we operate. The final offer will be determined within the relevant range based on the country of employment, specific role level, and your skills and experience. In some countries, collective bargaining agreements (CBAs) may apply and influence certain elements of pay or benefits. Regeneron offers a competitive and comprehensive total rewards package which may include, depending on country and role: annual bonuses or other incentive plans, equity awards, pension or retirement benefits, 401(k) company match, health and wellness programs, fitness centers, insurance benefits (e.g. medical, dental, vision, life and disability), paid time off, and family support benefits. For additional information about Regeneron benefits in the U.S., please visit https://careers.regeneron.com/en/working-at-regeneron/total-rewards/. For other locations, additional information will be provided during the recruitment process. If you have any questions, please speak with your recruiter.
Please be advised that at Regeneron, we believe we do our best work when we are together. For that reason, many roles are required to be performed on‑site. Please speak with your recruiter and hiring manager for more information about on‑site expectations for your role and location.
As part of the recruitment process, certain background checks may be conducted in accordance with the laws of the country where the position is based. The purpose of such checks is to verify certain information prior to the commencement of employment such as identity, right to work and educational qualifications.
For jobs in Canada: this posting is for an existing position.
Salary Range (annually)
$153,500.00 - $250,500.00
See All 79 Remote Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Information Security Analyst Job Market
Who's Hiring
- Fisher Investments10
- Gainwell Technologies3
- Sumitomo Mitsui Trust Bank3
- Second Front Systems2
- Blue Shield of California2
Top Industries Hiring
- Insurance
- Retail
- Education
What Employers Look For
The qualifications that appear most often in remote information security analyst jobs.
- Bachelor's degree in computer science, information security, or a related technical field
- Proficiency with SIEM platforms such as Splunk, Microsoft Sentinel, or IBM QRadar
- Hands-on experience with vulnerability scanning tools like Nessus, Qualys, or Rapid7
- Knowledge of security frameworks including NIST CSF, ISO 27001, and CIS Controls
- One or more certifications such as CompTIA Security+, CISSP, CEH, or CISM
- Experience supporting incident response, threat detection, or security operations center workflows
Tips for Your Remote Information Security Analyst Job Search
Apply early to remote roles that fit
Migrate Mate lists remote information security analyst openings from across the U.S. in one place. Check it regularly and apply to roles that match your certifications and tool experience before postings close, since remote positions often attract high application volume quickly.
Show your async communication in writing
Remote security teams depend on written handoffs, incident summaries, and ticket documentation. Treat your cover letter and any take-home assessments as proof you can communicate findings clearly without a meeting. Concise, structured writing signals you'll function well on a distributed team.
Document a home lab or personal project
Remote employers can't watch you work, so they rely on evidence. A documented vulnerability assessment, a write-up of a CTF challenge, or a personal SIEM setup gives hiring managers something concrete to evaluate your technical judgment and self-direction before an interview.
Match your tools list to remote security stacks
Remote information security analyst roles cluster around cloud environments and SaaS-heavy stacks. Make sure your application explicitly names the platforms you've worked with, such as AWS Security Hub, Microsoft Defender, Splunk, or CrowdStrike, because remote reviewers often screen resumes by tool familiarity.
Remote Information Security Analyst Jobs: Frequently Asked Questions
How do I get a remote information security analyst job?
Focus on companies with fully distributed security teams, such as cloud-first software firms, managed security service providers, and remote-first financial institutions. Remote employers screen heavily for self-direction, clear async written communication, and hands-on fluency with tools like SIEM platforms, vulnerability scanners, and ticketing systems. Certifications such as Security+, CISSP, or CEH signal credibility quickly, and a documented home lab or incident response write-up gives you an edge most applicants lack.
Which companies hire remote information security analysts?
Companies hiring remote information security analysts right now include Fisher Investments, Gainwell Technologies, and Sumitomo Mitsui Trust Bank, based on current remote listings on Migrate Mate as of November 2026. Remote-first technology firms, managed security service providers, and large financial institutions with distributed teams are among the most consistent hirers of this role.
Can you get a remote information security analyst job with no experience?
Yes, but remote entry-level roles are harder to land because employers expect you to work independently from day one. Smaller remote-first companies and managed security providers occasionally hire juniors who can show a home lab, a personal vulnerability assessment project, or a relevant certification like CompTIA Security+. That evidence of self-directed learning replaces the supervised ramp-up time an in-office junior role would provide.
Do you need a degree for remote information security analyst jobs?
Not always. Many remote employers weight certifications, demonstrated skills, and real-world project work alongside or instead of a four-year degree, particularly for mid-level roles. Holding a CISSP, CISM, or CEH, combined with a portfolio of documented security assessments or incident response experience, can be competitive even without a traditional computer science or information systems degree.
Which industries hire the most remote information security analysts?
The sectors hiring the most remote information security analysts are Insurance, Retail, and Education, based on current remote listings on Migrate Mate as of November 2026. These industries rely on distributed teams protecting sensitive data across multiple time zones, which makes remote information security analysts a practical and common staffing choice.
See All 79 Remote Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs