Remote Senior Information Security Analyst Jobs
Remote Senior Information Security Analyst jobs are in strong demand across the U.S., with remote-first firms, distributed enterprise teams, and cloud-native companies actively hiring for this role. Employers posting remote openings right now include Fisher Investments, Gainwell Technologies, and Sumitomo Mitsui Trust Bank, drawing candidates from sectors including Insurance, Retail, and Education. Find a role that fits below and apply directly.
Find JobsOverview
Open roles81
Top employerFisher Investments
Top industryInsurance
Top credentialBachelor's degree in information technology
Companies hiring66
Showing 5 of 81+ Remote Senior Information Security Analyst jobs
Information Systems Security Officer
We won't show you this job again
New 3h ago
Sparibis
Information Systems Security Officer
Washington, District of Columbia
New 3h ago
Senior Principal Information Security Analyst, Defensive Operations
We won't show you this job again
New 13h ago
Regeneron
Senior Principal Information Security Analyst, Defensive Operations
Sleepy Hollow, New York
New 13h ago
Information Security Manager
We won't show you this job again
New 19h ago
Powerplan
Information Security Manager
Atlanta, Georgia
New 19h ago
Manager - Information Security & Compliance
We won't show you this job again
Added 1d ago
Holman
Manager - Information Security & Compliance
Mount Laurel, New Jersey
Added 1d ago
Information Security Engineer- Identity Governance and Access Management
We won't show you this job again
Added 1d ago
University of Phoenix
Information Security Engineer- Identity Governance and Access Management
Phoenix, Arizona
Added 1d ago
New 3h ago
Information Systems Security Officer
Sparibis·Washington, District of Columbia
Job functions:
Remote (US)
Bachelor's degree in information technology
Job Description
Location: 100% remote.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
- Experience independently leading and executing the complete Risk Management Framework (RMF) lifecycle for IATT/ATO activities involving custom on-prem and AWS cloud solutions.
- Professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs.
- Experience developing, managing, maintaining, and supporting comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Cybersecurity related certification preferred.
- Ability to independently lead, manage, and execute the complete RMF lifecycle for assigned information systems, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring, to obtain and maintain an Authority to Operate (ATO).
- Coordinate RMF activities with U.S. Navy customers, government stakeholders, system owners, engineering teams, and other program personnel to ensure security requirements are implemented and authorization milestones are achieved.
- Develop, manage, maintain, and support comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Manage and maintain RMF authorization documentation, security control assessments, compliance information, and authorization package records within the Enterprise Mission Assurance Support Service (eMASS), ensuring documentation and security control implementation evidence are accurate and current.
- Interpret and apply applicable Cybersecurity Control Security Requirements Guides (CCSRGs) to assess system security requirements, validate security control implementation, identify compliance gaps, and support RMF authorization and continuous monitoring activities.
- Interpret, assess, and apply NIST SP 800-53 security controls and applicable government cybersecurity requirements to custom on-premises and AWS cloud environments, identifying control gaps and coordinating implementation and remediation activities.
- Conduct and coordinate vulnerability management activities, including ACAS scanning, vulnerability analysis, Security Technical Implementation Guides (STIGs) reviews, and tracking remediation through VRAM and other applicable tools and processes.
- Perform continuous monitoring of activities, including monthly security reporting, vulnerability scan analysis, security control reviews, account and access reviews, configuration changes, and tracking of corrective actions to maintain an effective security posture.
- Develop, coordinate, and execute security assessment and testing plans to evaluate system security requirements, assess the implementation and effectiveness of security controls, identify vulnerabilities and deficiencies, and document assessment results and supporting evidence required for RMF authorization package submission and approval.
- Identify, document, assess, and communicate cybersecurity risks and deficiencies.
- Coordinate directly with program stakeholders to gather, document, and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion.
- Assist the customer in preparing training and tabletop exercises for contingency planning, incident response and disaster recovery.
- Must have 5+ years of professional experience in Cybersecurity.
- Demonstrated experience serving as an ISSO or in a comparable cybersecurity role with direct responsibility for independently managing system security authorization, RMF compliance, and ongoing security operations within a federal government environment.
- Must be able to obtain and maintain a Secret security clearance.
- Must have a Bachelor’s Degree in a Cybersecurity or IT related field.
- Cybersecurity related certification preferred.
- Demonstrated experience independently leading and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-prem and cloud solutions.
- This includes experience with RMF preparation, system categorization, supporting information systems, security controls selection and implementation, security control assessments, authorization package development and submission, coordination of ATO approvals and authorization, and continuous monitoring.
- Experience preparing, maintaining, and managing comprehensive RMF authorization documentation packages, including SSPs, SARs, POA&Ms, Security Assessment Reports, and supporting assessment evidence.
- Must have strong working knowledge and professional experience applying NIST SP 800-53 security controls and applicable federal cybersecurity requirements within the RMF.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs and assessing system compliance with applicable security configuration requirements.
- Must have demonstrated professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation, security control assessments, compliance records, and supporting evidence.
- Must have demonstrated professional experience interpreting and applying applicable CCSRG requirements to assess system security controls, validate compliance, identify deficiencies, and support authorization activities.
- Experience evaluating applications, infrastructure, database, and API security, including familiarity with API-based security mechanisms and the OWASP framework for web application vulnerabilities.
- Strong understanding of AWS cloud environments, architecture, and security services, including experience assessing and implementing security controls within cloud-based environments.
- Experience conducting continuous monitoring, analyzing vulnerability scan results, preparing security status reports, and maintaining ongoing system security compliance.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Experience assessing security control deficiencies, evaluating cybersecurity risks, documenting findings, developing remediation plans, and tracking corrective actions through resolution.
- Strong communication and organizational skills, with the ability to independently manage multiple RMF activities, coordinate with government customers and technical stakeholders, communicate security risks, and drive deliverables through completion.
- Experience with requirements analysis, security architecture and design, translating cybersecurity requirements into technical security controls, and coordinating implementation with engineering and technical teams.
- Experience gathering and creating security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work through completion.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Familiarity with Atlassian tools, such as Jira, Confluence, and/or Splunk.
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Sparibis
Information Systems Security Officer
Washington, District of Columbia
New 3h ago
Job functions:
Remote (US)
Bachelor's degree in information technology
Job Description
Location: 100% remote.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
Years’ Experience: 5+ years professional experience in a cybersecurity related field.
Education: Bachelor’s degree IT related field.
Clearance: Applicants must be able to obtain and maintain a secret security clearance. United States Citizenship is required as part of the eligibility criteria to be able to obtain this type of security clearance.
Key Skills:
- Experience independently leading and executing the complete Risk Management Framework (RMF) lifecycle for IATT/ATO activities involving custom on-prem and AWS cloud solutions.
- Professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs.
- Experience developing, managing, maintaining, and supporting comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Cybersecurity related certification preferred.
- Ability to independently lead, manage, and execute the complete RMF lifecycle for assigned information systems, from system categorization and security control selection through implementation, assessment, authorization, and continuous monitoring, to obtain and maintain an Authority to Operate (ATO).
- Coordinate RMF activities with U.S. Navy customers, government stakeholders, system owners, engineering teams, and other program personnel to ensure security requirements are implemented and authorization milestones are achieved.
- Develop, manage, maintain, and support comprehensive RMF documentation packages including System Security Plans (SSPs), security control implementation statements, Security Assessment Reports (SARs), Plans of Action and Milestones (POA&Ms), and supporting security assessment evidence.
- Manage and maintain RMF authorization documentation, security control assessments, compliance information, and authorization package records within the Enterprise Mission Assurance Support Service (eMASS), ensuring documentation and security control implementation evidence are accurate and current.
- Interpret and apply applicable Cybersecurity Control Security Requirements Guides (CCSRGs) to assess system security requirements, validate security control implementation, identify compliance gaps, and support RMF authorization and continuous monitoring activities.
- Interpret, assess, and apply NIST SP 800-53 security controls and applicable government cybersecurity requirements to custom on-premises and AWS cloud environments, identifying control gaps and coordinating implementation and remediation activities.
- Conduct and coordinate vulnerability management activities, including ACAS scanning, vulnerability analysis, Security Technical Implementation Guides (STIGs) reviews, and tracking remediation through VRAM and other applicable tools and processes.
- Perform continuous monitoring of activities, including monthly security reporting, vulnerability scan analysis, security control reviews, account and access reviews, configuration changes, and tracking of corrective actions to maintain an effective security posture.
- Develop, coordinate, and execute security assessment and testing plans to evaluate system security requirements, assess the implementation and effectiveness of security controls, identify vulnerabilities and deficiencies, and document assessment results and supporting evidence required for RMF authorization package submission and approval.
- Identify, document, assess, and communicate cybersecurity risks and deficiencies.
- Coordinate directly with program stakeholders to gather, document, and translate business requirements, facilitate stakeholder and team meetings, provide security reports, and track security work through completion.
- Assist the customer in preparing training and tabletop exercises for contingency planning, incident response and disaster recovery.
- Must have 5+ years of professional experience in Cybersecurity.
- Demonstrated experience serving as an ISSO or in a comparable cybersecurity role with direct responsibility for independently managing system security authorization, RMF compliance, and ongoing security operations within a federal government environment.
- Must be able to obtain and maintain a Secret security clearance.
- Must have a Bachelor’s Degree in a Cybersecurity or IT related field.
- Cybersecurity related certification preferred.
- Demonstrated experience independently leading and executing the complete RMF lifecycle for IATT/ATO activities involving custom on-prem and cloud solutions.
- This includes experience with RMF preparation, system categorization, supporting information systems, security controls selection and implementation, security control assessments, authorization package development and submission, coordination of ATO approvals and authorization, and continuous monitoring.
- Experience preparing, maintaining, and managing comprehensive RMF authorization documentation packages, including SSPs, SARs, POA&Ms, Security Assessment Reports, and supporting assessment evidence.
- Must have strong working knowledge and professional experience applying NIST SP 800-53 security controls and applicable federal cybersecurity requirements within the RMF.
- Experience with vulnerability management tools and processes, including ACAS scanning and vulnerability tracking through VRAM.
- Professional experience reviewing, interpreting, and implementing STIGs and assessing system compliance with applicable security configuration requirements.
- Must have demonstrated professional experience using eMASS to develop, manage, update, and maintain RMF authorization documentation, security control assessments, compliance records, and supporting evidence.
- Must have demonstrated professional experience interpreting and applying applicable CCSRG requirements to assess system security controls, validate compliance, identify deficiencies, and support authorization activities.
- Experience evaluating applications, infrastructure, database, and API security, including familiarity with API-based security mechanisms and the OWASP framework for web application vulnerabilities.
- Strong understanding of AWS cloud environments, architecture, and security services, including experience assessing and implementing security controls within cloud-based environments.
- Experience conducting continuous monitoring, analyzing vulnerability scan results, preparing security status reports, and maintaining ongoing system security compliance.
- Experience using cybersecurity tools or scanners to evaluate system security posture, including scanning or reporting for web applications, databases, containers, or other system components.
- Experience assessing security control deficiencies, evaluating cybersecurity risks, documenting findings, developing remediation plans, and tracking corrective actions through resolution.
- Strong communication and organizational skills, with the ability to independently manage multiple RMF activities, coordinate with government customers and technical stakeholders, communicate security risks, and drive deliverables through completion.
- Experience with requirements analysis, security architecture and design, translating cybersecurity requirements into technical security controls, and coordinating implementation with engineering and technical teams.
- Experience gathering and creating security requirements, coordinating with stakeholders, facilitating meetings, and tracking security work through completion.
- Working knowledge of Agile and DevSecOps practices and cybersecurity, network, systems, and software engineering principles.
- Familiarity with Atlassian tools, such as Jira, Confluence, and/or Splunk.
Sparibis LLC is a professional solution firm that Clients rely on to access the best talent to drive their business success.
Sparibis is an equal opportunity employer that values diversity at all levels. All individuals, regardless of personal characteristics, are encouraged to apply.
See All 81 Remote Senior Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsRemote Senior Information Security Analyst Job Market
Who's Hiring
- Fisher Investments10
- Gainwell Technologies3
- Sumitomo Mitsui Trust Bank3
- Second Front Systems2
- Blue Shield of California2
Top Industries Hiring
- Insurance
- Retail
- Education
What Employers Look For
The qualifications that appear most often in remote senior information security analyst jobs.
- 5 or more years of hands-on information security or cybersecurity experience
- Active CISSP, CISM, or equivalent professional security certification
- Proficiency with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- Experience with vulnerability management platforms and penetration testing concepts
- Deep knowledge of at least one compliance framework such as NIST, ISO 27001, or SOC 2
- Bachelor's degree in computer science, information systems, or a related technical field
Tips for Your Remote Senior Information Security Analyst Job Search
Apply early to remote roles that fit
Migrate Mate lists remote senior information security analyst openings from across the U.S. in one place. Search roles that match your skills and seniority level, and apply directly before postings fill. Remote roles at distributed-first employers often close faster than on-site equivalents.
Show async incident documentation in your portfolio
Remote security teams depend on written records. Include sanitized incident reports, threat-hunt summaries, or runbooks you've authored. Hiring managers for distributed teams want proof you can communicate a security event clearly without a live debrief.
Get specific about your remote security toolstack
Name the SIEM platforms, EDR tools, cloud security posture management solutions, and ticketing systems you use daily. Remote employers shortlist candidates who can hit the ground running in their existing stack without in-person onboarding for core tooling.
Prepare for async technical screens and take-home assessments
Many distributed security teams replace live coding rounds with take-home threat scenarios or written case studies. Practice narrating your investigation logic in writing, not just verbally. Clear written reasoning matters as much as the technical conclusion.
Remote Senior Information Security Analyst Jobs: Frequently Asked Questions
How do I get a remote senior information security analyst job?
Target companies with distributed security teams, such as remote-first SaaS firms, fintech companies, and managed security service providers that operate without a central office. Remote employers screen for SIEM proficiency, cloud security expertise (AWS, Azure, or GCP), and the ability to document findings clearly in writing. Strong async communication, self-directed incident response, and demonstrated ability to collaborate across time zones without hand-holding give candidates a clear edge.
Which companies hire remote senior information security analysts?
Remote senior information security analyst roles are posted by Fisher Investments, Gainwell Technologies, and Sumitomo Mitsui Trust Bank and others right now, based on current remote listings on Migrate Mate as of November 2026. These include remote-first technology firms, distributed financial services companies, healthcare platforms, and government contractors that operate fully distributed security functions.
Can you get a remote senior information security analyst job with no experience?
Yes, but remote entry-level security roles are harder to land because employers expect you to investigate threats and escalate decisions without in-person oversight early on. Candidates can open doors by earning certifications like CompTIA Security+ or CySA+, contributing to open-source security projects, and building a home lab to demonstrate hands-on skills. Remote-first startups and managed security providers are most likely to give motivated entry-level candidates a shot.
Do you need a degree for remote senior information security analyst jobs?
Not always. Many remote employers value certifications like CISSP, CEH, or CISM alongside documented hands-on experience over a formal degree. What matters most is your ability to show real results: threat investigations you led, vulnerabilities you found and remediated, and security programs you improved. A strong portfolio of work and credible certifications can outweigh the absence of a bachelor's degree at many distributed-team employers.
Which industries hire the most remote senior information security analysts?
Most remote senior information security analyst openings sit in Insurance, Retail, and Education, per current remote listings on Migrate Mate as of November 2026. These sectors rely on distributed teams protecting cloud infrastructure, sensitive customer data, and regulated systems that require continuous remote monitoring and response.
See All 81 Remote Senior Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs