VeSync

VeSync

Senior Information Security Analyst

Tustin, CA · Senior

Sponsorship not specifiedDetected 55 days ago
AWSGCPAzureCloud PlatformsCybersecurityNetwork SecuritySIEMIncident ResponseComplianceMentoring

About the role

  • We are seeking a highly skilled and strategic Senior Information Security Analyst to spearhead the protection of our enterprise data, systems, and hybrid infrastructure (On-Premise and Multi-Cloud).

Responsibilities

  • Develop and implement comprehensive information security plans to safeguard the security of company data and assets, including on-premise and cloud environments.
  • Thoroughly analyze the company's business processes and data characteristics, and combine industry best practices and frameworks such as NIST Cybersecurity Framework (CSF)to create customized security plans, ensuring the confidentiality, integrity, and availability of information assets in various scenarios.
  • Maintain and enhance security measures for systems, networks, and public cloud platforms (e.g., AWS, Azure, GCP) to prevent potential threats.
  • Build an efficient security monitoring platform, use intelligent analysis technology to promptly capture abnormal behaviors, activate emergency response plans, and minimize the impact of security incidents.
  • Develop and deliver security training programs to enhance employees' security awareness and encourage their adherence to best practices.
  • Implement a strict access control mechanism, Conduct regular audits of user permissions, and use reliable identity management systems to prevent unauthorized access and ensure the security of company resources.
  • Conduct comprehensive risk assessments, identify vulnerabilities, and implement effective mitigation strategies.
  • Create security policies and ensure that the company's operations are in strict compliance with industry standards (e.g., ISO 27001, NIST, GDPR) and regulatory requirements.
  • Design targeted training courses according to the needs of different positions and use diverse training methods to ensure that employees have a deep understanding of and implement security requirements.

Requirements

  • Candidates must be bilingual in Mandarin (read, write, speak).
  • Bachelor's degree in Information Security, Computer Science, or a related field.
  • 8+ years of experience in information security, with a strong background in security event analysis, incident response, vulnerability management, and risk assessment.
  • Hands-on experience with public cloud security (e.g., AWS, Azure, GCP), including cloud-native security tools and best practices.
  • Familiarity with security regulatory compliance standards and frameworks such as NIST CSF, ISO 27001, and CIS.
  • Experience with OneTrust, Drata or similiar tools
  • Knowledge of network security principles, intrusion detection/prevention systems (IDS/IPS), firewalls, and endpoint protection.
  • Strong analytical and problem - solving skills, with the ability to quickly identify and mitigate security threats.

Skills

  • Familiar with security scorecards, SIEM tools and dashboards (Splunk, QRadar, Rapid7, Wazhu)
  • System, Network and Cloud Security

Compensation

  • Accident Insurance
  • Travel Assistance Program
  • Employee Assistance Program (EAP)
  • Fully stocked kitchen

Benefits

  • 100% covered Medical/Dental/Vision insurance for employee AND spouse + dependents!
  • 401K with 4% employer match (eligible after 90 days of employment) and immediate 100% vesting
  • Generous PTO policy + paid holidays
  • Life Insurance
  • Disability Insurance
  • Critical Illness Coverage
  • Healthcare FSA
  • Dependent Care FSA

Company info

  • VeSync is a portfolio company with brands that cover different categories of health & wellness products.
  • We wouldn't be surprised if you have one of our Levoit air purifiers in your living room or a COSORI air fryer whipping up healthy and delicious meals for you every night.
  • We're a young and energetic company, we've had tremendous success, and we are constantly growing our team.
  • As we garner more industry attention - just check out our accomplishments and awards by CES Innovation, iF Design, IGA, and Red Dot - we also need driven and talented people to join our team.
  • That brings us to you, and what you'll be joining.
  • Our teams are smart and diligent and take ownership of their work - they're confident in their work but know how to collaborate with open ears and a spirit of learning.
  • If you're down-to-earth, approachable, and easy to strike up a conversation with, this may be a great fit for you.
  • Check out our brands:
  • levoit.com | cosori.com | etekcity.com | pawsync.com
  • The Opportunity:
  • In this role, you will balance technical execution with strategic planning-developing comprehensive security plans, establishing robust compliance frameworks, and engineering real-time monitoring solutions.
  • As a senior member of the team, you will act as a defender, a strategist, and a mentor, utilizing advanced technologies to mitigate risk, drive security awareness, and foster a culture of continuous improvement.

This listing is sourced directly from VeSync's careers page and normalized into a canonical job model.