Protects information systems, data, and operations by assessing security risks, vulnerabilities, and control gaps; monitoring alerts and access activity; investigating security incidents; implementing safeguards; reviewing access controls; maintaining risk, incident, and compliance records; tracking remediation; and developing security policies, procedures, standards, and awareness materials.
Chimes | Information Security Analyst | Remote Position
We're looking for an Information Security Analyst to protect information systems, data, and operations for Chimes.
Location: This role is remote within the USA. You must be legally authorized to work in the US. Chimes does not provide visa sponsorship.
Individuals participating in the AbilityOne Program are encouraged to apply. AbilityOne participation is not required.
Chimes will ensure individuals with disabilities receive reasonable accommodation to participate in the job application or interview process, perform essential job functions, and receive other benefits and privileges of employment.
What you'll do
- Assess systems, applications, data, and operating practices for security risks, vulnerabilities, and control gaps; support assessments, testing, and remediation tracking.
- Monitor security alerts, access activity, and reported concerns, and investigate suspected policy violations, unauthorized access, malware, and other events under approved procedures.
- Recommend and help implement safeguards, including access controls, encryption, endpoint protection, firewalls, and secure configurations, and review user and system access against least-privilege and separation-of-duties requirements.
- Maintain security plans, risk and incident records, assessment results, control evidence, and corrective-action documentation.
- Develop and update security policies, procedures, standards, and awareness materials, and advise users and technical teams on secure practices.
What you bring
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or a related field preferred.
- Security+, CISSP, CEH, or a comparable role-appropriate security certification preferred.
- Equivalent combinations of related education, training, and experience may be considered.
- Three (3) or more years in information security, cybersecurity operations, risk assessment, compliance, or related work.
- Experience evaluating security controls, documenting findings, and tracking remediation.
- Experience with access control, endpoint security, vulnerability management, incident response, or security monitoring.
- Experience in government, regulated, or security-conscious environments preferred.
Degrees and certifications in computer science, data science, or related fields are preferred, but equivalent education and experience are welcome.
Compensation:
This is a remote position open to candidates in the United States. Base salary is determined by the candidate’s work location, along with skills, experience, and internal equity. The ranges below reflect the minimum and maximum base pay for each geographic tier:
- Tier 1 (Washington DC, Baltimore, MD, and Northern Virginia): $59.79 - $78.77 per hour
- Tier 2 (Dallas, TX, New Castle, DE, and Los Angeles, CA): $56.09 - $70.66 per hour
- Tier 3 (Orlando, FL): $56.01 - $68.45 per hour
Why You’ll Love Working Here:
- Medical plan starting at $13.80/mo. The $6.90 is per pay period for the Minimum Value Health Plan.
- Employer-paid Life Insurance + AD&D
- Employer-provided Long-Term Disability coverage for financial protection
- 403(b) retirement plan with employer match
- 10 paid holidays + generous PTO
- Tickets at Work
- Employee referral bonuses and recognition programs
- Clear pathways for growth and advancement
Ready to Make Your Impact?
✨ Join a team where your work truly matters—every single day.
Apply today: https://chimes.org/Careers
Follow Us: Facebook | Instagram | LinkedIn
Equal Opportunity Employer/Protected Veterans/Individuals with DisabilitiesThis employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.
Similar Jobs
Other
Administers enterprise security infrastructure, investigates and responds to security alerts and incidents, performs threat hunting, maintains security asset inventories, documents procedures, and coordinates resolution across internal and external teams. The role requires at least three years of information security experience and hands-on operation of multiple security technologies, including protections, filtering, proxies, antivirus, threat hunting, or log investigation tools.
Top Skills:
AntivirusData Loss Prevention (Dlp)Dns-Based ProtectionsEmail Filtering And SecurityEndpoint Detection And Response (Edr)Intrusion Prevention Systems (Ips)Log Review And InvestigationExcelMicrosoft PowerpointMicrosoft VisioMicrosoft WordSecurity StandardsSystem HardeningThreat HuntingVulnerability Scanning And ManagementWeb Proxies
Other
Monitors and investigates security alerts, threats, vulnerabilities, cloud misconfigurations, endpoint activity, and incidents. Supports incident response, CrowdStrike Falcon and Wiz administration, vulnerability remediation, access reviews, compliance activities, risk assessments, and security awareness initiatives. Collaborates with IT, cloud, infrastructure, application, and business teams to improve enterprise security posture and validate remediation efforts.
Top Skills:
Active DirectoryAWSAzureCehCis ControlsCisspComptia Cysa+Comptia Security+Crowdstrike FalconDnsEdrFirewallsGcihGCPGsecIso 27001LinuxMicrosoft DefenderMicrosoft Entra IdNist Cybersecurity FrameworkSIEMTcp/IpVpnWindowsWiz
Insurance • Real Estate
Supports information security awareness, risk assessments, compliance requirements, security documentation, reporting, technology evaluations, and project implementation. Analyzes security risks related to new technologies, researches solutions, resolves security issues across platforms, and advises business and information systems teams. Requires at least three years of information security experience and hands-on knowledge of networking, intrusion detection, VPN, PKI, firewalls, identity management, and encryption.
Top Skills:
Check Point FirewallsCiscoEncryptionIdentity ManagementIntrusion DetectionNacNetworkingPix FirewallsPkiVpn
What you need to know about the Boston Tech Scene
Boston is a powerhouse for technology innovation thanks to world-class research universities like MIT and Harvard and a robust pipeline of venture capital investment. Host to the first telephone call and one of the first general-purpose computers ever put into use, Boston is now a hub for biotechnology, robotics and artificial intelligence — though it’s also home to several B2B software giants. So it’s no surprise that the city consistently ranks among the greatest startup ecosystems in the world.
Key Facts About Boston Tech
- Number of Tech Workers: 269,000; 9.4% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Thermo Fisher Scientific, Toast, Klaviyo, HubSpot, DraftKings
- Key Industries: Artificial intelligence, biotechnology, robotics, software, aerospace
- Funding Landscape: $15.7 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Summit Partners, Volition Capital, Bain Capital Ventures, MassVentures, Highland Capital Partners
- Research Centers and Universities: MIT, Harvard University, Boston College, Tufts University, Boston University, Northeastern University, Smithsonian Astrophysical Observatory, National Bureau of Economic Research, Broad Institute, Lowell Center for Space Science & Technology, National Emerging Infectious Diseases Laboratories
