Apply

Ready to go for it?

AI Apply speeds things up—apply directly if you prefer.

FREE ACCESS
5,000–10,000 jobs/day
Scoutfield Logo

See all jobs on Scoutfield

Search thousands of fresh jobs every day.

Discover
  • Fresh listings
  • Fast filters
  • No subscription required
Create a free account and start exploring right away.
Graphite

Security & Compliance Analyst

Graphite

. Monitor and triage security alerts, and escalate real issues .

Posted 10/27/2026full-timeRemote • Colombia, MexicoMid-LevelSeniorWebsite

Core Competencies

Role fit
Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security operations, incident response, and vulnerability management, with a strong focus on compliance frameworks such as SOC 2 and GDPR. Proficient in maintaining technical security controls and securing cloud infrastructure on AWS and GCP.

Highest-signal resume keywords
Incident Response CoordinationVulnerability ManagementSOC 2 ComplianceCloud Security on AWS and GCPEncryption and Key Management

ATS Keywords

Tailor your resume
Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills
Log AnalysisVulnerability ManagementIncident ResponseSecurity Controls MaintenanceVulnerability ScanningBackup RestorationAccess ReviewsTriage Security AlertsPost-Mortem AnalysisCloud Infrastructure Security
Soft Skills
Excellent Written CommunicationExcellent Verbal Communication
Tools & Technologies
VantaAWSGCP
Certifications & Qualifications
Security+CySA+CISSPAssociate of ISC2
Industry Keywords
GDPRSOC 2ComplianceSecurity AdvisoriesIncident TriageTechnical Security Controls

Tech Stack

Tools & technologies
AWSCloudCyber SecurityGoogle Cloud Platform

About the role

Key responsibilities & impact
  • Monitor and triage security alerts, and escalate real issues
  • Coordinate incident response from triage through post-mortem
  • Run tabletop exercises
  • Triage security advisories and vulnerabilities
  • Track patching against remediation SLAs
  • Maintain technical security controls, including encryption, key and certificate management, and secrets rotation
  • Review cloud and infrastructure configurations against security policies and follow up on fixes
  • Run vulnerability scans, backup restores and access reviews
  • Collect SOC 2 evidence, including for failing Vanta tests
  • Support vendor security reviews, client security questionnaires and GDPR work
  • Report on alerts, vulnerabilities and open compliance items
  • Work with Engineering, IT and Legal; report to the Director of Legal

Requirements

What you’ll need
  • 3 to 5 years in a security operations, cybersecurity or security engineering role
  • Working knowledge of SOC 2 and GDPR and audit processes
  • Hands-on experience with log analysis, vulnerability management and incident response, including post-mortems
  • Working knowledge of encryption and key and certificate management
  • Experience securing cloud infrastructure on AWS and GCP
  • Excellent written and verbal English communication skills
  • Experience with Vanta or a similar compliance platform is nice to have
  • Security+, CySA+ or CISSP (or Associate of ISC2) certification is nice to have

Benefits

Comp & perks
  • Iterative, empowering processes
  • Full ownership and agency to drive projects forward
  • Flexible work environment in a distributed team
  • Competitive pay
  • Flexible PTO
  • Quality healthcare coverage
  • Education opportunities