Information Security Analyst II (Remote)

Working at Covenant eyes is about something bigger than creating and selling software; it''s about creating a movement and changing culture. At the end of the day, you are contributing to saving a marriage, protecting a child''s innocence, strengthening a commitment to purity, and working to end sexual exploitation.Covenant Eyes is a 100% Employee Owned company and constantly growing. We''ve made ''s Fortune 5000 Fastest Growing Companies for 10 years running & 11 out of the last 12. This growth presents a number of opportunities for working in various technologies as well as career advancement. We offer highly competitive compensation and benefits packages that start day-one of employment. Health, Vision, and Dental Insurance optionsCompany paid life insuranceGenerous time off (including getting extra time off or pay for your birthday!) 401K with company matchingAs a company focused on restoring relationships we take our families seriously. We believe in hard work, but we believe in balance too. Our first jobs are to our families, and we know that work-life balance is critical. We embrace remote work and offer flexible work hours and PTO. The combination of competitive compensation, family atmosphere, low turnover, and a people-first culture make this an excellent place to work. We are proud to have been named 2 in Mid-Sized company category of Michigan Top Workplaces 2021 (according to Detroit Free Press) and our Founder and CEO, Ron DeHaas, was also mentioned as a top leader by the Detroit Free PressA Covenant Eyes Information Security Analyst is a technical, hands-on, high-visibility position that plans, coordinates and participates in activities related to the design, development, implementation, compliance, and ongoing support of enterprise security solutions. These solutions apply to both internal and external information systems, networks and applications.Design, configure, maintain, monitor and support security solutions for CEs high availability and geographically dispersed internal and external systems, applications and networks.Protect CE data and information assets against unauthorized access, modification, or destruction.Provide subject matter expertise on security best practices for application, database, and network development, design, and support.Research and advocate the latest technologies and solutions to support the security requirements of internal and external customers.Assess client needs against security concerns and resolve information security risk issues.Troubleshoot and correct issues.Train others on security awareness.Develop, write, and document IT security policies and standards.Work both independently and in cross functional teams.Acquire knowledge and become proficient in new security methods, concepts, and tools. Other duties may be assigned as neededCore SkillsAt least one information security certification, including but not limited to CEH, CISSP, GPEN, OSCE, OSCP, OSWE, GIAC familyPlanning and execution of IT security initiativesHigh-availability web application and website security best practices Firewall and intrusion preventionActive threat mitigation knowledgebase (MITRE ATT&CK)Linux (CentOS/Oracle Linux)Networking (BGP, firewall, routers, subnets, switches, VLANs, VPN)Shell programming (bash/ksh, Python, PowerShell)Bachelors degree or equivalent experiencePreferred SkillsExperience with cloud security (AWS and Azure preferred)Understanding of security capabilities within a software development organization (e.g. SCA, SAST, DAST, IAST, WAF, Encryption, Identity and Access Management, CI/CD Pipelining)Proficiency in a Linux environment and the common security toolsets (nmap, wireshark, burp proxy, kali)Ability to clearly articulate OWASP Top-10 vulnerabilities and their common mitigationsThreat Modeling mindset and threat modeling tooling backgroundExperience with SIEM and data logging toolsets (Splunk, Datadog, Sumo Logic, Graylog)Knowledge of Vulnerability Management Platforms optimizations strategies (Qualys, Tenable, Rapid7 etc...)Endpoint and container security solutions (Crowdstrike, Carbon Black, Aquasec, Prisma Cloud, EPP, EDR, DLP)NextGen Firewall Experience (Palo Alto, CheckPoint, Fortinet)Email security, simulated phishing attacks, and training (Knowbe4, Microsoft Threat Protection)Job ID: 2022-1170 Street: 1525 West King Street Telecommute: Yes

Created: 2025-09-06