Senior Analyst, Information Security

Axsome Therapeutics is a biopharmaceutical company leading a new era in the treatment of central nervous system (CNS) conditions. We deliver scientific breakthroughs by identifying critical gaps in care and develop differentiated products with a focus on novel mechanisms of action that enable meaningful advancements in patient outcomes. Our industry-leading neuroscience portfolio includes FDA-approved treatments for major depressive disorder, excessive daytime sleepiness associated with narcolepsy and obstructive sleep apnea, and migraine, and multiple late-stage development programs addressing a broad range of serious neurological and psychiatric conditions that impact over 150 million people in the United States. Together, we are on a mission to solve some of the brain’s biggest problems so patients and their loved ones can flourish. For more information, please visit us at www.axsome.com and follow us on LinkedIn and X.

About This Role:

Axsome is seeking a Senior Information Security Analyst who will play a critical role in enhancing Axsome’s cybersecurity posture, focusing on daily InfoSec operations, awareness training, alerts monitoring, threat hunting, liaising with Managed Service Providers (MSP), incident response, and vulnerability management. This position requires a proactive and detail-oriented professional with a deep understanding of cybersecurity principles and practices. This role requires a commitment to staying current with emerging security trends and technologies.

This role is based at Axsome’s HQ in New York City with an on-site requirement of at least three days per week. We are unable to consider candidates who are looking for fully remote roles. 

Job Responsibilities and Duties include, but are not limited to, the following:

• Monitor security alerts and events from various sources, including MSP, SIEM systems, IDS/IPS, and other security toolsets
• Analyze and prioritize alerts to identify potential threats and vulnerabilities
• Investigate and respond to security incidents in a timely manner
• Develop and deliver comprehensive cybersecurity awareness training programs
• Create engaging InfoSec training materials and conduct regular trainings and evaluations to promote security best practices
• Assess the effectiveness of training programs and make improvements as needed
• Utilize advanced threat detection techniques and tools to uncover hidden threats and mitigate potential security threats
• Collaborate with team members to develop and implement threat hunting strategies, appropriate mitigations and security controls improvement
• Act as the point of contact for cybersecurity-related matters with Managed Service Providers (MSPs), ensure effectiv