Senior Information Security Analyst II

Why join Freenome?

Freenome is a high-growth biotech company developing tests to detect cancer using a standard blood draw. To do this, Freenome uses a multiomics platform that combines tumor and non-tumor signals with machine learning to find cancer in its earliest, most-treatable stages. 

Cancer is relentless. This is why Freenome is building the clinical, economic, and operational evidence to drive cancer screening and save lives. Our first screening test is for colorectal cancer (CRC) and advanced adenomas, and it’s just the beginning. 

Founded in 2014, Freenome has ~400 employees and continues to grow to match the scope of our ambitions to provide access to better screening and earlier cancer detection.  

At Freenome, we aim to impact patients by empowering everyone to prevent, detect, and treat their disease. This, together with our high-performing culture of respect and cross-collaboration, is what motivates us to make every day count.

Become a Freenomer

Do you have what it takes to be a Freenomer? A “Freenomer” is a determined, mission-driven, results-oriented employee fueled by the opportunity to change the landscape of cancer and make a positive impact on patients’ lives. Freenomers bring their diverse experience, expertise, and personal perspective to solve problems and push to achieve what’s possible, one breakthrough at a time.

About this opportunity:

At Freenome, the Senior Information Security Analyst plays a key role in protecting the organization's information assets by implementing, maintaining and monitoring security related events and incidents. This role investigates, analyzes, and responds to cyber incidents within the Freenome's local and cloud networks, or enclaves and will provide expertise regarding collecting evidence and do forensic analysis. This role will also define and implement security controls, ensuring compliance with relevant regulations and standards, and providing expertise in securing cloud of office environments. This position requires a blend of technical security skills, compliance knowledge, and a proactive approach to identifying and mitigating risks. 

This position will report directly to the Director of Information Security. This role will be a Remote role. 

What you’ll do:

Security Operations:

• Implement, maintain, monitor and improve security systems (e.g., SIEM, IDS/IPS) to detect, alert and respond to security incidents.
• Conduct security investigations and perform root cause analysis.
• Ensure that incidents are correctly reported, documented, investigated and concluded in accordance with operational policies and procedures.
• Manage security events as part of security operations, responding to urgent alerts, which may include off-hours investigation activities.
• Manage and maintain security infrastructure (e.g., cloud firewalls, VPNs).
• Perform vulnerability assessments and penetration testing.
• Excellent knowledge of Endpoint protection.
• Provide technical security expertise and guidance to other teams.
• Evaluate and recommend new security technologies and solutions.
• Provide ideas and feedback to improve the overall SOC capabilities and maturity.
• Perform all other Information Security related duties as assigned and contribute to the success of the Information Security Team.
  

Compliance:

• Participate in internal and external security audits.
• Perform regular asset, account and access reviews.
• Assist in the development, maintenance, and implementation of security policies, standards, and procedures.
• Ensure compliance with relevant regulations and standards (e.g., HITRUST, NIST 800-53r5 and SOC 2 Type 2).
• Track and remediate compliance findings.
  

 Cloud Security:

• Design, implement, and maintain security controls for cloud environments.
• Collaborate with IT to ensure the security of Cloud services, including virtual machines, storage, networking, and databases.
• Conduct security assessments of cloud configurations and deployments.
• Develop and maintain cloud security best practices and guidelines.
• Stay up-to-date on security best practices and emerging threats 

Must haves:

• Bachelor's degree in Information Security, or a related field.