{"id":1268300,"url":"https://alion.io/job/bloom-credit-it-information-security-analyst-ii","title":"IT / Information Security Analyst II","company":{"id":2086253,"name":"Bloom Credit","domain":"bloomcredit.io","url":"https://alion.io/company/bloomcredit","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"inferred_company_offices","remote_working_hours":null,"hiring_geo_confidence":"inferred","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":73000,"max_usd":159000,"period":"year","method":"global_role_seniority_cell","sample_n":854},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Crowdstrike","optional":false},{"name":"Datadog","optional":false},{"name":"DLP","optional":false},{"name":"Google Workspace","optional":false},{"name":"Least Privilege","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-08-22T14:16:42Z","employer_posted_date":"2026-08-22","last_verified_at":"2026-11-05T15:35:05Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"IT / Information Security Analyst II \nAbout the role\nBloom Credit is hiring an IT / Information Security Analyst II to own day-to-day IT operations and hands-on security work across a fully remote Mac fleet. This is a combined role: roughly 50/50 IT and IS in theory, with the mix shifting by project and business need.\nYou will work with strong support from the Head of IT/IS and partner across the entire organization-engineering, compliance, product, people ops, and other functions-as identity, devices, access, and security touch every team. You operate with high autonomy in a remote environment.\nWe maintain SOC 2 and PCI DSS (self-attested) obligations. Experience supporting audits and evidence collection is valued.\nWhat you'll own (Analyst II)\nIT operations\nEndpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)\nIdentity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner-mover-leaver flows\nGoogle Workspace administration (mail, groups, Drive, Meet) and related automation where useful\nHelpdesk / end-user support: clear triage, resolution, and documentation\nAsset lifecycle coordination (procurement, shipping, disposition) with existing tooling\nPrefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented\nInformation security\nCrowdStrike EDR health, detections, containment, and response coordination\nDLP controls and data-handling practices in daily ops, including policy tuning and exception handling\nSIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)\nSecurity hygiene: least privilege, access reviews, device posture, exception handling\nSupport SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical\nZero Trust mindset preferred (identity-centric access, device trust, least privilege)-not required if you learn fast in this model\nWhat you'll own (Analyst II)\nIT operations\nEndpoint lifecycle for a remote Mac fleet (provisioning, configuration, support, offboarding)\nIdentity and access: JumpCloud directory / IdP / MDM, SSO app lifecycle, joiner-mover-leaver flows\nGoogle Workspace administration (mail, groups, Drive, Meet) and related automation where useful\nHelpdesk / end-user support: clear triage, resolution, and documentation\nAsset lifecycle coordination (procurement, shipping, disposition) with existing tooling\nPrefer native integrations and scripted automation over repetitive console click-ops; keep manual break-glass and validation paths documented\nInformation security\nCrowdStrike EDR health, detections, containment, and response coordination\nDLP controls and data-handling practices in daily ops, including policy tuning and exception handling\nSIEM / security signal work in Datadog (alerting, investigation support, tuning with stakeholders)\nSecurity hygiene: least privilege, access reviews, device posture, exception handling\nSupport SOC 2 and PCI evidence gathering with Compliance; keep controls operational, not theoretical\nZero Trust mindset preferred (identity-centric access, device trust, least privilege)-not required if you learn fast in this model\nEducation and credentials\nNo single path is required. Degrees, certifications, and on-the-job experience are weighed equally.\nCollege - Associate's or bachelor's in IT, cybersecurity, CS, or related-or equivalent practical experience\nCertifications - 1-2 relevant certs (e.g. Security+, Google Workspace Admin, JumpCloud, CrowdStrike, CySA+, GSEC) or equivalent demonstrated depth\nOn-the-job - ~4-6 years with ownership beyond ticket-only work; can run identity/endpoint/security ops with light oversight\nHow we work\nFully remote; no traditional office network-access is identity- and device-centric\nPrefer native vendor integrations, then maintained scripts/automation, then console click-ops when that is the right business case\nHigh-impact actions require clear scope, blast radius, and rollback thinking; Head of IT/IS approves before execution\nHead of IT/IS available for support, escalation, and prioritization-not day-to-day micromanagement\nSoft skills that matter here\nClear, concise written communication across the org\nCalm triage under interruption (helpdesk + security signals)\nOwnership of outcomes without waiting to be told\nCollaborative posture-enable teams, don't gatekeep for its own sake","description_format":"text","description_chars":4432,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Credit Bureaus & Rating Agencies","Consumer Loans & Pawnshops"],"lifecycle":[{"event":"open","at":"2026-09-25T23:00:04Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.4,"p_room":0.28,"age_days":74,"expected_fill_days":35,"reasons":["conf:0","win:tail","crowd:"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/bloom-credit-it-information-security-analyst-ii","json_url":"https://alion.io/job/bloom-credit-it-information-security-analyst-ii.json","meta":{"generated_at":"2026-11-05T19:45:20Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26534,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2086253},"rest":"https://alion.io/mcp/rest/get_company?id=2086253"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbloom-credit-it-information-security-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbloom-credit-it-information-security-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbloom-credit-it-information-security-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/bloom-credit-it-information-security-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbloom-credit-it-information-security-analyst-ii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1268300}},{"tool":"search_jobs","arguments":{"company":"bloomcredit.io","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1268300},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}