{"id":4214668,"url":"https://alion.io/job/rli-sr-information-security-analyst","title":"Sr. Information Security Analyst","company":{"id":1873282,"name":"RLI","domain":"rlicorp.com","url":"https://alion.io/company/rlicorp-com","size_band":"11-50","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Peoria, United States","Tempe, United States","Atlanta, United States","Chicago, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":96264,"max":137657,"currency":"USD","period":"year","gross":null,"usd_annual":137657},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"ISO 27001","optional":false},{"name":"Kubernetes","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PCI DSS","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-09-28T00:00:00Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-11-13T02:18:21Z","board_verified":true,"closed_at":null,"days_open":46,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":46},"description":"About Us \nWe’re not like other insurance companies. From our specialty products to our business model, our culture to our results - we’re different. Differentis who we are, and how we work, interact, deliver and succeed together. Creatinga different and better insurance experience doesn’t just happen. It takes focus and a shared passion for going beyond the expected to forge relationships and deliver care that makes a difference. This approach rises from and is supported by our talented, ethical and smart team of employee owners united around a single purpose: to work alongside our customers and partners when they need us, in unexpected ways, with exceptional results. Apply today to make a difference with us.\nRLI is a Glassdoor Best Places to Work company with a strong, successful background. For decades, our financial track record has been stellar - a testament to our culture and validation of our reputation as an excellent underwriting company.\nSenior Information Security Analyst\nPosition Purpose\nThe Senior Information Security Analyst is a senior technical member of the Information Security team responsible for improving RLI's security operations while driving application vulnerability management, and automation. The role combines hands-on security operations and incident response. The primary focus of this position is application vulnerability management and remediation. The role also requires strong security operations and incident response fundamentals, along with the ability to automate recurring work and collaborate effectively with software development teams.\nPrincipal Duties & Responsibilities\nApplication Security & Vulnerability Management\nLead application-focused vulnerability management and help technology teams move findings from identification through validated remediation.\nTranslate penetration test, application security, dependency, and vulnerability findings into clear, developer-actionable remediation guidance.\nPrioritize vulnerabilities using severity, exploitability, application criticality, data sensitivity, exposure, and business risk.\nBuild reusable remediation patterns, templates, examples, and technical guidance for recurring application vulnerabilities.\nAnalyze vulnerability trends to identify recurring root causes.\nPartner with development leadership and product teams to improve remediation expectations, time-to-fix, and fix-rate outcomes.\nValidate remediation and support documented risk acceptance when remediation is not feasible within required timelines.\nSupport penetration testing, security assessments, and technical risk assessments.\nAssist with internal and external audits, vulnerability assessments, penetration tests, and regulatory or compliance activities.\nSecurity Operations, SIEM, & Incident Response\nOperate and support SIEM and security monitoring capabilities, including event investigation, log analysis, alert tuning, dashboards, enrichment, and investigation workflows.\nMonitor, investigate, and respond to security events and incidents across endpoint, identity, network, cloud, and application environments.\nLead or participate in incident response activities based on incident scope and experience, including containment, recovery, analysis, and post-incident review.\nPerform independent technical investigation when automated conclusions are incomplete, uncertain, or incorrect.\nMonitor emerging threats, vulnerability intelligence, and attack techniques using current and/or Open-Source Intelligence capabilities.\nMaintain investigation playbooks and incident response procedures, and contribute to detection and monitoring improvements.\nUse automation to reduce repetitive, low-value case handling while preserving hands-on investigative and troubleshooting skills.\nPartner with internal teams and security service providers to coordinate response and remediation activities.\nMaintain security standards, procedures, technical documentation, and operational runbooks.\nServe as a senior technical resource to security and technology partners and share knowledge with other team members.\nAI, Automation & Scripting\nIdentify repetitive security activities that can be simplified or automated and help implement practical, maintainable solutions.\nUse automation, generative AI, large language models (LLMs), or AI-enabled security capabilities to assist with triage, investigation, documentation, vulnerability analysis, and remediation guidance.\nDevelop or maintain scripts, API integrations, orchestration, or workflow automation using Python, PowerShell, REST APIs, or comparable technologies.\nApply AI-assisted analysis to vulnerability and penetration-testing data to identify recurring themes, remediation patterns, and opportunities for improvement.\nEducation & Experience\nTypically requires a Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field preferred.\nTypically requires 5+ years of relevant information security experience or an equivalent combination of education and experience.\nDemonstrated experience in vulnerability management or application security, along with hands-on security operations or incident response experience.\nExperience working with software development teams. Experience using scripting, APIs, or other automation to improve security workflows.\nRelevant certifications such as CISSP, GIAC, CSSLP, OSCP, Microsoft security certifications, or equivalent are preferred.\nKnowledge, Skills & Competencies\nCore Capabilities\nStrong vulnerability management experience with the ability to prioritize findings and drive remediation across technical teams.\nWorking knowledge of application security and common vulnerability classes, including the OWASP Top 10.\nAbility to translate technical security findings into clear, actionable guidance for developers and technology teams.\nHands-on SIEM experience, including event investigation, log analysis, and alert review or tuning.\nDemonstrated incident response and technical investigation experience.\nExperience with GitLab, GitHub, Azure DevOps, or a comparable development platform, including security scanning workflows.\nAbility to script or automate using Python, PowerShell, APIs, or comparable technologies.\nAbility to work independently, prioritize competing security risks, and collaborate across security, infrastructure, cloud, and development teams.\nPreferred / Additional Experience\nPractical experience using generative AI/LLMs or AI-enabled security tools to improve analysis, automation, documentation, or vulnerability remediation.\nExperience with application security technologies such as SAST, DAST, SCA, secrets scanning, dependency scanning, or automated security testing.\nExperience with Microsoft Azure or other cloud environments and familiarity with cloud security concepts.\nFamiliarity with containers, Kubernetes, infrastructure-as-code, or related cloud-native security practices.\nExperience contributing to detection engineering, threat hunting, or advanced security monitoring activities.\nKnowledge of NIST, CIS, ISO 27001, SOX, PCI DSS, and related security or regulatory frameworks.\nCompensation Overview\nThe base salary range for the position is listed below. Please note that the base salary is only one component of our robust total rewards package at RLI. The salary offered will take into account a number of factors including, but not limited to, geographic location, experience, scope & responsibilities of the role, qualifications/credentials, talent availability & specialization, as well as business needs. The below range may be modified in the future.\nBase Pay Range\n$96,264.00 - $137,657.00Total Rewards\nAt RLI, we're all owners. We hire the best and the brightest employees and allow them to share in the company's success through our Total Rewards. With the Employee Stock Ownership plan at its core, the Total Rewards program includes all compensation, benefits and perks that come with being an RLI employee.\nFinancial Incentives\nAnnual bonus plans\n\nEmployee stock ownership plan (ESOP)\n\n401(k) - automatic 3% company contribution\n\nAnnual 401k and ESOP profit-sharing contributions (Up to 15% of eligible earnings)\n\nWork & Life\nPaid time off (PTO) and holidays\n\nPaid volunteer time off (VTO) to support our communities\n\nParental and family care leave\n\nFlexible & hybrid work arrangements\n\nFitness center discounts and free virtual fitness platform\n\nEmployee assistance program\n\nHealth & Wellness\nComprehensive medical, dental and vision benefits\n\nFlexible spending and health savings accounts\n\n2x base salary for group life and AD&D insurance\n\nVoluntary life, critical illness, & accident insurance for purchase\n\nShort-term and long-term disability benefits\n\nPersonal & Professional Growth\nRLI encourages its employees to pursue professional development work in insurance and job-related areas. We make a commitment to employees to provide educational opportunities that help them enhance their skills and further their career advancement. RLI fosters a true learning culture and encourages professional growth through insurance courses, in-house training and other educational programs. RLI covers the cost for most programs and employees typically earn a bonus upon successful completion of approved courses and certifications. Our personal and professional growth benefits include:\nTraining & certification opportunities\n\nTuition reimbursement\n\nEducation bonuses\n\nDiversity & Inclusion\nOur goal is to attract, develop and retain the best employee talent from diverse backgrounds while promoting an environment where all viewpoints are valued and individuals feel respected, are treated fairly, and have an opportunity to excel in their chosen careers. We actively support, and participate in, initiatives led by the American Property Casualty Insurance Association that aim to increase diversity in the insurance industry. Cultivating an exceptional and diverse workforce to deliver excellent customer service reinforces our culture and is a key to achieving superior business results.\nRLI is an equal opportunity employer and does not discriminate in hiring or employment on the basis of race, color, religion, national origin, citizenship, gender, marital status, sexual orientation, age, disability, veteran status, or any other characteristic protected by federal, state, or local law.","description_format":"text","description_chars":10352,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["401k plan","Hybrid work","Professional development"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","Professional Services","Property & Casualty Insurance"],"lifecycle":[{"event":"open","at":"2026-11-13T02:18:21Z"}],"visa":[],"liveness":{"score":20,"band":"cold","label":"Long shot","p_open":1,"p_active":0.452,"p_room":0.45,"age_days":46,"expected_fill_days":27,"reasons":["conf:1","win:tail"],"computed_at":"2026-11-13T04:10:54Z"},"pay":{"stated_usd_annual":137657,"is_top_pay":false},"html_url":"https://alion.io/job/rli-sr-information-security-analyst","json_url":"https://alion.io/job/rli-sr-information-security-analyst.json","meta":{"generated_at":"2026-11-13T04:10:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8890,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1873282},"rest":"https://alion.io/mcp/rest/get_company?id=1873282"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Frli-sr-information-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Frli-sr-information-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Frli-sr-information-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/rli-sr-information-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Frli-sr-information-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4214668}},{"tool":"search_jobs","arguments":{"company":"rlicorp.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4214668},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}