Information Security Analyst, remote, full-time, paying up to $100,000 a year, open to candidates anywhere. The employer sits fully behind a distributed setup, so there's no expectation of relocating or checking in at a physical office at any point.
What this job actually is
Data and infrastructure don't protect themselves. Someone has to keep checking for weak spots, catch the moments a system starts behaving strangely, and put real safeguards in place before either one turns into a problem. That's this role, in plain terms, and it's less about reacting to one big crisis than steadily reducing how many small ones ever get the chance to happen. Most of the value shows up in what never becomes a headline.
- Keep watch over company systems, looking for signs that something's been compromised or is behaving abnormally
- Run regular assessments to find weak points before someone outside the company finds them first
- Put concrete protections in place, and improve existing ones, to keep both data and infrastructure reasonably safe
- Document findings clearly enough that someone outside the immediate investigation can understand the risk and act on it
A laptop that's been sitting unused for two weeks suddenly reconnects to the network and starts reaching out to an address nobody recognizes. Nine times out of ten it's a stale update service or a forgotten cron job. The tenth time is why this role exists. Telling those two situations apart quickly, without either dismissing real risk or escalating everything into a fire drill, is the actual skill underneath the job title.
Skills that matter here
Reading vulnerability scan output critically matters as much as running the scans themselves, since a report with forty flagged items is useless without someone who can sort the two that matter from the thirty-eight that don't. Day-to-day, the work draws on a working grasp of compliance standards, hands-on comfort with tuning firewalls and endpoint protection tools, solid risk assessment instincts, and the kind of steady security monitoring that catches a pattern before it becomes a headline. None of these get built overnight, and someone still sharpening their prioritization instincts is a normal fit as long as the underlying technical footing is in place. Endpoint protection tools, in particular, tend to generate a lot of noise on their own, so part of getting good at this work is learning which alerts from a given tool are usually worth a second look and which almost never are.
Education and experience
The role calls for a bachelor's degree, and computer science or a dedicated information security program both satisfy it equally. Naukri Mitra treats a foundational security certification as a strong signal too, even though it's not a hard substitute for the degree requirement. Two years spent actively watching production systems, catching weaknesses before they get exploited, is the baseline the role is built around. Someone right at that two-year mark, with solid fundamentals, is a realistic candidate here, not just someone with a decade behind them. A degree earned a while back doesn't count against anyone either, as long as the technical footing behind it has kept pace with how the field's actually changed since. What tends to matter more in practice is whether a candidate has stayed hands-on, through a job, a home lab, or something in between, rather than how many years sit on the calendar since graduation.
Pay and what comes with it
This position pays up to $100,000 a year and comes with a full benefits package built for full-time, remote work. Pay within that range depends mostly on how the interviews go and what a candidate brings in beyond the two-year minimum.
- Health insurance and paid time off
- Life and disability coverage built into the standard package
- Retirement plan matching, structured the same way as the rest of the company's full-time roles
- Reimbursement toward relevant security certifications
What the work is like week to week
Security work runs on an uneven rhythm. Some stretches are routine: scans come back clean, systems behave, nothing needs escalating. Then a finding shows up that doesn't fit an expected pattern, and the pace of the day changes fast. Handling that shift well matters more than any single certification on a resume. A quiet week and a chaotic one can sit right next to each other on the calendar, and neither one says much about how the next week will go.
Being remote changes how that escalation actually plays out. There's no one to tap on the shoulder to sanity-check a finding, so getting comfortable with writing up a clear, well-organized case for why something needs attention is part of doing this job properly. A vague message asking "does this look weird to anyone?" gets a much slower response than one that lays out exactly what was found and why it matters. That kind of clarity under time pressure is harder than it sounds, especially the first few times a finding proves real.
Compliance work also runs quietly in the background here. It's rarely the exciting part of the job, but audits and standards don't check themselves, and letting that slide tends to create bigger problems down the line than most people expect going in. A missed control today is usually cheap to fix. The same gap discovered during an actual audit six months later rarely is, and by then it's someone else's afternoon that gets disrupted along with yours.
Applying
Send a resume along with any certifications you currently hold. If you've got a specific example of a vulnerability you found and fixed, or a security improvement you pushed through end to end, include it. Concrete examples carry more weight here than a long list of tool names without context. A short paragraph describing how a past finding was resolved, from discovery through fix, is worth including, even if it feels less polished than a bullet-point summary. Applications are reviewed on a rolling basis, and there's no set closing date for this posting. Candidates who are still finishing a certification exam shouldn't wait for the results before reaching out.
