Job Description

About the RoleThe Information Security Team at Veho is seeking a highly motivated and detail-oriented Security Analyst to join our dynamic team. The ideal candidate will have a strong analytical mindset, excellent communication skills, and a passion for cybersecurity. This role is responsible for performing and evaluating vulnerability scanning, reporting detection results, maintaining scanning systems and procedures; and identifying and mitigating threats to the enterprise network, technical assets, applications, and enterprise users. This teammate will work independently with general supervision and exercise judgment within defined guidelines to take appropriate action. This role will report directly to the Sr. Director of Information Security.
Key Responsibilities:

Analyze network traffic, intrusion attempts, activity logs, and system alerts for trends, anomalies, and potential security breaches. Perform initial triage and analysis to identify and classify the type and severity of security events.
Conduct or coordinate vulnerability scans, and penetration tests to expose known and undocumented vulnerabilities in various information systems, document findings, and recommend risk mitigation strategies.
Execute basic incident response protocols, including containment, eradication, and recovery steps as per established playbooks.
Contribute to security compliance efforts such as ISO27001 certification, privacy and data security law compliance by providing the necessary capabilities and artifacts.
Assist with conducting risk assessments and developing risk mitigation strategies including working with development teams to integrate risk management practices into the software development lifecycle.
Review Security Researcher findings through the company’s Vulnerability Disclosure program and pursue remediation when issues are validated.
Maintain up-to-date knowledge of emerging threats and attack vectors

What you bring:

1-5 years experience
Bachelor's degree in computer science, information security, or a related field, or relevant work experience in lieu of a degree.

Working knowledge of:

- Log analysis and familiarity with security information and event management (SIEM) systems
- Networking and web-related protocols (e.g. TCP/IP, DNS, TLS, IPSEC, HTTP, HTTPS, routing protocols)
- Incident response procedures and best practices
- Common attack patterns and exploitation techniques
- Web application security, secure coding practices, and OWASP Top 10
- Security analysis techniques such as threat modeling and attack graphs
- GitHub operations (e.g., cloning, branching, merging, pull requests, issues)
- Common software development practices and procedures (version control, testing, patching, CI/CD)

Familiarity with:

- Cloud infrastructure (AWS, Google Cloud, Azure) along with best practices and security features
- Security tools such as endpoint detection and response (EDR) and vulnerability scanners
- Security frameworks such as ISO27001

Preferred Qualifications:

Security certifications (CISSP, GCIA, GCIH, GCFA, GCFE, etc.)
Ability to prioritize multiple tasks/initiatives at once and adjust on the fly
Comfortable with ambiguity and enjoy providing structure to solve problems
Self-motivated and comfortable in a remote environment
Experience with security automation
Experience in scripting (Bash, Python, etc.)

About Veho

Veho is a next-generation delivery platform, turning shipping from a cost center into a value driver.

By combining purpose-built technology, customer experience obsession, and a scalable delivery network, Veho enables brands to offer an Amazon-level delivery experience that improves their bottom line.

The industry-leading results speak for themselves: 99% on-time delivery, 4.9/5 customer satisfaction score, 71% fewer delivery-related refunds, and a 41% increase in customer lifetime value.

Now one of America's largest delivery platforms, Veho serves 105 million Americans across 44 markets–and growing. Learn why leading brands like Sephora, Lululemon, Saks, and Macy's trust Veho to drive a return on their shipping spend at shipveho.com.

We’re a team of builders, creatives, adventurers, and go-getters on a mission to revolutionize the world of package delivery by creating exceptional experiences for customers and drivers. Come join us!

Industry

Unknown

Company Size

501-1,000 employees

Headquarters

New York City, NY

Year Founded

2016

Website

shipveho.com

Social Media