Cybersecurity Analyst

BUMBLE BEE FOODS, LLC•San Diego, CA

1h•$117,000 - $130,000•Onsite

About The Position

The Cybersecurity Analyst leads Bumble Bee’s day-to-day cybersecurity efforts, serving as the company’s dedicated point of contact for identifying, investigating, and neutralizing cyber threats across the enterprise. Reporting to the Lead Systems Engineer within Information Technology, this role brings focused ownership to a function currently shared across the IT team. In this role, you'll investigate and respond to security incidents, hunt for threats before they escalate, and tune detection tooling to reduce noise and close coverage gaps. Including building procedures, playbooks, and exercises that keep the business resilient. Success in this role requires a blend of hands-on technical operations experience and deep cybersecurity expertise. In addition to cybersecurity expertise, the ideal candidate has experience in compliance, risk management, cloud security, and AI-driven technologies. This position partners cross-functionally to strengthen security posture and ensure regulatory compliance. The Analyst also serves as a liaison to vet external third parties for cyber risk, helping protect the company from lost time, revenue, and reputational harm.

Requirements

4+ years of experience in cybersecurity or information security roles.
Experience with incident response, threat detection, and log correlation.
Proficiency with SIEM platforms and detection engineering.
Experience with vulnerability management tools (e.g., Tenable, Qualys).
Working knowledge of Windows and Linux operating systems, command-line tools, and system architecture.
Experience with Security Awareness Training platforms.
Understanding of the MITRE ATT&CK framework.
Understanding of networking fundamentals and protocols (TCP/IP, UDP, DNS).
Experience with governance and endpoint detection and response (EDR) platforms (e.g., Microsoft Defender, Purview, Sophos, CrowdStrike).
Experience using secure API tools for automation and orchestration.
Knowledge of industry frameworks and standards (e.g., NIST, SOC, ISO, CIS).
Tabletop exercise and penetration testing experience.
Understanding data protection, disaster recovery, and business continuity planning.

Nice To Haves

Relevant certifications (e.g., ISC2) preferred.

Responsibilities

Further develop and mature the security program - Identify, analyze, monitor and manage security events and incidents, owning the full incident response lifecycle.
Collaborate with IT to prioritize, validate, and track patching and vulnerability remediation.
Collaborate with IT engineers to implement, and optimize SIEM platforms, and fine-tune existing threat detection tools to strengthen overall security posture.
Conduct security risk assessments for existing and prospective platforms and vendors, including AI and SaaS solutions.
Perform ongoing account auditing and access control reviews, to maintain compliance and reduce risk.
Involved in the development and review of enterprise IT policies.
Monitor public threat intelligence and vulnerability CVE disclosures to assess business impact and coordinate remediation efforts.
Enhance existing cybersecurity tools to strengthen overall organizational security posture.
Build, update, and maintain incident response playbooks, procedures, and technical documentation.
Collaborate with cross-functional teams to align business operations with acceptable use standards, ensuring organizational goals are met while enabling the secure adoption of AI-driven technologies.
Promote cybersecurity awareness through tabletop exercises, phishing prevention, and ongoing user training initiatives.
Advise on and assess third-party due diligence for security risk to the Bumble Bee environment, including third-party risk assessments, review of contracts for protections, and third-party training where required (e.g., offshore consultants).
Proven ability to collaborate across business units and influence security best practices.
Other duties as assigned.