Sr. Security Analyst Hybrid in Horsham, P

RELX•Horsham, PA

10d•$71,600 - $119,400•Hybrid

About The Position

The Infrastructure Compliance Analyst III – Infrastructure Security serves as a security advisor to Infrastructure Engineering, partnering with Cloud Engineering, Platform Engineering, Site Reliability Engineering (SRE), and Systems Engineering teams to design, implement, and continuously improve secure infrastructure services. This role bridges the gap between Security, Governance Risk & Compliance (GRC), and Infrastructure by translating security requirements into practical engineering solutions that enable the business while reducing organizational risk. Conditions of Employment: You must be a U.S. citizen to apply for this position. You must successfully pass a background investigation and achieve Public Trust security clearance. Must be located near the Horsham, PA location for a Hybrid onsite schedule

Requirements

Comfortable using AI tools (e.g., Copilot, Claude) to accelerate compliance documentation and evidence review, with sound judgment on appropriate use given data sensitivity and regulatory requirements
Bachelor’s degree in Information Security, Computer Science, Information Technology, Engineering, or equivalent professional experience.
7+ years of experience in infrastructure engineering, cybersecurity, cloud engineering, or enterprise systems administration.
Strong knowledge of Windows Server, Linux, Active Directory, Microsoft Entra ID, networking, virtualization, cloud infrastructure, and enterprise platforms.
Experience interpreting and implementing security frameworks such as NIST SP 800-53, NIST Cybersecurity Framework (CSF), DISA STIGs, ISO/IEC 27001, and FedRAMP.
Experience with vulnerability management platforms such as Qualys, Tenable, or Rapid7 and enterprise endpoint management platforms such as Tanium or Microsoft Intune.
Experience supporting cloud environments including Microsoft Azure and AWS.
Strong analytical skills with the ability to interpret large datasets and transform technical information into meaningful recommendations.
Excellent communication skills with the ability to explain complex security concepts to technical and non-technical audiences.

Responsibilities

Partner with engineering teams throughout the design, implementation, and operational lifecycle to ensure infrastructure solutions are secure, scalable, resilient, and compliant.
Interpret and translate security frameworks, regulatory requirements, and organizational security policies into actionable technical guidance for infrastructure engineers.
Provide subject matter expertise on secure architecture, operating system hardening, identity management, cloud security, network security, encryption, certificate management, and infrastructure best practices.
Work closely with Governance, Risk & Compliance (GRC) and Information Security teams to understand compliance objectives, security findings, audit requirements, and risk management priorities while communicating those requirements effectively to infrastructure teams.
Guide infrastructure teams through vulnerability remediation efforts by helping prioritize findings, identifying practical remediation strategies, evaluating operational impacts, and validating successful remediation.
Develop secure configuration standards using industry best practices including DISA STIGs, vendor hardening guidance, and organizational security baselines.
Assist engineering teams in implementing and maintaining compliant configurations across Windows, Linux, virtualization platforms, cloud services, identity platforms, storage systems, and enterprise infrastructure.
Aggregate, analyze, and interpret vulnerability, compliance, operational, and infrastructure data to identify trends, measure organizational risk, and recommend strategic improvements to the company’s security posture.
Develop executive dashboards, metrics, and reporting that communicate infrastructure security health, remediation progress, compliance status, risk trends, and operational maturity.
Collaborate with engineering leadership to prioritize security initiatives based on business risk, operational impact, and strategic objectives.
Identify opportunities to automate security validation, compliance reporting, configuration management, vulnerability remediation, and infrastructure governance using modern engineering practices.
Evaluate emerging technologies, security controls, and infrastructure practices to continuously modernize the organization’s security capabilities.
Promote a “Security by Design” culture by embedding security considerations into infrastructure planning, engineering standards, operational processes, and technology roadmaps.
Provide technical leadership during infrastructure modernization initiatives including cloud migrations, platform upgrades, operating system lifecycle management, and enterprise technology transformations.
Participate in security architecture reviews, infrastructure design discussions, change management activities, and technical governance boards.
Develop technical documentation, security standards, implementation guides, engineering playbooks, and operational procedures that improve consistency across infrastructure teams.
Advise engineers on security best practices, secure engineering principles, and modern infrastructure security techniques.
Continuously evaluate Reed Tech's infrastructure security posture and recommend long-term improvements.
Advocate for modern security practices including Zero Trust, Infrastructure as Code, Policy as Code, Continuous Compliance, and Secure Configuration Management.
Champion automation-first security practices that reduce manual effort while improving consistency and compliance.