Information Security Analyst

About the role

Rainforest Alliance is seeking an experienced Information Security Analyst to protect its digital assets, detect and respond to incidents, and continuously improve its security posture across cloud and endpoint environments.

Key responsibilities

• Participate in security incident response, from investigation to post‑incident analysis.
• Monitor alerts from SIEM, EDR, and cloud logs, and act on incidents promptly.
• Develop and maintain security documentation, runbooks, and incident response plans.
• Conduct vulnerability assessments, support penetration‑testing remediation, and manage CVE‑aligned remediation reporting.
• Administer Azure security services (Security Center, Defender, NSGs, Key Vault, Firewall) and ensure compliance of IaaS/PaaS deployments.
• Secure Entra ID (Azure AD) with Conditional Access, MFA, Identity Governance, and PIM, and monitor for suspicious activity.
• Manage Microsoft 365 security (Exchange, SharePoint, Teams) using Defender for Office365, DLP, and Purview compliance policies.
• Implement endpoint hardening standards for Windows, macOS, and Linux, and oversee patch management.
• Operate the XDR platform (CrowdStrike Falcon, migrating to Microsoft Defender XDR) and develop custom detections.

Required profile

• Minimum 3 years of hands‑on information security experience.
• Proven experience securing Microsoft cloud environments (Azure, Entra ID, Microsoft 365).
• Experience with endpoint hardening and security baselines.
• Hands‑on administration of CrowdStrike Falcon or similar XDR platforms.
• Familiarity with security frameworks such as NIST or ISO 27001.

Required skills

• Azure security services (Security Center, Defender for Cloud, NSGs, Key Vault, Firewall)
• Entra ID (Azure AD) – Conditional Access, MFA, Identity Governance, PIM
• Microsoft 365 security – Defender for Office365, DLP, Purview
• CrowdStrike Falcon (XDR) – detection development and incident response
• SIEM and EDR monitoring
• Endpoint hardening for Windows, macOS, Linux (GPO, MDM)

What we offer

• Global mission‑driven organization with a collaborative culture.
• Professional growth and career development opportunities.
• Flexible hybrid working environment and remote‑work flexibility.
• Supportive time‑off policy and wellbeing initiatives.