Job Title: Cybersecurity &amp; Compliance Analyst Location: Remote (US-only)   About InMarket Since 2010, InMarket has been the leader in 360-degree consumer intelligence and real-time activation for thousands of today’s top brands. Through InMarkets data-driven marketing platform, brands can build targeted audiences, activate media in real time, and measure success in driving return on ad spend. InMarkets proprietary Moments offering outperforms traditional mobile advertising by 6x.* Our LCI attribution platform, which won the MarTech Breakthrough Award for Best Advertising Measurement Platform, was validated by Forrester to drive an average of $40 ROAS for our clients.  *Source: Wordstream US Google Display Benchmarks for Mobile Media About the Role InMarket is building a lean, AI + MDR-first cybersecurity program designed to protect high-velocity, cloud-native mobile advertising platform without stifling innovation. We are seeking a Cybersecurity &amp; Compliance Analyst with a strong incident response background and a sharp eye for compliance. This role requires a hands-on security operator who can investigate and contain threats in GCP/AWS, validate MDR escalations, identify vulnerabilities before they become incidents, and keep the organization continuously audit-ready (SOC 2, ISO 27001). You’ll be a technical partner to engineering teams while also serving as a compliance and legal liaison, ensuring security requirements are consistently met across development, operations, and customer engagements. Your Daily Impact as a Cybersecurity &amp; Compliance Analyst Cloud Security &amp; Threat Detection <ul> <li>Partner with GCP (primary) and AWS engineering teams to design and enforce secure configurations, IAM models, and network controls.</li> <li>Continuously monitor cloud environments for misconfigurations, anomalous activity, and vulnerabilities using MDR/AI platforms.</li> <li>Analyze logs, threat intel feeds, and detection data to proactively identify attacker technique (MITRE ATT&amp;CK alignment).</li> <li>Provide technical guidance on hardening, segmentation, encryption, and workload isolation.</li> </ul> Incident Responses &amp; Threat Management <ul> <li>Validate, investigate, and triage escalated alerts from MDR/MSSP and AI detection systems.</li> <li>Lead initial incident response: log analysis, containment, root cause identification, and coordination with engineering teams.</li> <li>Escalate to external IR retainers or cyber insurance partners when needed, ensuring seamless handoff.</li> <li>Maintain and refine playbooks for cloud-centric incident response scenarios (compromised IAM, data exfil, API abuse).</li> <li>Track false positives and escalation trends; recommend improvements to detection logic and automation.</li> </ul> Compliance &amp; Continuous Audit Readiness <ul> <li>Own evidence collection and control validation for SOC 2 Type II and ISO 27001.</li> <li>Map GCP security controls against compliance frameworks to ensure ongoing adherence.</li> <li>Partner with Legal on GDPR/CCPA and customer data privacy considerations.</li> <li>Maintain audit-ready repositories; every control must be defensible at any time.</li> </ul> Legal &amp; Client Security Requests <ul> <li>Complete client security questionnaires, RFP responses, and due diligence requests with accuracy and speed.</li> <li>Ensure responses align with InMarket’s policies, risk appetite, and compliance posture.</li> <li>Maintain a centralized tracker of all legal/security requests, deadlines, and owners.</li> <li>Collaborate with Legal for review and VP InfoSec for final approval before delivery.</li> </ul> Risk &amp; Assurance <ul> <li>Manage vendor security assessments and support third-party risk reviews.</li> <li>Oversee penetration testing engagements, validate findings, and track remediation to closure.</li> <li>Produce regular reporting on threat landscape, vulnerabilities, and cloud security posture.</li> </ul> Governance &amp; Communication <ul> <li>Deliver weekly reports covering incidents, escalations, vulnerabilities, compliance evidence, and legal request status.</li> <li>Communicate findings and risks clearly to both technical teams and the VP of Information Security.</li> <li>Serve as a bridge between InfoSec and platform teams, balancing innovation with security and compliance.</li> </ul> Your Experience and Expertise <ul> <li>5+ years in cybersecurity with proven cloud security and incident response experience.</li> <li>Prior exposure to MDR/MSSP workflows and escalation processes.</li> <li>Track record of managing compliance (SOC 2, ISO 27001) in a cloud-native SaaS company.</li> <li>Strong GCP security expertise (IAM, VPC Service Controls, Cloud Logging/Monitoring, workload identity, org policies).</li> <li>Familiarity with AWS security best practices.</li> <li>General understanding of coding practices.</li> <li>Proficiency in threat detection, log analysis, and response workflows in cloud environments.</li> <li>Experience with penetration testing oversight and vulnerability management tools.</li> <li>Understanding of MITRE ATT&amp;CK, cloud attack vectors, and incident response frameworks (NIST, SANS).</li> <li>Strong communicator capable of engaging engineers, auditors, and legal counsel with equal clarity.</li> <li>Astute at balancing operation speed with compliance rigor.</li> <li>Highly accountable, organized, and detail-oriented, able to juggle investigations, compliance, and client needs simultaneously.</li> </ul> Nice-to-Haves <ul> <li>Google Cloud Security Engineer Certification, CISSP, CCSP, or equivalent.</li> <li>2+ years work as a developer or equivalent.</li> </ul> Benefits Summary <ul> <li>Competitive salary, stock options, flexible vacation</li> <li>Medical, Dental and Flexible Spending Account (FSA)</li> <li>Company Matched 401(k)</li> <li>Unlimited PTO (Within reason)</li> <li>Talented co-workers and management</li> <li>Agile Development Program (For continued learning/professional development)</li> <li>Paid Paternity &amp; Maternity Leave</li> </ul>   For candidates in California, Colorado, and New York City, Illinois, Minnesota, New Jersey, Vermont, Washington and Massachusetts, the Targeted Base Salary Range for this role is $128,700 to $188,900. This role is also eligible for an 8% bonus based on achievement of company goals. Actual salaries will vary depending on factors including but not limited to work experience, specialized skills and training, performance in role, business needs, and job requirements. Base salary is subject to change and may be modified in the future. Base salary is just one component of InMarket’s total rewards package that also may include bonus, equity, and benefits.  Ask your recruiter for more information! At InMarket, diversity is not just a value, it’s the very essence of who we are. It’s about recognizing and celebrating the unique perspectives each of us brings, from our colleagues to the communities we serve.We are committed to embracing the full spectrum of backgrounds, beliefs, abilities, and life experiences, knowing that this diversity strengthens us. At InMarket, our commitment to Diversity, Equity, and Inclusion means valuing each individual’s unique contributions. Together, we thrive. InMarket is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to age, race, color, religion, sex, national origin, sexual orientation, disability, or veteran status. Privacy Notice for California Job Applicants: https://inmarket.com/ca-notice-for-job-applicants/ #LI-Remote