Senior Cybersecurity Analyst

Short Description

Oversee network and application security initiatives consistent with PGCB and other governmental regulations as well corporate security policies.

Role Description

Threat Monitoring and Detection

• Monitor SIEM, EDR, IDS/IPS, firewall, and cloud logs for unusual activity.
• Analyze and correlate events to identify true security incidents.
• Perform proactive threat hunting based on intelligence and behavioral patterns.

Incident Response Leadership

• Lead the full lifecycle of incident response: detection, triage, containment, eradication, and recovery.
• Tune SIEM rules, EDR detections, firewall policies, and alerting logic.
• Conduct forensic investigations on endpoints, servers, cloud environments, and networks.
• Deliver detailed incident reports and lead post‑incident reviews.

Vulnerability and Risk Management

• Review vulnerability scan results and assess risk based on asset criticality and exploitability.
• Work with IT/engineering teams to drive remediation efforts.
• Track and validate closure of vulnerabilities.

Security Architecture and Engineering

• Participate in design reviews for new systems or projects. Implement new security controls or tools and optimize existing ones.
• Automate processes using scripts (Python, PowerShell, etc.).
• Provide secure configuration guidance for infrastructure, applications, and cloud environments. Validate control effectiveness and recommend strengthening measures.

Threat Intelligence Integration

• Evaluate threat intelligence feeds and internal indicators.
• Map detections, incidents, and gaps to frameworks like MITRE ATT&CK.
• Recommend improvements based on emerging threats and TTPs.

Policy, Compliance, and Audit Support

• Support internal and external audits (e.g., SOC 2, ISO 27001, PCI, NIST).
• Assist in developing and enforcing security policies, standards, and procedures.
• Prepare dashboards and metrics that communicate security posture to leadership.

Collaboration and Mentoring

• Serve as an escalation point for junior analysts and SOC teams.
• Provide coaching, knowledge sharing, and procedural guidance.
• Work closely with IT, DevOps, and business units during investigations and projects.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field from an accredited college or other approved educational institution required.
• Background and understanding of vulnerability management processes and platforms (e.g. Qualys, Rapid7, Tenable)
• Experience with at least one major Cloud Service Provider (e.g. - AWS, Azure, GCP, etc.)
• Must be able to sit, stand, lift, carry weight, kneel, bend, and grip tools during a full 8 hour shift. Must be able to work all shifts, and weekends/holidays as required.
• Ability to work in a 24/7 operation requiring on-call rotation for escalations.
• Must be able to communicate effectively in English, both verbally and through written communications. Must be knowledgeable of all federal, state and local laws and regulations relevant to operations.