Senior Cybersecurity Analyst

Requirements

• Background and understanding of vulnerability management processes and platforms (e.g. Qualys, Rapid7, Tenable)
• Experience with at least one major Cloud Service Provider (e.g. - AWS, Azure, GCP, etc.)
• Must be able to sit, stand, lift, carry weight, kneel, bend, and grip tools during a full 8 hour shift.
• Must be able to work all shifts, and weekends/holidays as required.
• Ability to work in a 24/7 operation requiring on-call rotation for escalations.
• Must be able to communicate effectively in English, both verbally and through written communications.
• Must be knowledgeable of all federal, state and local laws and regulations relevant to operations.

Responsibilities

• Monitor SIEM, EDR, IDS/IPS, firewall, and cloud logs for unusual activity.
• Analyze and correlate events to identify true security incidents.
• Perform proactive threat hunting based on intelligence and behavioral patterns.
• Lead the full lifecycle of incident response: detection, triage, containment, eradication, and recovery.
• Tune SIEM rules, EDR detections, firewall policies, and alerting logic.
• Conduct forensic investigations on endpoints, servers, cloud environments, and networks.
• Deliver detailed incident reports and lead post‑incident reviews.
• Review vulnerability scan results and assess risk based on asset criticality and exploitability.
• Work with IT/engineering teams to drive remediation efforts.
• Track and validate closure of vulnerabilities.
• Participate in design reviews for new systems or projects.
• Implement new security controls or tools and optimize existing ones.
• Automate processes using scripts (Python, PowerShell, etc.).
• Provide secure configuration guidance for infrastructure, applications, and cloud environments.
• Validate control effectiveness and recommend strengthening measures.
• Evaluate threat intelligence feeds and internal indicators.
• Map detections, incidents, and gaps to frameworks like MITRE ATT&CK.
• Recommend improvements based on emerging threats and TTPs.
• Support internal and external audits (e.g., SOC 2, ISO 27001, PCI, NIST).
• Assist in developing and enforcing security policies, standards, and procedures.
• Prepare dashboards and metrics that communicate security posture to leadership.
• Serve as an escalation point for junior analysts and SOC teams.
• Provide coaching, knowledge sharing, and procedural guidance.
• Work closely with IT, DevOps, and business units during investigations and projects.

Skills