Job Description

ABOUT THE ROLE

The Cybersecurity Senior Analyst is an experienced and highly skilled role overseeing advanced threat detection, incident response, training and testing, security evaluation and risk mitigation. Reporting to the global VP of IT / CISO this role is critical in strengthening client's security posture, advocating for security best practices and ensuring confidentiality, integrity and availability of the systems and data globally

KEY RESPONSIBILITIES

Duties and Responsibilities (Client-facing)

• Identify and recommend secure network solutions to defend against advanced cyber threats in partnership with MSSP.
• Create and maintain a cybersecurity technology roadmap for future improvements.
• Review current, develop and enforce security policies, procedures, and protocols to safeguard information systems.
• Coordinate and lead incident response efforts and manage investigations of security breaches and creation of root cause analysis in partnership with an MSSP.
• Conduct regular security assessments, audits, and penetration tests in conjunction with MSSP and other providers.
• In partnership with MSSP, oversee and report on results of cybersecurity training and phish testing and make recommendations for improvements to increase effectiveness.
• Oversee threat hunting and proactively identify vulnerabilities and risks in partnership with MSSP.
• Oversee the deployment and maintenance of security tools such as firewalls, antivirus software, patching process and intrusion detection systems.
• Recommend, execute / assist in the implementation of security measures and best practices.
• Conduct security reviews of new applications requests, system integrations and custom applications.
• Collaborate with business units to ensure security is integrated into all aspects of technology and operations and best practices are followed.
• Monitor security trends, threat intelligence, and compliance requirements to proactively address risks.
• Analyze threat intelligence and provide recommendations to mitigate risks.
• Review and revise compliance policies and procedures to ensure that applicable controls are properly documented in alignment with the results of the risk assessment.
• Develop and maintain security dashboards – prepare and present reports on security status, incidents, roadmap and improvements to senior leadership.
• Stay current with emerging and the latest cybersecurity trends, threats, tools, technologies and regulatory requirements.
• Other duties may be assigned

QUALIFICATIONS & EXPERIENCE

EDUCATION

• Bachelor's degree in Cybersecurity, Computer Science, or a related field (Master's preferred).

EXPERIENCE

• 3 – 5 years of experience in cybersecurity, with a focus on threat detection, incident response and evaluation/selection of security tools.
• At least 2 years in a client-facing, coordination, or supervisory role.
• Experience working with international clients and vendor partners preferred.

KEY SKILLS & COMPETENCIES

• Strong knowledge of SIEM platforms, IDS/IPS, endpoint protection, and threat intelligence tools.
• Strong knowledge of network protocols, operating systems, and security architecture.
• Proven experience in incident response, threat hunting, digital forensics, malware analysis and security operations.
• Experience with cloud platforms (AWS, Azure, VPC) and cloud security tools
• Excellent leadership, communication, and analytical skills. Excellent analytical, communication, and problem-solving skills
• Experience with SIEM tools.
• Knowledge of emerging technologies such as AI in cybersecurity.
• The ability to work under pressure and manage multiple priorities in a fast-paced environment.
• Understanding of cloud security (AWS, Azure, or Google Cloud).
• Knowledge and understanding of regulatory standards (e.g., NIST, HIPAA, ISO 27001, GDPR, SOC 2).

PROFESSIONAL CERTIFICATIONS (OPTIONAL)

• Certified Information System Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Or other related Security Certification

WORKING CONDITIONS

• Required to work flexible shifts but mostly East coast time, aligned to client time zones and willing to work on extended hours as deemed necessary. Hybrid or remote work options