The Job/What You'll Do: The Cybersecurity Analyst is responsible for monitoring, analyzing, and responding to security incidents and threats, implementing security controls, assisting with security and risk audits and assessments, and contributing to the development and execution of security strategies and policies.
Responsibilities:- Analyze security alerts and incidents to determine the root cause, scope, and potential impact, and take appropriate action to contain, mitigate, and remediate identified threats.
- Administer the security awareness program, including phishing simulations, employee training, and the investigation of reported phishing threats.
- Participate in security assessments and penetration testing; document identified vulnerabilities and assist with remediation activities.
- Maintain and update the Risk Register and POA&M, including tracking identified risks, remediation activities, and status updates as part of the organization's established risk management program.
- Develop and implement security controls and countermeasures to mitigate identified risks.
- Support the vulnerability management program by identifying, prioritizing, tracking, and reporting vulnerabilities and remediation activities in accordance with established mean time to remediate (MTTR) standards.
- Assist with third-party risk management activities, including vendor onboarding assessments and periodic risk reviews.
- Assist with the development, review, and maintenance of cybersecurity policies and procedures aligned with NIST and other applicable security standards and regulatory requirements.
- Participate in the evaluation and deployment of new security technologies and solutions
- Stay abreast of emerging cyber threats, vulnerabilities, and security technologies through continuous research and learning.
- All other duties as assigned.
Knowledge, Skills, Abilities: - Experience using security technologies and tools such as SIEM, IDS/IPS, DLP (Data Loss Prevention), Vulnerability Management, and EDR (Endpoint Detection and Response).
- Experience participating in security assessments, penetration testing.
- Proficiency in incident response processes and tools.
- Basic understanding of security compliance frameworks (e.g., NIST 800-53, ISO 27001) and regulatory requirements (e.g., HIPAA, SOC2, StateRAMP, HITRUST).
- Collaboration abilities to cooperate with team members, verbal communication skills including presentation skills, and the ability to communicate with a diverse spectrum of technical and non-technical team members and other relevant parties.
- Capacity to multitask and prioritize workload.
- Ability to act professionally and maintains appropriate boundaries with clients and staff.
- Ability to report as scheduled to work, meetings, training, and job-related activities prepared and as scheduled.
- Ability to consistently demonstrate compassion and meet people with compassion; Effort, every interaction deserves my best effort; and Ownership, which drives the company's success.
- Maintains an open and accepting mindset by being an active learner, participating in discussions with others, trying new approaches and ideas, and being self-aware and self-reflective for continual personal, professional and leadership growth.
Education & Experience:- 2-5 years of experience in field, Required
- CompTIA Security+, Microsoft Security Operations Analyst, Microsoft Azure Security Engineer, ISC2, GSEC, CySA+ Certification, Preferred
- Bachelors Degree in IT/Security or related field, Required
The candidate's applicable education and experience will determine where a candidate falls in the position range.
Pay Range
$75,000-$88,250 USD
Working Conditions:While performing the job duties in the office or at a home office, the employee is frequently required to stand, walk, sit, and use hands; they must occasionally lift and/or move up to 25 pounds. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. Exposure to noise typical with office operations. Ability to hear and speak. Employees must maintain a stable and secure private home internet with a minimum of 50Mbps download and 5Mbps upload, and an average jitter less than 20% of latency. https://speed.cloudflare.com/
Friendly work environment
- Generous paid time off (PTO)
- Health benefits (Medical/Dental/Vision) that start the first of the month following the hire date
- Competitive compensation
- Convenient office locations and Hybrid Schedule
- On-site fitness room free to all employees (Tempe Office)
- Basic Life Insurance
- Voluntary Life, Spouse, Child Insurance
- Critical Illness w/free dependents
- Critical Illness Spouse
- Short Term & Long Term Disability- Starts first of the month after 90 days of employment
- 401K & 401K Roth - Starts first of the month after 90 days of employment
- United Pet Care
- LifeLock for identity theft
- LYRA EAP Program- 25 free sessions for mental health per family member
