Overview
Pay Range for this role is 120,000 to 132,000.
Job Title and Overview
The Senior Cybersecurity Analyst is integral to protecting, monitoring, and improving the security posture of LSAC's network, Microsoft cloud environment, and intellectual property such as test items, candidate data, and systems data. This role serves as LSAC's subject-matter expert for Microsoft Azure security, Microsoft Purview, and Data Loss Prevention (DLP), leading the design, implementation, and ongoing tuning of the controls that discover, classify, and protect sensitive information across Microsoft 365, Azure, and endpoints.
These duties include partnering with departments throughout LSAC to raise security awareness and educate all LSAC staff in security best practices; fully utilizing the tools required to monitor, analyze, and respond to security threats and related incidents; and maintaining compliance with outside requirements (such as SOC 2, PCI DSS, and financial and IT audits). Additional responsibilities include monitoring and reporting on intrusion prevention systems, cloud security alerts, DLP policy matches, and suspicious network traffic; overseeing firewalls and website penetration testing; and ensuring project deliverables follow security guidelines. As a senior member of the Cybersecurity team, the analyst provides technical leadership, mentors other team members, and champions the best practices and procedures of LSAC's overall Security Systems Program.
ResponsibilitiesEssential Job Functions
Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of this position. The individual employed in this position will be required to:
- Improve, manage, and provide direction re: LSAC Security Policies, Procedures, and Best Practices and maintain and enhance the formal Security Systems Program.
- Serve as LSAC's subject-matter expert for Microsoft Purview, owning the design, deployment, and ongoing tuning of Data Loss Prevention (DLP) policies across Exchange Online, SharePoint, OneDrive, Teams, endpoints, and Azure data sources.
- Develop and maintain LSAC's data classification framework, including sensitive information types, trainable classifiers, and sensitivity labels, to protect test items, candidate personally identifiable information (PII), and other confidential data.
- Triage, investigate, and resolve DLP alerts and incidents; tune policies to reduce false positives; and report on data-handling risk trends to IT leadership.
- Administer and enhance other Microsoft Purview solutions, such as Information Protection, Insider Risk Management, Data Lifecycle Management, Audit, eDiscovery, and Data Security Posture Management for AI, in support of data governance and compliance.
- Secure LSAC's Microsoft Azure environment, including identity and access (Microsoft Entra ID, Conditional Access, Privileged Identity Management), network security, Key Vault, and Microsoft Defender for Cloud recommendations and regulatory compliance reporting.
- Integrate Purview, Microsoft Defender, and Azure telemetry with Microsoft Sentinel or LSAC's SIEM to build detections, dashboards, and automated response playbooks.
- Lead the development of effective cybersecurity policies to address existing and emerging threats, including AI acceptable-use and data protection policies, data governance, and compliance.
- Perform IT security inspections, tests, system-level audits, and reviews of existing IT software, hardware, and cloud services to support the annual reviews that ensure compliance with SOC 2, IT and financial audits, PCI DSS, etc.
- Evaluate and recommend new Security products and services (hardware and software).
- Consult on, monitor, and report on security systems such as intrusion prevention and detection systems, VPNs, firewalls, and cloud security controls.
- Perform network and system vulnerability scans and penetration testing on workstations, servers, network devices, and other computer systems and work with appropriate groups to close Security gaps.
- Develop and support automated tools and queries (e.g., KQL, PowerShell) that analyze security events in access control, audit, and cloud logs to discover patterns and evidence of problems.
- Provide consultation and assistance to Infrastructure, Executive Staff, and other departments relating to information, cloud, and systems security.
- Maintain a high level of confidentiality in identifying and providing assistance in resolving Security issues.
- Monitor the networks and websites for the proper Security procedures, software configuration, and signs of compromise or attempted compromise.
- Actively promote and enhance Security Awareness programs to LSAC staff and partnering with the Human Resources Department.
- Participate on all Information Security projects and attend meetings to provide input and recommendations on issues that have an impact on LSAC’s Security infrastructure.
- Evaluate and recommend solutions to current or potential Security threats as they relate to the data and computing environment.
- Participate as a member on the Security Incident Response Team and Test Security Task Force.
- Respond to Security incidents providing critical documentation and consultation by preserving all records indicating changes made to access control lists to facilitate investigations, as well as, involvement to the response, root cause analysis, and implementation of a solution.
- Provide technical leadership and mentoring to other members of the Cybersecurity team and serve as an escalation point for complex investigations.
- Keep abreast of the trends and issues in the industry related to Computer Security.
Competencies
- Excellent written and verbal communication skills.
- Holds a strong sense of accountability for both individual and team objectives.
- Embraces a forward-thinking mindset, contributing to a culture of continuous improvement and creativity.
- Excellent time management, prioritization, attention to detail and organization skills
- Ability to provide technical leadership and consultation and to apply project management skills.
- Solid understanding of TCP/IP and application development & security best-practices.
- Ability to enhance, comply, and implement the Security Systems Program throughout LSAC with overall responsibility and accountability to meet industry standards and best practices to provide a safe and protective data and systems environment.
QualificationsEducation and Experience
- A bachelor's degree in Information Systems, Cybersecurity, or a related field.
- A minimum of 10 years of IT experience, including more than 5 years in IT security, or an equivalent combination of education, training, and experience is required. At least 3 years of hands-on experience securing Microsoft Azure and Microsoft 365 environments is strongly preferred.
- Ability to enhance, comply, and implement the Security Systems Program throughout LSAC with overall responsibility and accountability to meet industry standards and best practices to provide a safe and protective data and systems environment.
- Broad working knowledge of Security Program issues and best practices, including system threat vulnerability assessments, system Security requirements/architectures, and Security risk mitigation plans that will enable the IT systems and data information mission to be protected and successful.
- Demonstrated hands-on experience designing, deploying, and managing Microsoft Purview in an enterprise Microsoft 365 environment, including DLP policies, sensitivity labels, sensitive information types, and Information Protection.
- Proven experience running a DLP program end to end: policy design, phased rollout from simulation mode to enforcement, alert triage, tuning, and user education.
- Strong working knowledge of Microsoft Azure security, including Microsoft Entra ID, Conditional Access, Privileged Identity Management, Azure networking, Key Vault, Azure Policy, and Microsoft Defender for Cloud.
- Experience with Microsoft Defender XDR (Defender for Endpoint, Office 365, and Cloud Apps) and Microsoft Sentinel or a comparable SIEM; ability to write KQL queries is strongly preferred.
- Solid experience with establishing and promoting a Security Systems Program and the ability to provide the guidance to raise Security Awareness throughout LSAC.
- Knowledge and experience with various network protocols, firewalls, penetration tools, remote access, network operating systems, PC operating systems and vulnerabilities and network management tools.
- Experience with security tools and best practices, Windows-based systems, Tenable Nessus, Microsoft Defender, PowerShell scripting, and other technical platforms and administration.
- Solid understanding of TCP/IP and application development & security best-practices.
- Solid knowledge of authentication systems, including modern authentication, multi-factor authentication, token-based authentication, and digital certificates (PKI).
- Solid knowledge of encryption, including Microsoft Purview Message Encryption, Azure Key Vault key management, and protection of data at rest and in transit.
- Professional certifications such as Microsoft Certified: Information Security Administrator Associate (SC-401), Azure Security Engineer Associate (SC-500), Cybersecurity Architect Expert (SC-100), CISSP, CISM, or relevant GIAC certifications are strongly preferred.
- Excellent written and oral communication skills.
- Ability to provide technical leadership, mentor team members, and apply project management skills to lead security initiatives from planning through implementation.
Additional Information
Supervisory Responsibilities
This role does not have people management responsibilities.
Position Type
The LSAC standard business hours are Monday-Friday, 8:30 a.m. - 4:45 p.m. ET. While these are the standard office hours for LSAC, as an exempt employee, the employee will be expected to work the hours necessary to satisfactorily complete their assignments in a responsible and professional manner.
Work Environment
This job operates in a remote and professional office environment. Whether remote or in-office, this role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines.
Travel Requirements
There is no travel required for this position.
Physical Demands
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee must regularly write, read, and communicate effectively.
Additional Information:
Please note that this job description may not contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Job responsibilities may change at any time with or without notice.
Except as otherwise provided by law, all terms of employment are subject on an at-will basis and can change at any time.
