DescriptionLocation: Longmont, CO (onsite)
Experience: 8+ years of combined relevant experience in systems administration, infrastructure, and/or cybersecurity
Minimum Education: Associate degree in Information Technology or related field, or equivalent industry experience is required
Compensation: $100,000-$130,000 depending on experience
SummaryThe Senior Cybersecurity Analyst strengthens cybersecurity and maintains secure, reliable IT infrastructure at nLIGHT DEFENSE in Longmont. Reporting up to the VP of Information Security, this position works closely with the Cybersecurity team based at Global Headquarters in Camas, Washington, and cross functional partners throughout the local team and global teams to implement security controls, support compliance activities, and coordinate security operations.
Approximately 60% of the role focuses on cybersecurity: CMMC/NIST compliance; vulnerability management and hands-on remediation; security monitoring, alert investigation, and incident response. The remaining 40% focuses on systems administration across servers, virtualization, identity, networking, and endpoints with support concentrated on complex escalations and infrastructure needs.
All applicants must possess or be qualified to obtain a U.S. DoD Personnel Security Clearance. Preference will be given to candidates with an existing U.S. DoD Personnel Security Clearance. Further information on requirements to obtain a security clearance is available at: https://www.dcsa.mil/mc/pv/mbi/gicp/. Please review this information before applying.
Responsibilities- Implement, maintain, and validate security controls aligned with CMMC, NIST SP 800-171, DFARS, and internal security requirements in coordination with the Cybersecurity team.
- Maintain audit-ready documentation and evidence, including system configurations, access reviews, change records, remediation activities, operating procedures, and assessment support materials.
- Apply and maintain approved security baselines, including CIS and STIG standards, across Windows and Linux systems while managing exceptions and corrective actions.
- Administer and support identity and access management processes, including least-privilege permissions, privileged account management, periodic access reviews, and account lifecycle administration.
- Conduct vulnerability assessments, review scan and penetration testing results, prioritize findings based on risk, and coordinate remediation activities with system owners and stakeholders.
- Perform hands-on remediation through patching, configuration changes, access controls, and other approved mitigation measures, validating effectiveness through testing and rescanning.
- Monitor, investigate, and respond to security events and alerts across Microsoft 365, SIEM, EDR, identity, network, and infrastructure platforms; document findings and support incident response activities.
- Administer, maintain, and optimize security technologies, infrastructure systems, and monitoring capabilities while recommending improvements to strengthen the organization's security posture.
- Administer and support Windows and Linux servers, virtualization platforms, Active Directory, Microsoft Entra ID, Microsoft 365 services, and related enterprise infrastructure.
- Maintain secure system configurations, operating system and application patching, backup and recovery processes, and disaster recovery procedures for supported environments.
- Support network and infrastructure services including DNS, DHCP, VPN, VLAN, firewall, and connectivity-related administration in coordination with infrastructure owners.
- Troubleshoot complex infrastructure and security-related issues, perform root cause analysis, automate repeatable administrative tasks through scripting and configuration management tools, and maintain technical documentation, system procedures, and operational runbooks.
- Participate in scheduled maintenance activities, on-call rotations, compliance assessments, and continuous improvement initiatives as required.
Required Experience- At least 8 years of combined relevant experience in systems administration, infrastructure, and/or cybersecurity, including at least 3 years of hands-on cybersecurity experience.
- Associate degree in Information Technology, Cybersecurity, or a related field, or equivalent relevant industry experience.
- Practical experience implementing and documenting security controls in a regulated environment, with working knowledge of CMMC and NIST SP 800-171 requirements.
- Hands-on experience with vulnerability assessment, risk-based prioritization, patching, configuration remediation, and validation of corrective actions.
- Experience investigating security alerts and participating in incident response, including escalation, documentation, and coordinated containment or recovery.
- Strong administration and troubleshooting skills across Windows Server, enterprise identity, Microsoft 365, virtualization, and core networking.
- Practical Linux administration experience, including securing and maintaining systems and OS images.
- Understanding of TCP/IP, LAN/WAN architecture, firewalls, access controls, and least-privilege principles.
- Ability to script or automate administrative and security tasks, maintain clear technical documentation, and communicate risks and remediation needs to technical and nontechnical stakeholders.
- Commitment to excellence, attention to detail, pride in workmanship, sound judgment, and a collaborative customer-service mindset.
Desired Experience- Experience supporting CMMC assessments, NIST control evidence, DFARS-related security activities, SOX controls, or other defense-sector compliance programs.
- Experience with Microsoft 365 GCC High, Microsoft Purview compliance capabilities, Exchange Online, and Microsoft Entra ID.
- Experience with SIEM, EDR, and vulnerability scanning platforms, such as Nessus, and with security tool configuration and tuning.
- Experience with Hyper-V and/or VMware; FortiGate or comparable firewalls; Duo, Keeper, or similar identity and privileged access tools; and endpoint management platforms.
- Experience with PowerShell, Ansible, Packer, or comparable scripting, automation, and configuration management tools.
- Relevant cybersecurity or infrastructure certifications, such as CISSP, Security+, CySA+, or comparable credentials.
- Experience in aerospace and defense, manufacturing, engineering, or cleanroom environments.
Benefits Summary:• 4 weeks of Paid Time Off per year
• 11 paid Holidays
• Employee Stock Purchase Plan
• Tuition Assistance Program
• Health (ACA Gold Plan), Vision and Dental Care paid by employer 100% for
Employee and 75% for Dependents
• Paid Family Leave, Short and Long Term Disability paid by employer 100%
• Competitive 401k with company match and immediate vesting
