Cybersecurity Analyst

The Senior Cybersecurity Analyst leads the proactive defense of the organization’s information systems and serves as a hands-on technical authority across cybersecurity operations. This role provides expert guidance on security architecture, incident response, and risk mitigation while actively managing and configuring enterprise security tools. The ideal candidate combines deep technical expertise with a forward-thinking leadership mindset—bringing best practices, driving decisions, and helping mature cybersecurity processes within a government environment.

This individual will play a critical role in strengthening the organization’s security posture, ensuring compliance with federal standards, and fostering a culture of security awareness and continuous improvement.

Key Responsibilities:

Security Operations & Architecture:

Architect, implement, configure, and manage security solutions including SIEM, EDR, IDS/IPS, Zero Trust (ZTS), and cloud security platforms
Hands-on administration of tools such as Microsoft Defender, CrowdStrike Falcon, Trellix, Splunk, and Zscaler
Lead threat hunting activities and vulnerability assessments to proactively identify and mitigate risks
Provide expert guidance on secure system design, architecture, and integrations
Develop and enforce cybersecurity best practices and standards across the environment
Incident Response & Threat Analysis:

Lead and execute complex incident response efforts, including investigation, containment, and remediation
Perform deep-dive root cause analysis on security incidents and recommend preventive measures
Develop and maintain incident response plans, playbooks, and procedures aligned to industry standards
Analyze logs, alerts, and system activity to identify patterns and emerging threats
Risk Management & Compliance:

Conduct comprehensive security risk assessments and vulnerability analyses
Develop and implement security policies, standards, and procedures aligned with NIST, ISO 27001, and federal requirements
Support audit readiness and compliance efforts, including internal and external reviews
Provide guidance on regulatory and compliance requirements
Security Leadership & Strategy:

Act as a technical lead and mentor for cybersecurity and IT staff
Bring best practices and help define, build, and mature cybersecurity processes and frameworks
Partner with leadership to help shape cybersecurity strategy and drive decision-making
Identify gaps in current cyber operations and implement improvements
Security Awareness & Training:

Design and deliver security awareness programs to strengthen organizational security culture
Educate IT and business teams on secure configurations and cybersecurity best practices
Collaboration & Communication:

Work closely with mission stakeholders, leadership, and IT teams to communicate risks and recommendations
Provide clear reporting on incidents, vulnerabilities, and risk posture
Represent the organization in discussions with vendors and external partners
Continuous Improvement & Innovation:

Evaluate emerging threats and technologies to continuously improve security posture
Recommend and implement new tools, processes, and automation strategies
Drive innovation across cyber operations and long-term security initiatives
Required Qualifications:

U.S. Citizenship required
Ability to obtain and maintain a Public Trust clearance
10+ years of hands-on cybersecurity experience with a focus on operations, incident response, and risk management
Technical Expertise:

Strong hands-on experience configuring and managing tools such as Microsoft Defender, CrowdStrike Falcon, Trellix, Splunk, Zscaler, and similar platforms
Deep knowledge of SIEM, EDR, IDS/IPS, vulnerability scanning tools, and cloud security solutions
Advanced understanding of networks, operating systems (Windows, Linux, macOS), and cloud environments (AWS, Azure, GCP)
Experience with scripting (Python, PowerShell) for automation and analysis
Solid understanding of security architecture and design principles
Analytical & Problem-Solving:

Proven ability to investigate complex security incidents and perform root cause analysis
Strong analytical skills to interpret logs and identify threats
Leadership & Communication:

Demonstrated ability to lead technical efforts and mentor junior staff
Excellent written and verbal communication skills across technical and non-technical audiences
Ability to operate independently and bring structure to evolving cybersecurity environments
Certifications (at least one required):

CISSP
CompTIA Security+
AWS Certified Security – Specialty
Microsoft Azure Security Technologies
CEH
GIAC (GSEC, GCIA, GCIH, etc.)
Relevant vendor certifications (e.g., Zscaler, CrowdStrike, Splunk)