cyber security analyst

National Heritage Academies

<div>SUMMARY:
National Heritage Academies (NHA) is seeking a talented and motivated Cyber Security Analyst to join our team. The ideal candidate will play a critical role in protecting our organization's digital assets and ensuring the confidentiality, integrity, and availability of our information systems. As a Cyber Security Analyst, you will be responsible for leading the analysis, investigation, and response to security incidents. This role is central to protecting our students, staff, and sensitive data while maintaining a secure and compliant educational environment. This position is based at our Grand Rapids headquarters (onsite 4 days/week) and requires close collaboration with business partners, customers, and IT teams. 
COMPANY INFORMATION:
National Heritage Academies (NHA) partners with communities to build and operate public charter schools. Founded in 1995, today NHA serves over 100 schools in nine states, with more than 65,000 students in kindergarten through 12th grade. Our schools are designed to eliminate the achievement gap and provide school choice to families so their children are prepared for success in college, career, and life. A majority of our schools consistently outperform their local district on the state test. According to the Center for Research on Education Outcomes at Stanford University, NHA is a leading performer among charter schools and management organizations, outperforming both conventional district schools and other charter school operators. In addition, according to our employee survey, over 90% of respondents agree that the work they do is meaningful to them. Join our team. 
DUTIES AND RESPONSIBILITIES:
Security Monitoring and Analysis:
<ul><li>Utilize the SIEM/XDR platform to perform threat hunting, correlation, and deep analysis of security events across cloud, network, and endpoint telemetry.
</li><li>Analyze security data to identify and investigate potential security incidents and threats.
</li><li>Stay current with emerging threats and vulnerabilities to proactively identify potential risks.
</li></ul>Incident Response:
<ul><li>Respond promptly to security incidents, following established incident response procedures.
</li><li>Execute Tier 2 incident response procedures, including detailed forensic evidence preservation, advanced containment strategies, and effective communication during active incidents.
</li><li>Document incident details and lessons learned for future improvement.
</li><li>Vulnerability Management:
</li><li>Manage the full lifecycle of vulnerabilities, from tool configuration (e.g., Rapid7) and regular scanning, through risk prioritization, to working with IT peers to validate and implement remediation.
</li><li>Identify and prioritize vulnerabilities, and work with relevant teams to remediate them.
</li><li>Keep software and systems up-to-date with patches and security updates.
</li></ul>Security Policies and Procedures:
<ul><li>Contribute to the design and formal documentation of security policies and standards (e.g., access control, data handling) ensuring adherence to FERPA and other regulatory mandates.
</li><li>Provide guidance and training to staff on security best practices and awareness.
</li></ul>Security Tools and Technologies:
<ul><li>Manage and configure security tools and technologies, such as firewalls, antivirus, intrusion detection/prevention systems, and encryption solutions.
</li><li>Leverage AI/ML Features: Actively utilize and fine-tune Artificial Intelligence (AI) and Machine Learning (ML) capabilities within security platforms (SIEM/XDR, SOAR) to enhance threat detection accuracy, reduce false positives, and improve automated response workflows.
</li><li>Evaluate, recommend, and manage new security technologies to continuously enhance the organization's security posture and automation capabilities.
</li></ul>Reporting and Documentation:
<ul><li>Generate and maintain reports related to security incidents, vulnerabilities, and compliance for management and regulatory purposes.
</li><li>Maintain accurate records of security activities and documentation of security configurations and procedures. 
</li></ul>QUALIFICATIONS:
<ul><li>Bachelor's degree in Computer Science, Information Security, or a related field preferred. Relevant certifications (e.g., CISSP, CISA, CompTIA Security+) are a plus.
</li><li>Minimum of 3+ years of progressive experience in a security operations center (SOC), incident response, or security analyst role preferred.
</li><li>Hands-on experience with Data Loss Prevention (DLP), Application Security (AppSec) principles, and Security Orchestration, Automation, and Response (SOAR) solutions.
</li><li>Strong understanding of security principles, practices, and technologies.
</li><li>Proficiency in security tools and technologies, such as SIEM, IDS/IPS, antivirus, firewall, and vulnerability assessment tools.
</li><li>Knowledge of regulatory requirements (e.g., FERPA, ISO 27001) and ability to ensure compliance.
</li><li>Excellent analytical and problem-solving skills, with the ability to think critically and respond effectively to security incidents.
</li><li>Strong communication and interpersonal skills to work collaboratively with cross-functional teams and communicate security issues to non-technical stakeholders.
</li><li>Continuous learning mindset to keep up with evolving cyber threats and security best practices. 
</li></ul>This is an in-person position at our NHA Service Center located at 3850 Broadmoor Ave., Grand Rapids, MI. 
Please click here to learn more about our core values. 
 
National Heritage Academies is an equal opportunity employer.</div>

Cyber Security Analyst

Group-IB

<div>
 
 
 ABOUT GROUP-IB:
 
 
 
 Founded in 2003 and headquartered in Singapore, Group-IB is a leading creator of cybersecurity
 
 
 technologies to investigate, prevent, and fight digital crime. Combating cybercrime is in the company&rsquo;s DNA, shaping its technological capabilities to defend businesses, and citizens, and support law enforcement operations.
 
 
 
 
 
 Group-IB&rsquo;s Digital Crime Resistance Centers (DCRCs) are located in the Middle East, Europe, Central Asia, and Asia-Pacific to help critically analyze and promptly mitigate regional and country-specific threats. These mission-critical units help Group-IB strengthen its contribution to global cybercrime prevention and continually expand its threat-hunting capabilities.
 
 
 
 
 Each of us can help make the world a safer place. Join us!
 
 
 
 
 
 
 ABOUT THE ROLE:
 
 
 
 Group-IB&rsquo;s CERT team represents a new generation of cybersecurity analysts, tackling a broad range of digital threats across the Internet. Our experts leverage cutting-edge threat intelligence and proprietary tools to identify and respond to phishing attacks, scam schemes, trademark misuse, online piracy, and more. From social media threats to deep and dark web incidents, our CERT analysts research, investigate, and disrupt malicious activities to protect brands and industries from reputational and financial harm.
 
 
 We are now expanding our activities across the META region, and we&rsquo;re looking for a driven professional to join our mission of fighting cybercrime.
 
 
 
 
 
 
 YOUR MISSION
 
 
 <ul>
 <li>
 Monitor and analyze web resources for potential security threats.
 </li>
 <li>
 Investigate and respond to phishing, online fraud, illegal trademark use, and copyright violations.
 </li>
 <li>
 Collaborate with website owners, hosting providers, domain registrars, and regulatory authorities to take down malicious resources.
 </li>
 <li>
 Support clients in protecting their brands against online abuse.
 </li>
 <li>
 Prepare regular client reports and service summaries.
 </li>
 <li>
 Research emerging scams and phishing techniques to improve detection and prevention capabilities.
 </li>
 </ul>
 
 
 
 
 
 WHAT SUCCESS LOOKS LIKE:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in a relevant field or equivalent experience.
 </li>
 <li>
 Previous first experience with Digital Risk Protection (DRP) is a nice to have
 </li>
 <li>
 Strong passion for fighting cybercrime.
 </li>
 <li>
 Willingness to work in a global, fast-paced environment.
 </li>
 <li>
 Excellent analytical skills, resourcefulness, and keen attention to detail.
 </li>
 <li>
 An understanding of networks and Internet protocols is a plus.
 </li>
 <li>
 Experience collaborating with hosting providers or domain registrars is a plus.
 </li>
 <li>
 Responsible, quick to learn, and highly literate.
 </li>
 <li>
 Comfortable working with and communicating in remote, multicultural teams.
 </li>
 <li>
 Fluent in English and Arabic
 </li>
 </ul>
 
 
 
 
 
 OUR WORK ENVIRONMENT &amp; CULTURE:
 
 
 
 At Group-IB, we believe that employee happiness is fundamental to success. We foster a supportive, inclusive, and dynamic workplace where every team member is empowered to grow. Whether you&rsquo;re aiming to deepen your expertise, step into leadership, explore new departments, or take your career abroad, we provide diverse opportunities for professional development.
 
 
 Our team is made up of specialists from around the world who bring deep international expertise and thrive on solving complex challenges. You&rsquo;ll be working with cutting-edge technologies recognized globally by Gartner, IDC, and Forrester, and contributing to projects that span across 60 countries alongside 450+ partners and 500+ clients.
 
 
 We build a multicultural, values-driven culture, where mutual respect, collaboration, and shared goals that connect our teams worldwide. As we continue to grow globally, you will have the opportunity to advance your career here faster than in many traditional organizations.
 
 
 
 
 
 
 WHAT DO WE OFFER
 
 :
 
 <ul>
 <li>
 Comprehensive Health Coverage: Your well-being comes first. We offer health insurance to support you when it matters most.
 </li>
 <li>
 Certifications &amp; Continuous Learning: Our team holds over 1,000 globally recognized certifications, including CEH, CISSP, OSCP, and more. Through our incentive program, we cover the cost of professional development&mdash;because your growth fuels our innovation.
 </li>
 <li>
 Meaningful Challenges &amp; Growth Paths: From soft skills development to advanced technical training, a wide range of internal programs help you expand your skill set&mdash;and earn recognition and rewards along the way.
 </li>
 <li>
 Entrepreneurial spirit is encouraged: We value initiative. Whether it&rsquo;s launching a tech blog, organizing events, building communities, or starting a sports team&mdash;Group-IB is a place where bold ideas are supported and celebrated
 </li>
 </ul>
 
 
</div>

ACCC

Overview Do you want to work at an agency where each day reveals new opportunities to work on some of the biggest issues facing consumers and businesses and have opportunities to pursue new and exciting pathways? Do you want to work at a place where smart and dedicated people from all walks of life collaborate to work on meaningful matters? Do you want to play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM)? Then this is the place for you! At the ACCC, we're proud of the impact we can make together. We understand the responsibilities and challenges that come with a fast moving and ever-changing environment. Our high performing culture is built on a foundation of care, support and inclusion. It's why we're driven by connection and collaboration, sharing our skills, knowledge and support with each other freely and frequently. It's why we prioritise the wellbeing of our people and empower them to work autonomously, flexibly and courageously. At the ACCC, we believe the best version of you is the one that's true to who you are - and that's the you we want working alongside us. We value flexibility, and all roles can be performed from any capital city in a state or territory or Townsville and are available on a full-time, part-time or job-share basis. Applicants from diverse backgrounds including First Nations peoples, people with disability and those from different cultural backgrounds are encouraged to apply. What you will do as the Senior Cyber Security Analyst The Senior Cyber Security Analyst will play a key role in administrative discipline and effectiveness of our Information Security Management System (ISMS) especially compliance with the Australian Government Information Security Manual (ISM). You will be responsible for security monitoring and reporting, user administration and support of security tools based on ISM standards, playing a pivotal role in the Consumer Data Right (CDR) initiative by promoting a secure, reliable, and trusted environment. As An APS6 Senior Cyber Security Analyst, You Will <ul><li>Collaboratively work with vendors, service providers, other Commonwealth cyber security teams, and external specialists to implement and operationalise security controls and improve monitoring systems. </li><li>Undertake daily operations activities including user administration of role-based access control (RBAC), extensive use of Azure security tools and dashboards, regular audits configurations to ensure compliance and appropriate assignment of privileges. </li><li>Review security incident and event logs and monitor threat intelligence feeds and contribute to ongoing threat intelligence. </li><li>Monitor, analyse, and report compliance against ISMS controls, identifying areas for improvement in data collection, assurance processes, and security procedures. </li><li>Provide timely intelligence reporting on potential security risks and ISM compliance issues. </li><li>Contribute to the development of tactical controls and contribute to strategic direction of cyber security operations. </li><li>Prepare regular reports and presentations on cyber security for management and executives. </li> </ul>About You When assessing applications, we will have regard to the APS Integrated Leadership Profile (ILS) for the APS classification. Follow the link for more information on the ILS. The APS6 role in particular requires: <ul><li>Demonstrated ability to work in a neurodiverse security team, fostering a psychologically safety and productive work environment. Commitment to confidentiality and secure handling of sensitive information. </li><li>Demonstrated experience in dealing with enquiries and managing stakeholder relations in a composed and structured manner. </li><li>Demonstrated ability to work autonomously within a team environment and independently with minimal supervision. </li><li>Strong interpersonal skills and ability to present information clearly and concisely. </li><li>Broad knowledge of contemporary cyber security eco-system and an ability to identify solution that improve assurance processes. </li><li>Solid understanding of cyber security monitoring and reporting operations particularly against standards like the Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and understanding of Australian Government Information Security Manual (ISM). </li><li>Applied knowledge and experience with key cyber security technologies and solutions including Azure tools (e.g., Sentinel and Defender), SPLUNK and Airlock. </li><li>Strong background in Azure Cloud Security environments and proficiency in Microsoft. </li><li>Experience using Azure, Microsoft 365 and DevOps tools. </li> </ul>To find out more about us and the role, please read the Candidate Kit. Security clearance This role requires a minimum of Negative Vetting 1 security clearance to be obtained and maintained, whilst in the role. How To Apply You will be asked to respond to the statement of claims of no more than 800 words and submit your resume with key outcomes or what you are most proud of in each role you have held (2 pages maximum). Salary: APS6: $99,562 to $111,590 (plus 15.4% superannuation) Contact Officer: Jasmine Mosenich - Applications Close: 11:00pm (AEDT) 02 November 2025

Senior Cyber Security Analyst - APS6 (EA2025/218)

Mission Support and Test Services

<div>Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.S. National Nuclear Security Administration (NNSA). Our MISSION is to help ensure the security of the United States and its allies by providing high-hazard experimentation and incident response capabilities through operations, engineering, education, field, and integration services and by acting as environmental stewards to the Site&rsquo;s Cold War legacy. Our VISION is to be the user site of choice for large-scale, high-hazard, national security experimentation, with premier facilities and capabilities below ground, on the ground, and in the air. (See NNSS.gov for our unique capabilities.) Our 2,750+ professional, craft, and support employees are called upon to innovate, collaborate, and deliver on some of the more difficult nuclear security challenges facing the world today.
<ul><li>MSTS offers our full-time employees highly competitive salaries and benefits packages including medical, dental, and vision; both a pension and a 401k; paid time off and 96 hours of paid holidays; relocation (if located more than 75 miles from work location); tuition assistance and reimbursement; and more.
</li><li>MSTS is a limited liability company consisting of Honeywell International Inc. (Honeywell), Jacobs Engineering Group Inc. (Jacobs), and HII Nuclear Inc.</li></ul></div>
 <div>NNSS is seeking an experienced cyber security analyst for an exciting Senior Classified Security Engineering Analyst (Senior Cyber Security Analyst) role. The Senior Classified Security Analyst plays a critical role in safeguarding company infrastructure from cyber threats and attacks. The position is responsible for designing, implementing, managing, and enhancing security measures to protect classified and unclassified data, networks, systems, and applications.
Key Responsibilities
<ul><li>Assist the ISSM (Information Systems Security Manager) and ISSOs (Information System Security Officers) with the execution of their assigned duties.
</li><li>Contribute to an overall productive and respectful work environment by providing excellent customer service and working in a positive, collegiate manner.
</li><li>Maintain cooperative and respectful working relationships with Cyber Security staff, other divisions, and customers.
</li><li>Conduct Cyber Security policy compliance tasks including: discovering unauthorized devices, conducting site surveys for non-compliance, and ensuring network access requirements are met.
</li><li>Perform Security Test and Evaluations of information systems in support of a security plan.
</li><li>Review Information System Plans for classified and unclassified systems.
</li><li>Complete certification and accreditation of information systems on classified and unclassified systems and networks, assist with the completion and mitigation of security testing and evaluation results.
</li><li>Collaborate with cross-functional teams to design, deploy, and maintain security controls including firewalls, intrusion detection/prevention systems, endpoint protection, encryption, and multi-factor authentication solutions.
</li><li>Design networks and systems with a security focus, ensuring systems are developed in accordance with federal law, customer requirements, certification and accreditation requirements, and industry best practices.
</li><li>Review purchase requests for technology items and provide input to senior level Cyber Security staff regarding the risks associated with the purchases.
</li><li>Assist with data calls, FISMA reporting, compliance scanning and reporting, continuous monitoring and compiling reports for auditors.</li></ul></div>
 <div><ul><li>Bachelor&rsquo;s degree or equivalent training and experience in a computer-related field and at least 5 years of related experience.
</li><li>Strong knowledge of network security principles, protocols, and technologies (e.g., TCP/IP, DNS, VPN, SSL/TLS).
</li><li>Have a strong understanding of NIST security standards (National Institute of Standards and Technology), the ability to apply NIST-defined measures to harden information structure and review Cyber Security threat information and assist with mitigating identified vulnerabilities.
</li><li>Hands-on experience with security tools and technologies, such as SAML, OAUTH, SIEM, IDS/IPS, DLP, WAF, EDR, and vulnerability management systems.
</li><li>Familiarity with cloud computing platforms (e.g., AWS, Azure, GCP) from a security perspective.
</li><li>Excellent analytical, problem-solving, and communication skills with the ability to collaborate effectively with diverse teams and stakeholders.
</li><li>Strong commitment to continuous learning, professional development, and staying current with evolving cyber threats and security technologies.
</li><li>Preferred Certifications (please upload current certificates when applying):
<ul><li>Certified System Security Professional (CISSP)
</li><li>GIAC Security Essentials (GSEC)
</li><li>GIAC Information Security Professional Certification (GISP)
</li><li>Certified Ethical Hacker (CEH)
</li><li>Certified Information Security Manager (CISM)
</li><li>CompTIA Security Practitioner (CASP&amp;#43;)
</li></ul></li><li>The primary work location will be at the Losee Road facility located in North Las Vegas, Nevada.
</li><li>Work schedule for this position will be 4/10's, Monday - Thursday (subject to change).
<ul><li>Personnel may be requested by leadership to work in excess of 40 hours per week due to projects, activities, and emergencies; critical operational demands may occasionally require off-shift work.
</li></ul></li><li>Pre-placement physical examination, which includes a drug screen, is required. MSTS maintains a substance abuse policy that includes random drug testing.
</li><li>Must possess a valid driver's license.
</li></ul>MSTS is required by DOE directive to conduct a pre-employment drug test and background review that includes checks of personal references, credit, law enforcement records, and employment/education verifications. Applicants offered employment with MSTS are also subject to a federal background investigation to meet the requirements for access to classified information or matter if the duties of the position require a DOE security clearance. Substance abuse or illegal drug use, falsification of information, criminal activity, serious misconduct or other indicators of untrustworthiness can cause a clearance to be denied or terminated by DOE, resulting in the inability to perform the duties assigned and subsequent termination of employment. In addition, Applicants for employment must be able to obtain and maintain a DOE Q-level security clearance, which requires U.S. citizenship, at least 18 years of age. Reference DOE Order 472.2 , &ldquo;Personnel Security&rdquo;. If you hold more than one citizenship (i.e., of the U.S. and another country), your ability to obtain a security clearance may be impacted.
Department of Energy Q Clearance (position will be cleared to this level). Reviews and tests for the absence of any illegal drug as defined in 10 CFR Part 707.4 , &ldquo;Workplace Substance Abuse Programs at DOE Sites,&rdquo; will be conducted. Applicant selected will be subject to a Federal background investigation, required to participate in subsequent reinvestigations, and must meet the eligibility requirements for access to classified matter. Successful completion of a counterintelligence evaluation, which may include a counterintelligence-scope polygraph examination, may also be required. Reference 10 CFR Part 709 , &ldquo;Counterintelligence Evaluation Program.&rdquo;
MSTS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, disability, veteran status or other characteristics protected by law. MSTS is a background screening, drug-free workplace.
Annual salary range for this position is: $95,139.20 - $142,708.80.
Starting salary is determined based on the position market value, the individual candidate education and experience and internal equity.</div>

Senior Classified Security Engineering Analyst (Senior Cyber Security Analyst)

JFL Consulting

<div>Description: 
With more than twenty years of securing some of the U.S. Department of Defense and the Intelligence Community&rsquo;s most critical networks, JFL Consulting, LLC provides advanced network security solutions to a range of US Government and US commercial clients. Our cybersecurity operators are experts at assessing and defending mission-critical data and the networks that facilitate their operation. We are focused on delivering advanced products and industry best practices that meet each customer&rsquo;s unique requirements. Visit www.jflconsulting.com
Job Description
JFL Consulting, LLC is seeking a Senior Cyber Security Operator to support critical cybersecurity operations within highly secure environments. This role offers the opportunity to work on advanced network defense strategies, with a unique focus on passive vulnerability analysis: a specialized and low-impact method of identifying risks without active scanning. You&rsquo;ll play a key role in detecting anomalies, analyzing complex systems, and strengthening network security for high-value missions. This position is ideal for professionals who enjoy deep technical work, problem-solving, and contributing to meaningful national security efforts within a collaborative, mission-driven team.
Job Title: Senior Cyber Security Operator
Place of Performance: Pearl Harbor HI, 96701
Mandatory Requirements: Top Secret Clearance (SCI Eligible)
Experience Level: Senior-Level (8+ years in cybersecurity, 3+ years in passive vulnerability analysis)
Responsibilities:<ul><li>
Ensure the safe and proper functional operation of the toolkit and its components.</li><li>
Collect and document measures of performance per approved CONOPS.</li><li>
Analyze and document behaviors, characteristics, and attributes of a network&rsquo;s baseline activity within steady-state operations.</li><li>
Analyze and investigate potential anomalies or outliers from established baseline.</li><li>
Analyze and identify misconfigurations, faults, and vulnerabilities within the network&rsquo;s architecture, subcomponents, and utilized communication protocols.</li><li>
Determine root source of anomalies and extent of vulnerable findings for validation with system users and administrators.</li><li>
Document and report anomalies to appropriate channels for further investigation and notification.</li><li>
Document vulnerable findings and provide recommendations through appropriate channels that increase both security and operational capacity of the respective network.</li><li>
Recommend improvements to current operations for potential incorporation into the overall program.</li><li>
Collaborate with cross-functional teams to support incident response, system hardening, and policy development as needed.</li><li>
Additional duties as assigned</li><li>
5-10% Conus Travel</li></ul>
Requirements: 
Education:<ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred. Equivalent work experience may be considered in lieu of a degree.</li><li>
A master's degree is a plus.</li></ul>
Certifications:<ul><li>
Must hold an IAT Level II certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01&ndash;03, and as amended. (e.g., Security+ CE, CySA+, CCNA Security, GSEC).</li><li>
Must hold a CSSP Analyst certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01&ndash;03, and as amended. (e.g., CEH, CySA+, GCIA, GCIH).</li><li>
Preferred: Advanced certifications such as CISSP (Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or similar.</li></ul>
Experience:<ul><li>
Minimum 8 years in cybersecurity operations or analysis</li><li>
Minimum 3 years of experience with passive vulnerability detection techniques</li><li>
Experience supporting DoD or Intelligence Community networks</li></ul>
Technical Skills:<ul><li>
Practical experience with firewalls, network TAPs, IDS/IPS, endpoint protection, and other network defense technologies</li><li>
Adept in evaluating network protocols utilizing network analyzers, such as Wireshark, Tshark, and tcpdump</li><li>
Experienced in analyzing network datasets, including Zeek and firewall logs, to support threat hunting and security investigations.</li><li>
Experienced in leveraging data analysis platforms, such as Splunk, Kibana, and Arkime, to detect and analyze anomalous network activity</li><li>
Proficient in triaging Suricata alerts, tuning rules, and creating custom detections.</li></ul>
Knowledge:<ul><li>
In-depth understanding of network vulnerabilities and misconfigurations</li><li>
Strong knowledge of cybersecurity principles, adversary techniques, and detection/response strategies</li><li>
Experience working within the framework of a CONOPS or similar operational document</li><li>
Awareness of DoD cybersecurity frameworks (e.g., RMF, CMMC, NIST 800-53) and their application in secure system design and monitoring.</li><li>
Knowledge of common enterprise network architectures and defense mechanisms</li><li>
Experienced in analyzing TCP/IP, DNS, HTTP/S, SSL/TLS, SMB, and RDP protocols to identify vulnerabilities, misconfigurations, and indicators of malicious activity.</li></ul>
Soft Skills:<ul><li>
Strong analytical and investigative mindset</li><li>
Excellent documentation and reporting skills</li><li>
Effective communicator with ability to explain technical issues to both technical and non-technical audiences</li><li>
Comfortable working independently and as part of a cross-functional team</li></ul>
Competitive Benefits Package Includes:<ul><li>
100% employer-paid medical, dental, and vision for employees and dependents</li><li>
401(k) with 3% company contribution and immediate vesting</li><li>
Generous PTO policy (15 vacation, 5 sick, 2 personal days)</li><li>
Reimbursement for job-related certifications, generous training budget and company provided access to training platforms.</li></ul>
JFL Consulting, LLC is an Equal Opportunity Employer.
We do not discriminate against any applicant for employment on any legally recognized basis including, but not limited to: race, religion or creed, color, national origin, sex, age, disability, marital status, sexual orientation, genetic information, veteran status, status with regard to public assistance or any other protected class under federal, state or local statute. It is also the policy of JFL Consulting, LLC to provide reasonable accommodations for qualified individuals with disabilities.</div>

Sr. Cyber Security Analyst - Top Secret Clearance (SCI Eligible)

Leidos

Description <ul><li> We're a ' Family Friendly ' certified w orkplace - we understand the diverse roles our team members need to play within their own unique family setting and actively support them. </li></ul> O ur team feel Leidos is a g reat p lace to w ork . L earn more about our culture and benefits by visiting us here Do Work That Matters Leidos Australia delivers IT and airborne solutions that protect and advance the Australian way of life . Our 2000 local experts, backed by our global experience and network of partners, are working to solve the world's toughest challenges in government, intelligence, defence, aviation, border protection and health markets. Your New Role and Responsibilities As a Cyber Security GRC Analyst, you will be responsible for contributing cyber security subject matter expertise and advice to stakeholders and the broader team through analyses and intersection of the governance, risk, and compliance aspects of systems. This is an interesting role with broad responsibilities and scope that will allow you to test and hone your skills, whilst contributing to National Security, your responsibilities will include the following; <ul><li> Evaluate the effectiveness of security controls against the Australian Government ISM, Essential Eight, Cyberworthiness , NIST, other approved cyber security frameworks, and standard designs. </li><li> Conduct security, gap, and compliance audits, including reporting and documentation management. </li><li> Maintain, verify, and update accreditation documentation sets for each environment on an ongoing basis. </li><li> Develop and submit high-quality artefacts in a timely manner , including risk assessments, security documentation, and compliance reports. </li><li> Apply cyber security governance, risk, and compliance principles in practice, including preparation of risk registers, security plans, and audit results. </li></ul> What You'll Bring to Make An Impact <ul><li> Demonstrated customer focus and motivation to deliver outcomes aligned with customer mission needs, supported by relevant education and/or practical experience. </li><li> Over two years' experience in Cybersecurity GRC, audit, risk, or compliance roles, with proven ability to produce high-quality security assessment documentation. </li><li> Familiarity with risk management frameworks including ISO 31000, FAIR, OCTAVE, and NIST RMF, and holding certifications such as CRISC, CISM, CISA, CISSP, ISO 27001 or similar. </li><li> Excellent communication and stakeholder management skills, with strong attention to detail and sound organisational abilities. </li><li> Experience working with Defence is desirable. </li></ul> Don't worry if you don't tick all the boxes - if you meet most of them, we encourage you to submit your application . We're most interested in your strengths, what you want to learn and how far you want to go. Successful candidates will be required to be Australian Citizens and hold and maintain a minimum NV-2 Australian Government Security Clearance. Di verse Team Members , Shared Values and a Common Purpose Providing our customers with smarter solutions takes an incredible team with diversity of thought, experience and perspectives d riving innovation. Inclusion is at the heart of our culture and is one of our core values . I t's about creating a workplace where everyone can do important work, feels welcome, valued , and respected, and has equal access to opportunities to thrive. Paul Chase - Chief Executive , Leidos Australia. Leidos Australia is an equal opportunities organisation and is committed to creating a truly inclusive workplace . We welcome and encourage applications from Aboriginal and Torres Strait Islanders, culturally and linguistically diverse people, people with disabilities, veterans, neurodiverse people, and people of all genders, sexualities, and age groups. Our five A dvocacy G roups (Women and Allies Network, Young Professionals, Defence & Emergency Services, Action for Accessibility and Abilities and Pride+) provide an opportunity for team members to connect and collaborate on shared interests, and work to support and celebrate our diverse community . Next Steps <ul><li> To apply for this role, follow the links or apply via our Careers page. </li><li> Recruitment process - interviews a nd background checks . </li><li> Applicants may also need to meet International Traffic in Arms Regulations (ITAR) requirements. In certain circumstances this can place limitations on persons who hold dual nationality, permanent residency or are former nationals of certain countries as per ITAR 126.1. </li><li> We are committed to making our recruitment process accessible to all candidates. Please contact our C areers team if you 'd like to discuss any additional support during your application or throughout the recruitment process . </li></ul> At Leidos, we don't want someone who "fits the mold"-we want someone who melts it down and builds something better. This is a role for the restless, the over-caffeinated, the ones who ask, "what's next?" before the dust settles on "what's now." If you're already scheming step 20 while everyone else is still debating step 2 good. You'll fit right in. Original Posting: For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit . Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at . Securing Your Data Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at . If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission . Commitment to Non-Descrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Cyber Security GRC Analyst

Search 10000+ Cyber security analyst jobs near you this December. New roles added regularly across leading industries. Apply today.

10000 cyber security analyst jobs NEAR_ME

Cyber Security Analyst

Cyber Security Analyst

Senior Cyber Security Analyst - APS6 (EA2025/218)

Senior Classified Security Engineering Analyst (Senior Cyber Security Analyst)

Sr. Cyber Security Analyst - Top Secret Clearance (SCI Eligible)

Cyber Security GRC Analyst

Cyber Security GRC Analyst