cybersecurity analyst

Heritage Bank NA

<div>Description:

Position Summary
The Cybersecurity Analyst is responsible for protecting the bank's information assets, systems, and data through proactive threat analysis, security operations, and compliance with applicable regulatory and industry frameworks. This role serves as a key contributor to Heritage Bank's information security program, with ownership of information security management alignment, AI security governance, and continuous monitoring. Working closely with the VP of Information Technology and in close partnership with the Network Security Engineer, this position ensures the confidentiality, integrity, and availability of bank systems while fostering a culture of security awareness across the organization.
Core Responsibilities
Security Operations &amp; Threat Management<ul><li>
Monitor SIEM systems and alert on anomalies, threats, and policy violations</li><li>
Define detection rules and policies for IDS/IPS; own EDR and email security controls</li><li>
Own the vulnerability management program: coordinate assessments, assign risk ratings, and track remediation with the Network Security Engineer</li><li>
Perform threat intelligence analysis and translate findings into defensive action</li><li>
Lead security analysis and forensic response during incidents; coordinate network-level containment with the Network Security Engineer</li><li>
Define patching strategy and standards; partner with the Network Security Engineer on execution</li></ul>
Information Security Management &amp; Regulatory Compliance<ul><li>
Own alignment to information security management standards and best practices</li><li>
Maintain the ISMS including risk register, statement of applicability, and control documentation</li><li>
Coordinate internal audits and gap analyses against applicable cybersecurity frameworks and FFIEC guidance</li><li>
Support regulatory examinations; prepare and present security posture documentation</li><li>
Develop and maintain security policies, standards, and procedures</li><li>
Govern access control policies and conduct privilege access reviews with the Network Security Engineer</li></ul>
AI Security &amp; Emerging Technology Risk<ul><li>
Develop and maintain the bank's AI security framework, governing the secure adoption and use of AI/ML tools and platforms</li><li>
Assess risks associated with generative AI, third-party AI integrations, and internal AI-assisted workflows</li><li>
Define controls for AI model governance including data privacy, bias risk, adversarial inputs, and output integrity</li><li>
Evaluate AI vendor security practices and ensure appropriate contractual and technical safeguards are in place</li><li>
Monitor the evolving AI threat landscape and provide guidance on emerging risks to leadership</li><li>
Partner with business units to establish acceptable use policies for AI tools in alignment with bank risk appetite</li></ul>
Security Awareness &amp; Training<ul><li>
Design and deliver ongoing security awareness training for all bank staff, including phishing simulations</li><li>
Serve as a subject matter expert for staff on cybersecurity best practices and emerging threats</li><li>
Promote a security-first culture in alignment with Heritage Bank's values</li></ul>
Third-Party &amp; Vendor Risk<ul><li>
Conduct cybersecurity due diligence on third-party vendors and technology providers</li><li>
Review vendor security assessments (SOC 2, penetration tests, questionnaires) and escalate gaps</li><li>
Provide cybersecurity risk assessments to inform vendor onboarding decisions; collaborate with procurement and the Network Security Engineer on ongoing third-party risk monitoring</li></ul>
Documentation &amp; Reporting<ul><li>
Maintain accurate security documentation including risk registers, incident logs, and audit evidence</li><li>
Produce regular cybersecurity metrics and reporting for IT leadership and senior management</li><li>
Define security requirements for disaster recovery and business continuity plans; support testing and validation in partnership with the Network Security Engineer</li></ul>
Bank Standards
At Heritage Bank, we are committed to a customer-centric, service-driven culture. We operate under the following core standards:<ul><li>
Mission: Help people succeed financially.</li><li>
Ethics: Always do the right thing.</li><li>
Solutions: Bring innovative solutions to challenges.</li><li>
Ownership: Take accountability and learn from our mistakes.</li><li>
Positivity: Bring energy and enthusiasm to everything we do.</li></ul>
Compensation &amp; Benefits
Get ready to be rewarded! Full-time team members enjoy a comprehensive benefits package including paid time off, paid holidays, and even paid volunteer days. Your health is covered with medical, dental, and vision insurance, plus plan for your future with our 401(k) and ESOP retirement plans. Enjoy additional benefits and incentives consistent with our company policy. Join us and discover how rewarding your career can be!
Disclaimer
This job description outlines the general nature of the role and is not intended to be all-inclusive. Duties, responsibilities, and benefits may change as business needs evolve. Employment is at will, meaning either the employee or the Company may end the employment relationship at any time, consistent with applicable law.
We are an Equal Opportunity Employer and value diversity at all levels of the organization.
Requirements:

Education &amp; Experience<ul><li>
Bachelor&rsquo;s degree in Information Technology, Computer Science, Cybersecurity or related field (or equivalent experience)</li><li>
5+ years of experience in: network engineering, IT infrastructure or cybersecurity operations. Preferably in financial services or a regulated industry.</li></ul>
Technical Skills<ul><li>
Strong knowledge of routing and switching (Cisco, Aruba, or similar)</li><li>
Experience with firewalls (e.g., Fortinet, Palo Alto, Cisco ASA)</li><li>
Familiarity with VPNs, VLANs, QoS, and network segmentation</li><li>
Understanding of cloud networking (Azure/AWS)</li><li>
Knowledge of cybersecurity principles and frameworks</li></ul>
Key Competencies<ul><li>
Strong problem-solving and analytical skills</li><li>
Ability to work independently and manage multiple priorities</li><li>
Excellent communication skills for both technical and non-technical stakeholders</li><li>
High attention to detail and commitment to security and compliance</li><li>
Proactive mindset with a focus on continuous improvement</li></ul>
Work Environment &amp; Expectations<ul><li>
On-call availability for critical incidents and maintenance windows</li><li>
Occasional travel to branch locations</li><li>
Ability to work in a fast-paced, highly regulated environment</li></ul></div>

Cybersecurity Analyst

Momentum

<div><div>Momentum is a respected collection of independent companies, including PMG, Koddi, Further. We serve as a premier global business transformation partner for over 125 of the Fortune 500 brands. With 1,400 global employees and $5B in media spend under management, we foster a fast-growing, values-driven, people-first environment where you can thrive.

Our portfolio of companies partners with some of the world's most iconic and ambitious brands. We combine scalability with a solutions-oriented approach to deliver fast-paced, innovative results for our customers while creating meaningful growth opportunities for our teams.

If you are looking for opportunities to grow in your career and are passionate about being at the forefront of data and technology, and driving rapid innovation in the future of commerce, we would love to talk with you about joining Momentum.

We believe that a culture of belonging, inclusion, and diversity is key to empowering our team members to thrive both personally and professionally. Living out our values is not just a goal; it's a daily practice! For more information, please visit www.momentum.com.</div> 
The Opportunity

This is an entry-level security role for a recent graduate ready to learn by doing. You will support day-to-day security operations across a holding company and portfolio of businesses, working directly alongside the Cybersecurity Operations Engineer and GRC &amp; Risk Analyst on monitoring, vulnerability tracking, audit activities, and compliance support.

The work is real from week one &mdash; defined runbooks, close mentorship, and clear escalation paths. The goal is a well-rounded practitioner who can specialize in either security operations or GRC within 12&ndash;18 months. We operate at 100% internal AI adoption. Using AI tools daily is expected from day one.

Join us in this full-time role, based in our Dallas Office at the Link: 2601 Olive Street, Dallas, TX. Be part of a vibrant community where amazing people, data &amp; insights, and perpetual innovation converge to shape the future of digital commerce! 


About This Role at Momentum

As an Associate Cybersecurity Analyst on our Cybersecurity team at Momentum, your days will be dynamic and filled with opportunities to contribute to our mission. Here's a glimpse into what your overall responsibilities might look like:
<ul>
<li>Security Monitoring &amp; Alert Triage
<ul><li>Review alerts in MDR/SOC tooling. Identify false positives and escalate suspicious activity to the Cybersecurity Operations Engineer per defined runbooks.</li>
<li>Monitor security dashboards during assigned windows. Document findings clearly for handoff and maintain accurate alert disposition records.</li>
<li>Support the development and refinement of triage runbooks as you build environment familiarity.</li>
</ul></li><li>Vulnerability Management
<ul><li>Run scheduled vulnerability scans across defined asset groups. Validate and categorize findings under guidance.</li>
<li>Track remediation progress and update the vulnerability register. Flag overdue patch management SLAs for escalation and help generate leadership reports.</li>
</ul></li><li>Incident Response Support
<ul><li>During active incidents, gather requested evidence, document timelines, and support investigation tasks under direct guidance.</li>
<li>Maintain IR documentation: logs, timelines, and post-incident notes. Participate in tabletop exercises as observer and note-taker.</li>
</ul></li><li>GRC &amp; Compliance Support
<ul><li>Collect and organize audit evidence for SOC 2 and ITGC activities. Complete control checklists accurately and on schedule under GRC Analyst direction.</li>
<li>Support client security questionnaire responses by gathering documentation and evidence from internal systems.</li>
<li>Assist with policy attestation tracking, vendor risk register updates, and NIST CSF remediation documentation.</li>
</ul></li><li>Documentation &amp; Security Awareness
<ul><li>Support KnowBe4 campaign administration: track completion rates, pull reporting data, and flag non-completion for follow-up.</li>
<li>Maintain accurate documentation of completed tasks, findings, and escalations. Use AI tools to accelerate documentation and draft initial content for senior review.</li></ul></li> 
</ul>
Qualifications

Required
<ul>
<li>Graduated in Winter 2025 or Spring 2026 with a Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field.</li>
<li>Foundational understanding of cybersecurity concepts: CIA triad, common attack types, network fundamentals, and basic security controls.</li>
<li>Exposure to GRC concepts - SOC 2, NIST CSF, or compliance frameworks - through coursework, certification study, or internship.</li>
<li>Strong written communication. You document clearly and completely.</li>
<li>Active daily use of AI tools - at Momentum, we have 100% internal AI adoption.</li>
<li>Genuine curiosity about security: threat news, home labs, security blogs.</li>
</ul>
Preferred Certifications
<ul>
<li>Security+ or equivalent entry-level certification: CompTIA Security+, Google Cybersecurity Certificate, or similar.</li>
</ul>
Preferred Technical Experience
<ul>
<li>Hands-on experience with SIEM platforms, vulnerability scanners, or MDR tooling through coursework, labs, or CTF competitions.</li>
<li>Exposure to CrowdStrike, Okta, Jamf, or similar enterprise security tooling.</li>
<li>Basic scripting or automation in Python, Bash, or PowerShell applied to a security or IT task.</li>
<li>Internship or co-op experience in IT, security operations, or GRC.</li></ul> 


Commitment to Diversity and Inclusion at Momentum

At Momentum, our commitment to change for the better is reflected in our dedication to fostering a culture of belonging, inclusion, and diversity. We recognize diversity and inclusion as key components of our company's success and growth. Recognizing the ongoing journey ahead, we are determined to make lasting impacts through the collective efforts of our Leadership team, People &amp; Culture team, and every employee.

Momentum is an equal opportunity employer, considering all qualified applicants regardless of characteristics protected by law. These include, but are not limited to, race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, color, ancestry, and Veteran status. We actively seek qualified applicants from diverse backgrounds, with no consideration of criminal histories, in alignment with applicable legal requirements.

Should a reasonable accommodation be necessary for the application process and beyond, we are eager to review and provide reasonable accommodations as needed, in compliance with applicable laws. 


Total Rewards

At Momentum, we prioritize the well-being of the whole individual. We are committed to supporting our people in every moment that matters on their journey with us! We are pleased to offer a comprehensive total rewards package designed to provide protection, peace of mind, and a focus on overall well-being while helping our people plan for the future.

The base salary range for this position may vary based on location. Actual compensation will be determined by role, level, and location, considering additional factors such as job-related skills, experience, and relevant education or training. For roles eligible for remote work, the base salary is tailored to the designated work location. In addition to the base salary, candidates may be eligible to receive a discretionary annual bonus, determined based on both the company's business performance and individual contributions. The People &amp; Culture team will provide specific details during the hiring process.

We take pride in offering a comprehensive benefits package for our full-time employees, encompassing healthcare benefits, a 401(k) plan with an employer match, short-term and long-term disability coverage, life insurance, paid time off, parental leave, and various paid holidays, among other perks.

Our workplace offers opportunities for involvement in a wide range of challenging and impactful projects, across diverse industries and business models, fostering career advancement and development within our growing organization. The culture is highly collaborative and supportive, contributing to a fulfilling professional journey. 


Note on Confidentiality

Any personal data collected during the application process will be treated with the utmost confidentiality and privacy.</div>

Associate Cybersecurity Analyst | Early Career

Deaconess Health System

<div><h3 class="jobSectionHeader">Help Protect the Technology That Supports Patient Care</h3>

We are seeking a skilled Cybersecurity Risk Analyst to join our Information Security team. In this role, you will help identify, evaluate, monitor, and reduce cybersecurity risks across the organization while supporting the security of the systems and technologies that enable patient care.

You will work closely with IT, Security, and business stakeholders to assess threats, analyze vulnerabilities, strengthen security controls, and support compliance efforts. Your expertise will help guide risk-based decisions, improve security posture, and ensure the organization remains resilient against evolving cybersecurity threats.

This is an excellent opportunity for a cybersecurity professional who enjoys problem-solving, risk analysis, collaboration, and making a meaningful impact in a healthcare environment.
<h3 class="jobSectionHeader">
What You'll Do</h3>
<ul><li>Conduct cybersecurity risk assessments for systems, applications, infrastructure, and business processes</li>
<li>Identify, evaluate, and monitor security risks across the organization</li>
<li>Assess third-party vendor risks and recommend appropriate mitigation strategies</li>
<li>Analyze security incidents, vulnerabilities, and emerging threats to determine potential business impact</li>
<li>Maintain risk registers, dashboards, and other risk management documentation</li>
<li>Develop reports and communicate risk findings, trends, and recommendations to stakeholders and leadership</li>
<li>Support compliance with regulatory requirements, industry frameworks, and organizational security standards</li>
<li>Assist with internal and external audits by providing documentation and evidence of security controls</li>
<li>Contribute to the development and maintenance of cybersecurity policies, standards, and procedures</li>
<li>Recommend and help implement security controls that reduce organizational risk</li>
<li>Partner with IT, Security, and operational teams to support risk management initiatives</li>
<li>Provide guidance to stakeholders on secure practices and cybersecurity risk reduction</li>
</ul><h3 class="jobSectionHeader">What We&rsquo;re Looking For</h3>
<ul><li>Bachelor's degree in Cybersecurity, Information Technology, or a related field</li>
<li>Four or more years of experience in cybersecurity, governance, risk and compliance (GRC), or a related field</li>
<li>Experience conducting risk assessments and evaluating cybersecurity risks</li>
<li>Knowledge of cybersecurity frameworks and regulatory standards, such as NIST, HIPAA, and PCI-DSS</li>
<li>Understanding of vulnerability management, threat analysis, and security control implementation</li>
<li>Familiarity with SIEM platforms, risk management tools, and cybersecurity monitoring solutions</li>
<li>Knowledge of network security, cloud security, and data protection principles</li>
<li>Strong analytical, problem-solving, and critical-thinking skills</li>
<li>Excellent communication skills with the ability to explain technical risks to non-technical stakeholders</li>
<li>Ability to manage multiple priorities and work effectively across departments</li>
</ul>
Preferred:
<ul>
<li>Professional certifications such as CISM, CISA, CRISC, or similar cybersecurity credentials</li>
<li>Experience supporting cybersecurity compliance, audit, and governance initiatives</li>
<li>Experience working within a healthcare or highly regulated environment</li>
</ul><h3 class="jobSectionHeader">What We Offer</h3>
<ul><li>An opportunity to help protect the systems and technologies that support patient care and business operations</li>
<li>Meaningful work that combines cybersecurity, risk management, compliance, and strategic problem-solving</li>
<li>Exposure to enterprise technology environments, security programs, and emerging cybersecurity challenges</li>
<li>Opportunities to lead and contribute to security improvement initiatives across the organization</li>
<li>Collaboration with Information Security, IT, operational, and leadership teams</li>
<li>Professional growth through ongoing learning, certifications, and hands-on cybersecurity experience</li>
<li>A supportive environment that values innovation, continuous improvement, and knowledge sharing</li>
<li>A stable organization where your expertise directly contributes to organizational resilience and security</li>
<li>A culture built on teamwork, accountability, and protecting what matters most</li></ul></div>

Cybersecurity Risk Analyst

Booz Allen Hamilton

<div>The Opportunity:
Cyber threats are everywhere, and the constantly evolving nature of these threats can make understanding them seem overwhelming to the global enterprise. In all of this &ldquo;cyber noise,&rdquo; how can these organizations understand their risks and how to mitigate them? The answer is you. We need your knowledge as an information security risk specialist to help break down complex threats into manageable plans of action.
As an information security risk specialist on our team, you&rsquo;ll work with military leaders to discover their cyber risks, understand applicable policies, and develop a mitigation plan. You&rsquo;ll get technical and personnel details from SMEs to assess the entire threat landscape. Then, you&rsquo;ll help your team guide your client through a plan of action with presentations, white papers, and milestones.
You&rsquo;ll work on translating security concepts for your client so they can make the best decisions to secure their mission-critical systems. This is your opportunity to take an active role in information security while growing your skills in cybersecurity.
Work with us as we protect our nation&rsquo;s cyber infrastructure.
Join us. The world can&rsquo;t wait.
You Have:
<ul><li>5+ years of experience in professional services, Federal government, or Federal advising
</li><li>Experience in cybersecurity to include evaluating cybersecurity risk assessments or performing supply chain risk management analysis
</li><li>Experience with writing or drafting executive or formal senior-level correspondence or material such as organization level policies, strategies, and guidance to support decision-making
</li><li>TS/SCI clearance
</li><li>Bachelor&rsquo;s degree
</li></ul>Nice If You Have:
<ul><li>Experience with supporting DoD-level organizations, including Action Officer duties and staffing processes or tools
</li><li>Experience facilitating meetings, including working groups and conferences, and associated pre and post meeting activities
</li><li>Knowledge of NIST 800 series publications
</li><li>Knowledge of Joint instructions and manuals
</li><li>Knowledge of DoD policy around non-traditional IT Cybersecurity, including supply chain risk management
</li><li>Possession of strong verbal and written communication skills as well as organizational, problem solving, and interpersonal skills
</li></ul>Clearance:
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.
Compensation
At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen&rsquo;s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.
Salary at Booz Allen is determined by various factors, including but not limited to location, the individual&rsquo;s particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $62,000.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen&rsquo;s total compensation package for employees. This posting will close within 90 days from the Posting Date.
Identity Statement
As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.
Candidate AI Usage Policy
AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided .
Work Model
 
Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.
<ul><li>Remote : If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.
</li><li>Hybrid : If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.
</li><li>Onsite : If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.
</li></ul>Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.</div>

Cybersecurity Program Analyst

9th Way Insignia

<div><div>9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, analytics, process automation, and artificial intelligence. Learn more about 9th Way Insignia at https://9thwayinsignia.com/.

Application password: Niner</div>
Position Overview

The Cyber Security Subject Matter Expert serves as a senior technical advisor responsible for guiding the design, implementation, modernization, and continuous improvement of enterprise cyber defense capabilities. This role provides expert-level support across cybersecurity strategy, architecture, operations, risk management, compliance, incident response, and emerging technology adoption. The Cyber Security SME will place strong emphasis on innovative approaches to implementing cyber defenses, ensuring the organization is not only compliant with security requirements but also forward-looking, adaptive, and resilient against evolving threats.

Responsibilities
<ul>
<li>Provide expert cybersecurity guidance across enterprise systems, cloud environments, applications, networks, and mission platforms.</li>
</ul><ul><li>Lead the development and implementation of innovative cyber defense strategies that improve detection, prevention, response, and recovery capabilities.</li>
</ul><ul><li>Assess current cyber defense posture and recommend practical, scalable improvements aligned with mission, business, and regulatory requirements.</li>
</ul><ul><li>Design and support implementation of layered defense models, including Zero Trust, endpoint protection, identity-based security, network segmentation, encryption, threat monitoring, and secure cloud controls.</li>
</ul><ul><li>Evaluate emerging cybersecurity technologies, tools, and methodologies to determine applicability, maturity, risk, and operational value.</li>
</ul><ul><li>Support development of cybersecurity roadmaps, implementation plans, maturity models, and modernization strategies.</li>
</ul><ul><li>Advise leadership on cyber risk, threat trends, security gaps, mitigation strategies, and investment priorities.</li>
</ul><ul><li>Collaborate with technical teams, program managers, architects, engineers, system owners, and business stakeholders to integrate security into planning, development, operations, and sustainment activities.</li>
</ul><ul><li>Support security assessments, risk assessments, authorization activities, audits, and compliance reviews.</li>
</ul><ul><li>Provide expertise in federal cybersecurity frameworks and standards, including NIST, RMF, FISMA, FedRAMP, CMMC, CIS Controls, and Zero Trust guidance.</li>
</ul><ul><li>Recommend automation, analytics, artificial intelligence, machine learning, and security orchestration approaches to improve cyber defense effectiveness.</li>
</ul><ul><li>Support incident response planning, tabletop exercises, root cause analysis, and lessons-learned activities.</li>
</ul><ul><li>Develop cybersecurity policies, procedures, playbooks, technical guidance, briefings, and executive-level decision materials.</li>
</ul><ul><li>Mentor junior and mid-level cybersecurity staff and promote knowledge sharing across technical teams.</li>
</ul><ul><li>Identify opportunities to reduce risk, improve efficiency, strengthen resilience, and advance the organization's cyber maturity.</li>
</ul><ul><li>This position may perform other duties as assigned. The responsibilities listed above are representative and not intended to be all-inclusive.</li>
</ul>
Innovation-Focused Cyber Defense Responsibilities
<ul>
<li>Develop creative, mission-aligned approaches to implementing cybersecurity controls without unnecessarily slowing business operations.</li>
</ul><ul><li>Promote proactive defense concepts such as threat-informed defense, continuous monitoring, attack surface reduction, deception technology, behavioral analytics, and purple-team collaboration.</li>
</ul><ul><li>Recommend ways to use automation and orchestration to reduce manual cyber response actions and improve response time.</li>
</ul><ul><li>Integrate cyber threat intelligence into defensive planning, vulnerability prioritization, and operational decision-making.</li>
</ul><ul><li>Identify opportunities to improve security through secure-by-design, privacy-by-design, and resilience-by-design principles.</li>
</ul><ul><li>Support pilot programs, proofs of concept, and technology evaluations for new cyber defense capabilities.</li>
</ul><ul><li>Translate emerging cyber risks into actionable defense strategies that are understandable to both technical and non-technical stakeholders.</li></ul> 


Requirements
<ul>
<li>Master's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field. Additional relevant experience may be considered in lieu of degree.</li>
</ul><ul><li>10+ years of cybersecurity experience, including experience supporting enterprise-level security programs.</li>
</ul><ul><li>Demonstrated experience advising senior leaders, program managers, and technical teams on cybersecurity risk and defense strategies.</li>
</ul><ul><li>Strong knowledge of cybersecurity architecture, security engineering, vulnerability management, incident response, identity and access management, cloud security, and continuous monitoring.</li>
</ul><ul><li>Experience implementing or advising on cybersecurity frameworks such as NIST 800-53, NIST 800-37, NIST 800-207, FISMA, FedRAMP, CMMC, CIS Controls, or ISO 27001.</li>
</ul><ul><li>Experience developing cybersecurity strategies, roadmaps, risk assessments, policies, procedures, and executive briefings.</li>
</ul><ul><li>Experience with tools such as Splunk, Microsoft Sentinel, Tenable, Qualys, CrowdStrike, Palo Alto, ServiceNow GRC/IRM, Security Hub, Azure Security Center/Microsoft Defender for Cloud, or similar platforms</li>
</ul><ul><li>Ability to evaluate technical risks and translate them into business or mission impacts.</li>
</ul><ul><li>Strong written and verbal communication skills.</li>
</ul><ul><li>Ability to work across multiple teams and influence decisions without direct authority.</li>
</ul><ul><li>Possess and maintain at least one of the below certifications&quot;</li>
</ul><ul><li>CISSP</li>
</ul><ul><li>GIAC Certified Detection Analyst</li>
</ul><ul><li>GIAC Certified Forensic Analyst</li>
</ul><ul><li>GIAC Certified Intrusion Analyst</li>
</ul><ul><li>GIAC Network Forensic Analyst</li>
</ul><ul><li>GIAC Penetration Tester (GPEN)</li>
</ul><ul><li>GIAC Reverse Engineering Malware (GREM)</li>
</ul><ul><li>GIAC Security Expert (GSE)</li>
</ul><ul><li>ISC2 Certified Information System Security</li>
</ul>
Preferred / Desired
<ul>
<li>Experience with Zero Trust architecture, cloud security, DevSecOps, security automation, cyber analytics, SIEM/SOAR, and threat-informed defense.</li>
</ul><ul><li>Experience supporting Authority to Operate, RMF packages, security control assessments, POA&amp;Ms, and continuous monitoring.</li>
</ul><ul><li>Experience leading cyber modernization initiatives or enterprise security transformation efforts.</li>
</ul><ul><li>Familiarity with AI-enabled cybersecurity, machine learning-based detection, automated response, and advanced threat analytics</li>
</ul>
Location

This position is remote with periodic travel based upon customer, business development, and operational requirements. Occasional travel to headquarters in Ashburn, Virginia and customer locations is expected.<div>
9th Way Insignia's range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Clearance/Background Investigation 
Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Benefits 
Eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&amp;D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Additional resources include our Employee Assistance Program (EAP) and Traveling Assistance.

Legal 
We're an equal employment opportunity employer that empowers our people to fearlessly drive change &ndash; no matter their race, color, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, age, marital status, sexual orientation, gender identity, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, or local law.</div></div>

Cyber Security SME

Accord Technologies Inc

<div>
 
 Title: Security Analyst - Intermediate
 
 
 Location: Columbia, SC (locals needed)
 
 
 
 
 Duration : 12 months
 
 
 
 
 Work type: Hybrid
 
 
 Position type: W2 contract
 
 
 
 
 Full Job Description
 
 
 
 This position supports the agency s cybersecurity and data protection operations, with a focus on
 
 DLP, Insider Risk Management, Copilot/AI data security, auditing, vendor security reviews, and device patching.
 
 
 
 Bachelor s degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered.
 
 
 Security certification such as
 
 CompTIA Security+ or GIAC Security Essentials (GSEC)
 
 is required.
 
 
 3+ years of experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
 
 
 3+ years of hands-on experience working with data protection technologies such as
 
 data loss prevention (DLP),
 
 insider risk management tools, and
 
 data security posture management for AI (DSPM for AI)
 
 .
 
 
 3+ years of experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.
 
 
 3+ years of collaborating with technical and nontechnical teams to resolve security issues and supporting
 
 
 Certifications:
 
 Microsoft SC100, SC200, CEH, or an Associate level CISSP.
 
 
 
 Experience working with
 
 AI driven security tools, Cortex, particularly DSPM
 
 platforms designed to manage sensitive data used by AI systems
 
 
 Experience finetuning
 
 DLP policies, refining insider risk alerts,
 
 or supporting data governance programs
 
 
 Familiarity with
 
 Azure security, identity-based access controls, conditional access,
 
 and
 
 security automation or scripting
 
</div>

IT Security Analyst

GovCIO

<div>Overview:
<div>
GovCIO is currently hiring for a remote Cyber Threat Analyst to support the US Courts. This position will be within United States and will be fully remote.
</div>Responsibilities:
<div>
The Threat Intel Analyst will use their expert knowledge of malicious software to research and analyze cyber threats, report their findings, use their intelligence to predict similar attacks, and help to counter the activities of cybercriminals for the organization.</div><div></div><div> 
Job duties include:</div><ul><li>
Conduct cyber threat analysis, identify mitigation and/or remediation courses of action; develop actionable intelligence used to protect organizational IT assets</li><li>
Utilize Threat Intelligence and Threat Models to create threat hypotheses</li><li>
Prepare and report risk analysis and threat findings</li><li>
Create, recommend, and assist with development of new security content as the result of hunt missions to include signatures, alerts, workflows, and automation</li><li>
Coordinate with different teams to improve threat detection, response, and improve overall security posture of the Enterprise</li><li>
Proactively and iteratively search through systems and networks to detect advanced threats</li><li>
Analyze host, network, and application logs in addition to malware and code</li><li>
Identify, track and investigate high priority threat campaigns, malicious actors with the interest, capability and TTPs (Techniques, Tactics and Procedures)</li><li>
Bring a comprehensive understanding, analyzing and tracking the cyber threat landscape, including identifying and analyzing cyber threats actors, APT TTPs and/or activities to enhance cybersecurity posture of the IT operating environment</li><li>
Implement defined procedures for remediation, or make an informed decision to escalate</li></ul>
Qualifications:
<ul><li>Bachelor's with 8+ years of cyber threat analysis experience (or commensurate experience)</li><li><div>
The candidate should have at minimum ONE of the following certifications:</div><ul><li>
Certified Information System Security Professional (CISSP).</li><li>
SANS - GCIA Intrusion Analyst</li><li>
SANS - GREM Reverse Engineering Malware</li><li>
SANS - GISF Security Fundamentals SANS - GXPN Exploit Researcher and Advanced Penetration Tester</li><li>
SANS - GMON Continuous Monitoring Certification</li><li>
OSCP (Certified Professional)</li><li>
OSCE (Certified Expert)</li><li>
OSWP (Wireless Professional)</li><li>
OSEE (Exploitation Expert)</li><li>
CCSP Certified Cloud Security Professional</li><li>
LPT Licensed Penetration Tester</li><li>
ECSA EC-Council Certified Security Analyst</li></ul></li></ul><div> 
Clearance Required: Must be able to attain and maintain an AOUSC Public Trust</div>
Posted Salary Range: USD $108,310.00 - USD $160,000.00 /Yr.</div>

Cyber Threat Analyst

Search 828+ Cybersecurity analyst jobs near you this July. New roles added regularly across leading industries. Apply today.