cybersecurity business analyst

Deloitte

<div>Our Deloitte Cyber team understands the unique challenges and opportunities businesses face in cybersecurity. Join our team to deliver powerful solutions to help our clients navigate the ever-changing threat landscape. Through powerful solutions and managed services that simplify complexity, we enable our clients to operate with resilience, grow with confidence, and proactively manage to secure success. 
 
Recruiting for this role ends on April 30th, 2026. 
 
Work you'll do 
<ul><li>
Processes, interprets and documents business processes, products, services and software through analysis of data.</li><li>
Identify business areas that can be improved to increase efficiency and strengthen business processes.
</li><li>The role of a business analyst is to ensure business efficiency increases.</li></ul> 

The Team 
 
Deloitte's Government and Public Services (GPS) practice - our people, ideas, technology and outcomes-is designed for impact. Serving federal, state, &amp; local government clients as well as public higher education institutions, our team of professionals brings fresh perspective to help clients anticipate disruption, reimagine the possible, and fulfill their mission promise. 
 
Our Enterprise Security offering embeds security in all aspects of digital transformation by securing a client's technical backbone while enabling secure digital transformation. Includes security architecture, secure development and deployment, end-to-end cyber cloud capabilities, application security, and security for emerging technologies and connected products. 
 
Qualifications 
 
Required: 
<ul><li>
Bachelor's degree.</li><li>
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.</li><li>
Active TS/SCI clearance.</li><li>
5 + years within the following:</li><li><ul><li>
Gap Analysis</li><li>
Project Management</li><li>
Stakeholder Communication</li><li>
Strategic Planning</li></ul></li></ul> 
The wage range for this role takes into account the wide range of factors that are considered in making compensation decisions including but not limited to skill sets; experience and training; licensure and certifications; and other business and organizational needs. The disclosed range estimate has not been adjusted for the applicable geographic differential associated with the location at which the position may be filled. At Deloitte, it is not typical for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on the facts and circumstances of each case. A reasonable estimate of the current range is $113,100 to $188,500. 
 
You may also be eligible to participate in a discretionary annual incentive program, subject to the rules governing the program, whereby an award, if any, depends on various factors, including, without limitation, individual and organizational performance.</div>

Business Analyst, TS/SCI

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Cyber Threat Intelligence Analyst Job Description</h1>
Position: Cyber Threat Intelligence Analyst 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Cyber Threat Intelligence Analyst supports the Small Business Administration (SBA) Enterprise Cybersecurity Services (ECS) program by delivering advanced cyber threat intelligence, threat analysis, proactive threat hunting, and operational cybersecurity support services. 
The Cyber Threat Intelligence Analyst is responsible for collecting, analyzing, correlating, and disseminating actionable cyber threat intelligence to support the SBA Security Operations Center (SOC), cybersecurity operations, incident response activities, and enterprise risk mitigation efforts. The position supports 24x7x365 cybersecurity operations through advanced analysis of indicators of compromise (IOCs), adversary tactics, techniques, and procedures (TTPs), emerging vulnerabilities, and threat actor activity impacting federal information systems and cloud environments.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Provide cyber threat intelligence and operational analysis support for the SBA SOC in support of Task Area 3.5.3 Cybersecurity Operations Support.</li><li>
Conduct proactive cyber threat hunting activities across enterprise systems, cloud environments, endpoints, and network infrastructure.</li><li>
Analyze indicators of compromise (IOCs), threat actor tactics, techniques, and procedures (TTPs), malware behaviors, and emerging cyber threats.</li><li>
Monitor and evaluate cyber threat intelligence feeds, vendor reporting, CISA advisories, US-CERT alerts, and external intelligence sources.</li><li>
Perform advanced correlation and analysis of security events, SIEM data, IDS/IPS alerts, EDR telemetry, DNS logs, firewall logs, and network traffic.</li><li>
Support incident response and cybersecurity investigations through intelligence-driven analysis and threat attribution support.</li><li>
Develop cyber threat intelligence reports, operational briefings, situational awareness products, and executive-level summaries.</li><li>
Assist with the identification of previously unknown attack vectors and suspicious activity through threat hunting and anomaly analysis.</li><li>
Support digital forensics and incident analysis activities in coordination with SOC analysts, engineers, and incident responders.</li><li>
Develop and maintain threat intelligence playbooks, threat models, attack scenarios, and adversary profiles.</li><li>
Perform analysis of cloud security events and cyber threats impacting Microsoft 365, Azure, AWS, Salesforce, and hybrid cloud environments.</li><li>
Conduct research on advanced persistent threats (APTs), ransomware groups, insider threats, nation-state actors, and emerging cyber attack trends.</li><li>
Provide recommendations for defensive countermeasures, detection logic improvements, and enhanced security monitoring capabilities.</li><li>
Assist in the development of threat signatures, SIEM use cases, detection analytics, and threat detection content.</li><li>
Support continuous improvement of cybersecurity operations, threat intelligence workflows, and incident response processes.</li><li>
Coordinate with federal stakeholders, law enforcement, privacy officials, insider threat teams, and mission partners during cyber incident activities.</li><li>
Document investigative findings, intelligence assessments, and operational actions within case management and reporting systems.</li><li>
Participate in SOC operational meetings, shift briefings, incident coordination calls, and cybersecurity readiness activities.</li><li>
Maintain awareness of evolving cybersecurity technologies, federal threat reporting requirements, and NIST cybersecurity guidance.</li><li>
Support cybersecurity communications, intelligence sharing, and collaboration activities across the SBA enterprise.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, Intelligence Studies, Information Assurance, or related discipline. Relevant experience may substitute for degree requirements.</li><li>
Minimum of 5 years of experience supporting cybersecurity operations, cyber threat intelligence, threat hunting, incident response, or SOC operations.</li><li>
Experience analyzing threat intelligence, indicators of compromise, adversary TTPs, and cybersecurity attack methodologies.</li><li>
Hands-on experience with SIEM, EDR, IDS/IPS, network analysis, and cyber defense tools.</li><li>
Experience conducting threat hunting and advanced event correlation across enterprise environments.</li><li>
Knowledge of federal cybersecurity frameworks and guidance including NIST SP 800-61, NIST SP 800-53, and CISA operational guidance.</li><li>
Understanding of MITRE ATT&amp;CK framework and cyber kill chain methodologies.</li><li>
Experience with cloud security monitoring and threat analysis in Microsoft Azure, AWS, Microsoft 365, and hybrid environments.</li><li>
Strong analytical, investigative, communication, and reporting skills.</li><li>
Ability to support 24x7x365 cybersecurity operational environments.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
GIAC Cyber Threat Intelligence (GCTI)</li><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
CompTIA CySA+</li><li>
Certified Ethical Hacker (CEH)</li><li>
Splunk Enterprise Security Certified Admin</li><li>
Microsoft Security Operations Analyst Associate (SC-200)</li></ul>
Pw75tUj9Bf</div>

SBA - Cyber Threat Intelligence Analyst

PC99 Technologies & Innovation Group

Job Title: Senior Cybersecurity AnalystJoin a Forward-Thinking Cybersecurity TeamPC99 Technologies &amp; Innovation Group is seeking a highly skilled Senior Cybersecurity Analyst to help protect critical systems, data, and infrastructure in an evolving threat landscape. This role is ideal for professionals who enjoy solving complex security challenges, working with advanced tools, and making a measurable impact on organizational security.What You&rsquo;ll Do<ul><li>Monitor, detect, and respond to cybersecurity threats using SIEM and SOC tools</li><li>Conduct vulnerability assessments, penetration testing, and risk analysis</li><li>Investigate security incidents and perform root cause analysis</li><li>Develop and implement security policies, standards, and procedures</li><li>Collaborate with IT teams to strengthen network, cloud, and endpoint security</li><li>Analyze threat intelligence and proactively mitigate risks</li><li>Ensure compliance with frameworks such as ISO 27001, NIST, and CIS</li><li>Lead incident response efforts and recommend remediation strategies</li><li>Prepare reports and communicate findings to technical and non-technical stakeholders</li></ul>What We&rsquo;re Looking For<ul><li>5+ years of experience in cybersecurity, information security, or SOC environments</li><li>Strong knowledge of SIEM platforms, IDS/IPS, firewalls, and endpoint security tools</li><li>Experience with vulnerability management and penetration testing</li><li>Familiarity with cloud security (AWS, Azure, or GCP)</li><li>Understanding of security frameworks such as ISO 27001, NIST, or CIS</li><li>Relevant certifications preferred (CISSP, CEH, CISM, Security+)</li><li>Strong analytical and problem-solving skills</li><li>Clear communication and documentation abilities</li></ul>Why Join PC99 Technologies &amp; Innovation Group<ul><li>Work on high-impact cybersecurity projects across industries</li><li>Collaborative and innovation-focused environment</li><li>Opportunities for professional development and career progression</li><li>Exposure to modern security technologies and enterprise systems</li></ul>Compensation and Schedule<ul><li>Competitive salary with performance-based incentives</li><li>Full-time position with standard business hours and occasional on-call rotation</li></ul>About the CompanyPC99 Technologies &amp; Innovation Group is a growing technology firm specializing in cybersecurity, digital transformation, and advanced IT solutions. The company partners with organizations to strengthen their security posture and deliver scalable, future-ready systems.Apply NowIf you are ready to advance your cybersecurity career and work on meaningful security initiatives, submit your application today.Pay: RO1,800.000 - RO3,200.000 per monthWork Location: In person

Senior Cybersecurity Analyst

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

Rivian

<div><div>The Cybersecurity Analyst &ndash; Risk Management is a mid-career individual contributor supporting Rivian&rsquo;s cybersecurity risk management practice. This role involves day-to-day management of cybersecurity risks, monitoring key risk indicators (KRIs), and facilitating risk discussions with technology and business stakeholders.</div><div></div><div> 
The analyst will leverage Rivian&rsquo;s risk platforms and AI-enabled tooling to improve efficiency, transparency, and defensibility of risk decisions. This role sits within Enterprise Cybersecurity on the Cybersecurity Risk Management team and partners closely with the Cyber Third-Party Risk Management (TPRM) lead, security engineering teams, and other functions.</div> 
<ul><li>
Risk Register Ownership: Maintain and continuously improve the cybersecurity and crown-jewel risk registers, ensuring risks are clearly defined, scored, prioritized, and kept current.</li><li>
Track risk status from identification through treatment and closure, including documenting decisions, owners, due dates, dependencies, and evidence.</li><li>
Design, implement, and monitor KRIs and related metrics, such as control health, incident trends, and assessment throughput, to provide an objective view of risk posture.</li><li>
Meet regularly with risk owners and functional leaders to gather updates, validate assumptions, and align on risk treatment plans and progress.</li><li>
Evaluate how risks propagate across systems, suppliers, processes, and programs; surface second-order and cascading impacts in risk narratives and dashboards.</li><li>
Collaborate with the Cyber TPRM lead where responsibilities intersect, including supplier-driven risks, concentration risk, and systemic control gaps, to ensure consistent risk assessment and treatment.</li><li>
Help facilitate workshops and review sessions with business and technology leaders to clarify risk scenarios, tradeoffs, and treatment options.</li><li>
Use Rivian&rsquo;s risk platform and AI-enabled tools to improve efficiency, effectiveness, and expediency in risk logging, analysis, reporting, and communication.</li><li>
Maintain and evolve a Cybersecurity Risk Dashboard that provides an accurate, near real-time view of key risks, KRIs, and trends for leadership and governance forums.</li><li>
Apply NIST CSF and ISO 27001 concepts when assessing controls, documenting risks, and proposing treatments, helping ensure consistency with the ISMS and enterprise risk practices.</li><li>
Identify gaps and friction in current risk processes and propose practical improvements to increase clarity, adoption, and impact.</li></ul><div> 
Minimum Qualifications</div><ul><li>
5+ years of combined experience in cybersecurity, technology risk, enterprise risk management, or related fields.</li><li>
At least 3 years with primary responsibility for leading or owning a risk management function, program, or risk domain within an organization.</li><li>
Hands-on experience maintaining and operating risk registers and risk management tooling, including GRC, IRM, or dedicated risk platforms.</li><li>
Working knowledge of the NIST Cybersecurity Framework (CSF) and exposure to frameworks such as ISO/IEC 27001, including risk assessment/treatment concepts and control alignment.</li><li>
Demonstrated ability to influence risk treatment decisions, not just document them, by framing options, tradeoffs, and business impact for stakeholders.</li><li>
Strong analytical and quantitative risk skills, including building KRIs, basic risk modeling, scenario comparison, and trend analysis.</li><li>
High comfort working with AI tools for analysis, synthesis, workflow automation, and responsible experimentation to improve risk processes.</li><li>
Excellent written and verbal communication skills with the ability to translate complex technical risks into concise, business-relevant narratives.</li><li>
Proven ability to work cross-functionally, build trust with stakeholders, and facilitate productive discussions in ambiguous situations.</li></ul><div>
Preferred Qualifications</div><ul><li>
Experience with modern GRC/IRM or dedicated risk platforms and building risk dashboards for security leadership.</li><li>
Professional certifications such as CRISC, PMI-RMP, CISM, or similar.</li><li>
Experience in fast-paced, high-growth environments such as technology, automotive, or manufacturing, where speed, agility, and rigor are required.</li></ul></div>

Staff Cybersecurity Analyst, Risk Management

Kaimetrix

Business AnalystAbout Kaimetrix, L. L. C.At Kaimetrix, we deliver complete IT solutions and bring together complex and often siloed services - increasing the value of IT through a holistic, end-to-end approach. We combine real data with expert insights to help organizations modernize, streamline operations, advance IT initiatives, and achieve mission success for federal civilian, defense, and intelligence agencies. Our core capabilities include cybersecurity, data operations, end-user support, IT management, software development, systems engineering, process improvement, and technical advisory.We believe our greatest asset is our people. We invest in our team&rsquo;s growth, empower them with autonomy and accountability, and offer meaningful work that supports mission-focused agencies while advancing your career.Join us if you&rsquo;re looking to do impactful work, develop professionally, and be part of a culture that values continuous improvement, metrics-driven performance, and exceptional service.Benefits Summary: Kaimetrix offers a comprehensive benefits package that includes medical, dental, and vision insurance; company-paid short-term and long-term disability coverage; company-paid life and AD&amp;D insurance with additional voluntary options; a 401(k) and Roth retirement plan with employer matching; paid time off that increases with tenure; 11 paid federal holidays; FSA and HSA options; commuter benefits; annual education reimbursement for approved training and certifications; employer-paid identity protection; and optional supplemental coverages such as accident, cancer, critical illness, and hospital indemnity.Kaimetrix, L.L.C. is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin.About the roleKaimetrix is seeking an experienced Business Analyst to support CPE ST3 programs in Orlando, FL. The Business Analyst will work closely with government stakeholders, technical teams, and program leadership to analyze business processes, capture requirements, and support the delivery of data‑driven, automation‑enabled solutions.This role will also provide quality assurance (QA) and testing support, ensuring that delivered solutions meet functional requirements, perform as intended, and align with mission needs. The position is well‑suited for a candidate with strong Microsoft Power Platform experience who is comfortable supporting both requirements analysis and QA/testing activities in a DoD or federal IT environment.CPE ST3 supports Army training and readiness through enterprise systems, data, and automation capabilities, requiring close coordination with technical, cybersecurity, and program teams.What you'll doKey Responsibilities<ul><li>Elicit, analyze, validate, and document business and system requirements from government stakeholders, functional users, and technical teams supporting CPE ST3 programs.</li><li>Support process improvement initiatives by documenting current‑state and future‑state workflows, identifying gaps, inefficiencies, and automation opportunities.</li><li>Design, configure, and support solutions using the Microsoft Power Platform, including:</li><li>Power Apps (canvas and model‑driven apps)</li><li>Power Automate workflows</li><li>Power BI reports and dashboards</li><li>Translate business requirements into functional specifications, user stories, and acceptance criteria to support development and testing activities.</li><li>Collaborate with developers, system administrators, and cybersecurity personnel to ensure solutions align with Army and DoD IT policies.</li><li>Support quality assurance and testing activities, including:</li><li>Reviewing requirements for testability</li><li>Supporting system testing and User Acceptance Testing (UAT)</li><li>Assisting with defect tracking, validation, and resolution</li><li>Support data analysis and reporting efforts to enable leadership decision‑making across CPE ST3 organizations and tenant activities.</li><li>Develop and maintain documentation, including requirements documents, process flows, SOPs, test artifacts, and training materials.</li><li>Support briefings and presentations for government leadership and program stakeholders.</li></ul>Required Qualifications<ul><li>Minimum of 5 years of relevant experience as a Business Analyst, Systems Analyst, or similar role supporting IT or business systems.</li><li>Demonstrated experience with the Microsoft Power Platform, including Power Apps and Power Automate; Power BI experience strongly preferred.</li><li>Experience gathering, documenting, and managing business and functional requirements.</li><li>Experience supporting QA, testing, or UAT activities in an IT or application development environment.</li><li>Strong understanding of business process analysis and requirements management methodologies.</li><li>Experience working in DoD or federal government environments.</li><li>Excellent written and verbal communication skills, with the ability to interface effectively with government customers and technical teams.</li><li>Ability to work on‑site in Orlando, FL.</li></ul>Preferred Qualifications<ul><li>Prior experience supporting CPE ST3, Army CIO organizations, or similar defense IT environments.</li><li>Experience with SharePoint, Microsoft 365, or enterprise business applications.</li><li>Familiarity with Agile or iterative development environments.</li><li>Knowledge of DoD IT governance, RMF, or cybersecurity considerations as they impact business systems.</li><li>Experience documenting or supporting test plans, test cases, or acceptance criteria.</li><li>Active Secret clearance.</li></ul>Pay: $65,000.00 - $70,000.00 per yearWork Location: In person

Business Analyst

PROZ TECHNOLOGIES

Job Title: SOC L2 Analyst (OT Security) Location: Doha, Qatar (On-site)About the RoleWe are looking for an experienced SOC L2 Analyst to join a leading Security Operations Center (SOC) team in Qatar. The role focuses on advanced threat monitoring, incident investigation, and response across both IT and Operational Technology (OT) environments.This is an excellent opportunity for cybersecurity professionals with strong SIEM and incident handling experience, especially those with exposure to industrial/OT security systems.Key Responsibilities<ul><li>Investigate and analyze security alerts and incidents, including escalations from L1 analysts</li><li>Perform in-depth threat analysis across IT and OT environments</li><li>Act as an incident responder for security events and recommend remediation actions</li><li>Monitor and manage SIEM alerts, logs, and SOC tickets within SLA timelines</li><li>Escalate critical incidents to L3/Senior Analysts when required</li><li>Support and mentor junior SOC analysts (L1)</li><li>Collaborate with internal teams to improve threat detection and response capabilities</li><li>Contribute to SOC documentation, runbooks, and knowledge base</li></ul>Required Skills &amp; Experience<ul><li>Minimum 5+ years of experience in SOC / Cybersecurity operations</li><li>Strong experience with SIEM tools (Splunk, QRadar, ArcSight, Azure Sentinel, etc.)</li><li>Hands-on experience in incident detection, investigation, and response</li><li>Strong knowledge of network security, logs, and attack patterns</li><li>Experience with security tools such as EDR, IDS/IPS, Firewalls, Vulnerability Scanners</li><li>Familiarity with MITRE ATT&amp;CK framework</li><li>Good understanding of Windows, Linux, and network environments</li></ul>Preferred (Nice to Have)<ul><li>Experience with OT / ICS / SCADA security environments</li><li>Knowledge of protocols like Modbus, DNP3, BACnet</li><li>Exposure to industrial cybersecurity frameworks</li><li>Basic scripting knowledge (Python, PowerShell, Bash)</li></ul>Certifications (Preferred)<ul><li>SC-200, GCIH, CEH, or equivalent cybersecurity certifications</li><li>SIEM certifications (Splunk, Azure Sentinel, etc.)</li><li>OT Security certifications (e.g., Nozomi) are a plus</li></ul>Ideal Candidate<ul><li>SOC L2 Analyst / Senior Security Analyst</li><li>Experience working in MSSP or enterprise SOC environments</li><li>Strong analytical and problem-solving skills</li><li>Ability to work in a 24x7 SOC environment</li></ul>Job Type: PermanentPay: Up to QAR15,000.00 per monthWork Location: In person

SOC L2 Analyst (OT Security)

Search 10000+ Cybersecurity business analyst jobs near you this May. New roles added regularly across leading industries. Apply today.