senior cyber security analyst

SAIC

<div>Job ID: 2614463-OTHLOC-100000685975235
Location: Austin, TX, US
Date Posted: 2026-07-10
Category: Cyber
Subcategory: Cybersecurity Ops
Schedule: Full-Time
Shift: Day Job
Travel: No
Minimum Clearance Required: None
Clearance Level Must Be Able to Obtain: None
Potential for Remote Work: ORA_ON_SITE 
Description
Science Applications International Corporation (SAIC) is seeking a senior network security analyst to join our team supporting a major state &amp; local government customer. This position reports to the Security Director. This is an on-site role to act as an analyst and tool admin for Armis.

Essential duties of this position include:
<ul>
<li>Hybrid role as an Armis Centrix tool admin and SOC Tier 3, with the potential to be required to support Security Incident Response Team operations.</li>
<li>Supports dedicated work functions for state government agency.</li>
<li>Own and manage baseline configurations, policies, and implementation of front-end operations for Armis.</li>
<li>Work with Armis as a vendor for architecture and engineering implementation concerns.</li>
<li>Performs network security, cybersecurity defense &amp; analysis, incident response, threat analysis, exploitation analysis, vulnerability analysis, and incident investigations.</li>
<li>Work is performed in a State Agency managed Security Operations Center (SOC).</li>
<li>Duties are primarily categorized as Tool Admin and Analyst, Incident Investigation and Response, Security Operations, Incident Management, or similar roles.</li>
<li>Utilizes COTS/GOTS applications, ticketing systems, lab systems, forensic applications, and/or custom tools, techniques, and procedures (TTPs) to monitor systems for abnormal events and determine if events are to be deemed an incident.</li>
<li>Determines if incidents are due to malicious or suspicious actions by one or more threat actors.</li>
<li>Utilizes threat intelligence to determine if the incident is part of a named campaign to determine appropriate levels of response, or provide new intelligence based on investigative actions to threat intelligence teams, organizations, and/or external parties.</li>
<li>Obtains information and evidence for legal proceedings or to provide to government counterparts for possible military, law enforcement, and/or counter-intelligence response actions/activities, Human Resources investigations, and/or management action.</li>
<li>Works with system owners to restore affected systems to secure baseline configurations.</li>
<li>Coordinates with contracted vendors for incident control.</li>
<li>Researches, evaluates, and recommends new security tools, techniques, and technologies.</li>
<li>Supports cyber metrics development, maintenance, and reporting for managed tools.</li>
<li>Provides briefings to senior staff and/or state government agencies executive staff.</li>
</ul>
Qualifications
Required Education and Qualifications:<ul><li>
BS Degree and five (5) years or more experience; Masters and three (3) years or more experience; PhD and 0 years related experience.</li><li>
Complete understanding and wide application of technical principles, theories, and concepts in the cybersecurity field.</li><li>
Ability to receive assignments in the form of objectives and establish goals to meet outlined objectives.</li><li>
General knowledge of related IT disciplines.</li><li>
Candidates must be a US Citizen and be able to pass a CJIS Criminal Justice background investigation and maintain CJIS clearance throughout employment term.</li></ul>
Required Experience:<ul><li>
Providing technical solutions to a wide range of difficult problems requiring the analysis of identifiable factors.</li><li>
Independent determination and development of approaches to solutions with work reviewed upon completion for adequacy in meeting objectives.</li><li>
Demonstrating good judgment in selecting methods and techniques for obtaining solutions.</li><li>
Contributing to the completion of specific programs and projects within the government contracting space.</li><li>
Security+ or higher certifications.</li><li>
Armis 201 or higher class certifications.</li></ul>
Preferred Experience:<ul><li>
ITIL v4 certification preferred (Foundation or above).</li><li>
CEH, GCIH, BTL2, CASP, or GSP.</li><li>
Providing technical solutions to a wide range of difficult problems requiring the analysis of identifiable factors.</li><li>
Independent determination and development of approaches to solutions with work reviewed upon completion for adequacy in meeting objectives.</li><li>
Demonstrating good judgment in selecting methods and techniques for obtaining solutions.</li><li>
Contributing to the completion of specific programs and projects.</li></ul></div>

Cybersecurity Analyst

Constellation Energy

<div>Overview:

WHO WE ARE
As the largest private-sector power producer in the world and the nation's largest producer of clean and reliable energy, Constellation is focused on our purpose: lighting the way to a brilliant tomorrow for all. We have been the leader in clean energy production for more than a decade, and we are cultivating a workplace where our employees can grow, thrive, and contribute. Now integrated with Calpine, our portfolio includes 55 gigawatts of capacity from nuclear, natural gas, geothermal, hydro, wind and solar facilities, with the generating capacity to power the equivalent of 27 million homes. 
 
Our culture and employee experience make it clear: We are powered by passion and purpose. Together, we're creating healthier communities and a cleaner planet, and our people are the driving force behind our success. At Constellation, you can build a fulfilling career with opportunities to learn, grow and make an impact. By doing our best work and meeting new challenges, we can accomplish great things. Join us in meeting the country's energy needs today and tomorrow. 
TOTAL REWARDS
Constellation offers an extensive selection of benefits and rewards to help our employees thrive professionally and personally. We provide competitive compensation and a wide-range of benefits that support both employees and their families, helping them prepare for the future. In addition to highly competitive salaries, eligible employees are offered a bonus program, 401(k) with company match, employee stock purchase program; comprehensive medical, dental and vision benefits, including robust wellbeing programs; disability and life insurance benefits; paid time off for vacation, holidays, and sick days; and much more. 
Expected salary range of $91,800 to $102,000, varies based on experience, along with comprehensive benefits package that includes bonus and 401(k).
Responsibilities:

PRIMARY PURPOSE OF POSITION
This position will be 100% onsite at the Ginna Clean Energy Center in Ontario, New York. Provide technical knowledge and expertise to support delivery and maintenance of IT Cyber Security and Network solutions under the guidance of a Sr Cyber Security Analyst and Manager. Perform activities related to testing, implementing, and maintaining solutions for products and processes. Uses pre-defined procedures and guidelines to maintain and resolve issues related to cyber security and network solutions. 
PRIMARY DUTIES AND ACCOUNTABILITIES<ul><li>
Perform, document and assist in planning work activities relating to small projects, sub-projects, or process improvements. For daily operations: enhance, maintain or support existing IT products and processes to the defined service level agreement For projects and sub-projects: analyze requirements, design, build, and test IT software solutions</li><li>
Maintain engagement with business and IT partners.</li><li>
Assist less experienced personnel.</li><li>
Maintain technical knowledge and business acumen within own discipline or function and continue to manage their professional development</li><li>
Drive innovation across the organization by identifying and providing analysis of trends and issues with the goal to drive new business opportunities and solve complex business problems.</li><li>
Ability to provide on-call support after normal business hours</li></ul>
MINIMUM QUALIFICATIONS<ul><li>
Bachelor's degree in Computer Science or related discipline and typically 2 to 5 years related experience or 6 to 9 years equivalent combination of education and work experience.</li><li>
Ability to solve problems using pre-defined procedures and guidelines.</li><li>
Communication skills: Able to effectively communicate highly technical information in non-technical terminology (written and verbal)</li><li>
Flexible and adaptable to changing priorities, based on business needs</li><li>
Working knowledge of Server and Workstation Operating Systems (Windows / Linux), along with command prompt knowledge</li><li>
Working knowledgeable in IP based switching, routing, and network environments (ex. Cisco)</li><li>
Working knowledge of computer networking concepts and protocols, and network security methodologies.</li><li>
Working knowledge of cyber security practices for an enterprise environment</li><li>
Working knowledge of firewall operations (ex. Cisco &amp; Checkpoint)</li><li>
Working knowledge of cyber security practices for an enterprise environment</li></ul> 

Qualifications:
<div>
PREFERRED QUALIFICATIONS</div><ul><li>
Working knowledge of cyber security program elements such as Policy Development, Application Security, Information Security, Network Security, Disaster Recovery Planning, Operational Security, Incident Response, and End User Education</li><li>
Working knowledge of Security Information Event Management (SIEM) solutions (ex. Splunk, Nitro, Industrial Defender)</li><li>
Cisco Certified Network Associate (CCNA) certification acceptable with other network credentials. Security Plus training</li></ul></div>

Cyber Security Analyst - IT

BAE Systems

<div></div><div><div>Location
Doha , Qatar
<div>Other
Experienced professionals</div></div></div>
 <div><div><div>The Senior Cybersecurity Certification Consultant is responsible for leading and executing certification assessment activities to evaluate organizations&rsquo; compliance with national and international cybersecurity and information security standards. The role ensures fair, consistent, and objective certification decisions while overseeing assessment teams, managing certification cases, and maintaining the integrity of the certification process. It also contributes to developing certification methodologies, tools, and frameworks aligned with regulatory and accreditation requirements.</div>
<div></div><div>Key Responsibilities:
 </div><ul><li>Delivery of certification services
 
Senior Information Security / Cyber Security Assessor is responsible for the
 
day to day certification application assessment review, validation
 
</li><li>Manage the team and assign the cases
 
</li><li>Maintain detailed and organize
 
records of the certification process, ensuring accuracy and completeness
 
</li><li>Ensuring that the highest standards
 
of competence and impartiality are maintained, and that consistency is achieved
 
across certification activities
 
</li><li>Review different organizations&rsquo;
 
Information Security / Cyber Security compliance to national or international
 
standards and best practices in Information Security / Cyber Security
 
</li><li>Evaluate the design and operating
 
effectiveness of Information Security / Cyber Security controls
 
</li><li>Document observations/findings in
 
such a manner that they are clearly understandable and traceable and are based
 
on objective evidence
 
</li><li>Develop and maintain certification
 
procedures and required tools based on National Information Security Compliance
 
framework
 
</li><li>Maintain impartiality,
 
confidentiality and to declare any potential conflicts of interest that might
 
jeopardize an objective assessment as required
 
</li><li>Develop measurement and compliance
 
mechanisms &amp; tools to monitor improvements
 
</li><li>Provide a recommendation on the outcome
 
of an assessment
 
</li><li>Stay up to date with the latest
 
developments in security, emerging threats, and evolving technology to ensure
 
the certification process remains relevant
 
</li><li>Conduct efficient and effective Cyber
 
Security risk assessments and Information Security / Cyber Security audit
 
procedures
 
</li><li>Develop and deliver internal training
 
and workshop to upscale and build Information Security / Cyber Security,
 
compliance, assurance and audit capabilities within the team.
 
</li><li>Manage the external communication during
 
the audit: from the application till the issue of decision 
 
</li></ul> 
<h3 class="jobSectionHeader">Requirements</h3>
Education &amp; Experience
<ul><li>Bachelor&rsquo;s degree in Information Technology, Computer Information Systems, Cyber Security, or equivalent.</li>
<li>Minimum 20 years of professional experience in IT / Information Security / Cyber Security.</li>
<li>At least 4 years of experience as a senior auditor, assessor, or in cybersecurity risk/security management roles.</li>
<li>Experience in cybersecurity consulting or implementation aligned with national/international standards is an advantage.</li>
</ul>Certifications (Preferred)
<ul><li>CISSP, CISA, CISM, CRISC, ISO 27001 Lead Auditor/Implementer, or equivalent certifications.</li>
</ul>Technical Skills
<ul><li>Strong knowledge of cybersecurity risk assessment and audit methodologies.</li>
<li>Expertise in security frameworks and standards (ISO 27001, NIST, NIA, CSF, etc.).</li>
<li>Understanding of certification and accreditation standards (ISO/IEC 17021, 17024, 17065, 17006, ISO 19011, ISA, ITAF).</li>
<li>Hands-on experience in information security auditing and assurance.</li>
<li>Strong awareness of evolving cybersecurity threats and technologies.</li>
</ul>Core Skills
<ul><li>Excellent analytical, evaluation, and problem-solving abilities.</li>
<li>Strong technical report writing and documentation skills.</li>
<li>Ability to interpret compliance frameworks and certification criteria objectively.</li>
<li>Excellent communication and presentation skills in English (written and verbal).</li>
<li>Experience delivering training and workshops across government and private sectors.</li>
</ul>Behavioral Competencies
<ul><li>High attention to detail and ability to work under pressure and tight deadlines.</li>
<li>Strong interpersonal and stakeholder management skills.</li>
<li>Ability to work independently with high levels of professionalism and integrity.</li>
<li>Capability to manage multiple assignments and cross-functional teams effectively.</li>
<li>Commitment to impartiality, confidentiality, and ethical assessment practices.</li>
</ul><div>Language: English (required)
</div><div>Availability: As soon as possible
</div><div></div><div>The contract duration is 12 months, with the possibility of extension based on departmental requirements.
</div></div><div>Other
Experienced professionals</div></div>

Senior Cybersecurity Certification Consultant

<div></div><div><div>Location
Doha , Qatar
<div>Other
Experienced professionals</div></div></div>
 <div><div><div>We are seeking a highly experienced Senior Information Security / Senior Cyber Security Assessor (Certification) to lead and support cyber security certification and compliance assessment activities. The role is responsible for reviewing certification applications, evaluating organizations&rsquo; compliance with national and international security standards, conducting cyber security risk assessments and audits, and ensuring consistency, impartiality, and quality throughout the certification lifecycle.
</div>The ideal candidate will possess strong technical expertise in information security governance, risk management, compliance, auditing, and certification frameworks, along with proven leadership and stakeholder management capabilities.
<div></div><div>Key Responsibilities:
 
</div><div></div><ul><li>Lead and deliver certification assessment and review
 
activities for organizations seeking Information Security / Cyber Security
 
certification.</li>
<li>Manage assessment teams, assign cases, and oversee daily
 
certification operations.
 
</li><li>Review and evaluate organizations&rsquo; compliance with national
 
and international cyber security standards and frameworks.</li>
<li>Assess the design and operating effectiveness of cyber
 
security and information security controls
 
</li><li>Conduct cyber security risk assessments, audits, and
 
compliance reviews.</li>
<li>Maintain accurate, complete, and organized records of
 
certification and assessment activities.</li>
<li>Ensure impartiality, confidentiality, consistency, and
 
compliance throughout certification processes.</li>
<li>Document assessment observations and findings based on
 
objective evidence and ensure traceability.</li>
<li>Develop and maintain certification procedures,
 
methodologies, and supporting tools aligned with national compliance
 
frameworks.</li>
<li>Develop compliance measurement mechanisms and monitoring
 
tools to track improvements.</li>
<li>Provide recommendations and assessment outcomes to
 
stakeholders and decision-makers.</li>
<li>Manage external communication throughout the audit and
 
certification lifecycle, from application to final decision issuance.</li>
<li>Stay updated on emerging cyber security threats,
 
technologies, standards, and industry best practices.</li>
<li>Develop and deliver internal training sessions and workshops
 
to enhance team capabilities in cyber security, compliance, assurance, and
 
auditing.</li>
<li>Collaborate effectively with internal teams, clients, and
 
stakeholders across multiple projects. 
 
</li></ul> 
<h3 class="jobSectionHeader">Requirements</h3>
<h2 class="jobSectionHeader">Education:
 
</h2><ul><li>Bachelor&rsquo;s degree in Information Technology, Computer Information Systems, Cyber Security, or a related field.
 
</li></ul><h2 class="jobSectionHeader">Professional Certifications: 
 
</h2>One or more relevant professional certifications are preferred, such as: 
 
<ul><li>CISSP
 
</li><li>CISA
 
</li><li>CISM
 
</li><li>CRISC
 
</li><li>ISO 27001 Lead Auditor / Implementer
 
</li></ul><h2 class="jobSectionHeader">Experience:
 
</h2><ul><li>Minimum 7 years of professional experience in Information Security / Cyber Security.
 
</li><li>Minimum 4 years of experience in one or more of the following areas:
<ul><li>Information Security Auditing
 
</li><li>Cyber Security Auditing
 
</li><li>Risk Management
 
</li><li>Information Security Management
 
</li></ul></li><li>Experience in consulting or implementing cyber security programs aligned with national or international standards is highly desirable.
 
</li></ul><h2 class="jobSectionHeader">Technical Skills &amp; Knowledge:
 
</h2><ul><li>Strong knowledge of cyber security governance, risk assessment, and audit methodologies.
 
</li><li>Experience with security frameworks and standards such as:
<ul><li>ISO 27001
 
</li><li>NIST
 
</li><li>NIA Controls
 
</li><li>CSF Q2022
 
</li></ul></li><li>Familiarity with certification and audit standards including:
<ul><li>ISO/IEC 17021
 
</li><li>ISO/IEC 17024
 
</li><li>ISO/IEC 27006
 
</li><li>ISO/IEC 17065
 
</li><li>ISO 19011
 
</li><li>ITAF
 
</li><li>ISA
 
</li></ul></li><li>Hands-on experience in Information Security Auditing and Information Security Management.
 
</li><li>Strong understanding of cyber security trends, threats, and emerging technologies.
 
</li><li>Excellent technical report writing and documentation skills.
 
</li></ul><h2 class="jobSectionHeader">Soft Skills:
 
</h2><ul><li>Strong analytical and problem-solving abilities.
 
</li><li>Excellent communication and stakeholder management skills.
 
</li><li>Ability to work independently and manage multiple priorities effectively.
 
</li><li>High attention to detail and ability to work under pressure and meet deadlines.
 
</li><li>Strong interpersonal and team collaboration skills.
 
</li><li>Experience in delivering workshops, training sessions, and awareness programs.
 
</li></ul><h2 class="jobSectionHeader">Language Requirement:
 
</h2><ul><li>Fluency in English is required.
 
</li><li>Arabic is a plus.</li>
</ul><div></div><div>The contract duration is 12 months, with the possibility of extension based on departmental requirements.
</div></div><div>Other
Experienced professionals</div></div>

Senior Information Security / Senior Cyber Security Assessor (Certification)

Air Products

<div>At Air Products, we reimagine what&rsquo;s possible. By tapping into the motivation of our people and our collective experience, we create the ideas and innovations that drive us forward. When we come together &ndash; where every voice is heard and everyone knows they belong and matter &ndash; we create solutions that launch people into space, support lifesaving care in hospitals, and enable the construction of groundbreaking, world scale production facilities. 
Reimagine What&rsquo;s Possible 
DT Cybersecurity Leadership and Site Execution<ul><li>
Lead and coordinate cybersecurity activities at site, including cyber site acceptance testing, cyber hygiene activities, cyber readiness reviews, proof-of-compliance documentation collection, and closure of cybersecurity implementation gaps.</li><li>
Serve as the site-based cybersecurity point of coordination between DT, OT/ICS Cybersecurity, project management, process controls, vendors, subcontractors, and NGHC stakeholders.</li><li>
Provide day-to-day direction to cybersecurity engineers, external partners, and site-based cyber resources supporting implementation, testing, documentation, and evidence collection.</li><li>
Ensure cyber activities are aligned to the project schedule, commissioning priorities, start-up needs, and compliance milestones.</li><li>
Coordinate with the DT Project Manager and OT/ICS Cybersecurity team to maintain a consolidated schedule of cybersecurity deliverables, dependencies, risks, and milestones.</li></ul>
Regulatory and Compliance Readiness<ul><li>
Support execution of cybersecurity activities aligned to applicable KSA regulatory requirements, including NCA ECC, NCA OTCC, HCIS/SAIS operating permit requirements, and applicable CNI/critical systems obligations.</li><li>
Lead collection, organization, quality review, and readiness of Proof of Compliance documentation required to support HCIS and NCA compliance activities.</li><li>
Coordinate with NGHC on CSAT witnessing, evidence review, documentation feedback, and comment resolution.</li><li>
Support NGHC in preparing cybersecurity evidence packages and responses for regulatory submission, recognizing that NGHC is expected to submit documentation to HCIS and NCA while Air Products/APEPC supports project delivery and evidence readiness.</li><li>
Ensure compliance documentation is complete, traceable, controlled, and organized for audit, regulatory review, and stakeholder approval.</li></ul>
Stakeholder Interface and Governance<ul><li>
Interface regularly with the OT/ICS Cybersecurity team, including alignment with PDO on-site cyber resources performing CSAT, cyber hygiene, and vendor-related compliance activities.</li><li>
Conduct routine coordination meetings with OT/ICS Cybersecurity, DT, NGHC, and project stakeholders to align cyber execution activities, risks, blockers, and decisions.</li><li>
Communicate cybersecurity status, risks, issues, dependencies, and escalation items effectively to senior management and project leadership.</li><li>
Translate technical cybersecurity and compliance topics into clear, actionable updates for project executives, DT leadership, NGHC, PDO, and external partners.</li><li>
Support governance meetings, executive cyber oversight reviews, and compliance readiness discussions.</li></ul>
Third-Party and Vendor Oversight<ul><li>
Manage and supervise external partners engaged to design, purchase, implement, document, test, or support cybersecurity solutions for the GHE scope.</li><li>
Oversee on-site work performed by external cybersecurity implementation partners and ensure deliverables meet Air Products, NGHC, NCA, HCIS, and project requirements.</li><li>
Coordinate third-party support between CSAT, commissioning, start-up, and handover to NGHC.</li><li>
Ensure vendor/subcontractor cybersecurity deliverables are tracked, reviewed, documented, and escalated when gaps or delays affect compliance or project readiness.</li><li>
Support review of vendor documentation, cyber execution plans, network/security architecture, hardening evidence, access control matrices, SIEM/monitoring documentation, and POC packages.</li></ul>
DT, OT, and Project Integration<ul><li>
Serve as the interface between DT infrastructure activities and cybersecurity-related activities at site.</li><li>
Support alignment across OT systems, industrial DMZs, site network architecture, identity/access controls, monitoring, cyber hygiene, and cyber readiness activities.</li><li>
Identify scope gaps, accountability gaps, technical blockers, and documentation gaps that could affect regulatory compliance, start-up readiness, or handover.</li><li>
Partner with site engineering, process controls, and project management teams to ensure cybersecurity activities are integrated into site work plans and commissioning sequences.</li><li>
Support handover readiness by ensuring documentation, evidence, operating assumptions, and support responsibilities are clearly defined.</li></ul>
Required Qualifications and Experience<ul><li>
Strong understanding of KSA cybersecurity regulations and regulatory expectations, including NCA and HCIS requirements.</li><li>
Understanding of contractual cybersecurity obligations between Air Products/APEPC and NGHC.</li><li>
Experience leading OT/ICS cybersecurity activities in industrial, energy, chemical, utility, critical infrastructure, or large capital project environments.</li><li>
Experience with cybersecurity site acceptance testing, proof-of-compliance documentation, regulatory evidence collection, cyber risk assessment closure, and audit readiness.</li><li>
Ability to manage multiple concurrent priorities across project execution, stakeholder coordination, regulatory compliance, vendor management, and site readiness.</li><li>
Strong written and verbal communication skills in English; Arabic language capability a plus.</li><li>
Ability to communicate effectively with senior management while also understanding and directing detailed day-to-day work activities at site.</li><li>
Strong stakeholder management skills across project, engineering, cybersecurity, operations, vendors, and external/customer organizations.</li><li>
Familiarity with OT/ICS security principles, including segmentation, industrial DMZs, secure remote access, access control, hardening, monitoring, and incident readiness.</li><li>
Ability to operate in a complex, multi-party environment involving Air Products, NGHC, PDO, DT, EPC contractors, vendors, and regulatory stakeholders.</li></ul> 
Founded in 1940, Air Products is a world-leading industrial gases company and has a proud history of innovation, operational excellence, with an unwavering commitment to safety and environmental stewardship. Working together, we are taking our passion and diverse backgrounds forward to reimagine what&rsquo;s possible and generate a cleaner future for our customers, our communities, and the world.</div>

NGHP IT/DT Cybersecurity Lead

University Of Washington

<div>Job Description
UW Medicine IT Services has an outstanding opportunity for a Lead Cyber Security Analyst .
WORK SCHEDULE
<ul><li>100% FTE
</li><li>Monday &ndash; Friday; Core hours for UW Medicine IT Services are 8:00 &ndash; 5:00 (PST)
</li><li>Day Shift
</li></ul>DEPARTMENT DESCRIPTION
UW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.
POSITION HIGHLIGHTS
<ul><li>100% remote opportunity
</li><li>15 days of vacation your first year &ndash; Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year
</li><li>100% matching, 100% immediately vesting 403(b)
</li></ul>PRIMARY JOB RESPONSIBILITIES
<ul><li>Supporting the direction and priorities of the Manager by coordinating and overseeing the operational activities and ensuring standard services are meeting appropriate targets, including the following:
<ul><li>Vulnerability and risk assessment activities with significant impact on business operations for all UW Medicine entities and vendors
</li><li>Design, development, and implementation of security tools, platforms, and methodologies drawing from industry requirements and frameworks such as HIPAA, HITRUST, and NIST to identify and mitigate risks to patient care and critical operations
</li><li>Implementation and leveraging of prescribed tools to discover system and/or software vulnerabilities and inform and/or validate risk assessments throughout the enterprise
</li><li>Integrate threat information into enterprise vulnerability assessments, risk assessments, and mitigation activities
</li><li>Operating and updating UW Medicine&rsquo;s risk register and risk management program
</li><li>Development and delivery of user training, security awareness programs, and UW Medicine-wide security documentation such as policies, standards, and operating procedures
</li></ul></li><li>Prioritizing and distributing the workload throughout a team of Cyber Security Analysts, managing the day-to-day workflow, and reporting to the Manager the status of work assignments
</li><li>Providing a point of escalation for operational and other service issues
</li><li>Identifying and proposing service management improvements
</li><li>Providing advice, coaching, and mentorship to team on work techniques, best practices, and operational expertise
</li><li>Serving as the Manager&rsquo;s delegate to represent the team to customers, project managers, technical leadership, and organizational management
</li></ul>Areas of responsibility include, but are not limited to:
<ul><li>Leading information security service delivery with a continuous improvement mindset and reporting metrics to directly impact business and leadership decisions
</li><li>Overseeing team support for applications, infrastructure, and technology projects to ensure the use of secure designs and that technical solution architectures align with organizational risk management goals
</li><li>Consulting with technical and non-technical stakeholders, including internal and external entities, on security best practices to reduce the risk of compromise across people, processes, and technology
</li><li>Monitoring and developing monitoring to proactively identify and respond to threats, vulnerabilities, or risks within UW Medicine
</li><li>Leading efforts to track and mitigate known and emergent threats to UW Medicine to support institutional threat awareness, risk assessments, threat detection and analysis, incident response, and cyber security operations
</li><li>Collaborating with Cyber Security Engineers in information security incident triage, containment, and investigative activities, as needed, as part of the incident management process
</li><li>Mentoring other Analysts and team members
</li></ul>REQUIREMENTS
<ul><li>Bachelor's degree in Computer Science, Information Technology, Business Administration, or related field or equivalent combination of experience/education
</li></ul>6+ years of experience must include:
<ul><li>6+ years&rsquo; information security experience to include experience in several of the following areas: Risk Management, Audit, Compliance, Security Engineering, Project Management, Architecture, and Governance
</li><li>1+ year(s) of formal mentorship for technology professionals
</li><li>Demonstrated experience leading team activities and initiatives in designing, implementing, or maintaining security tools (including threat assessment tools, risk management tools, or vulnerability management scanning systems)
</li><li>Demonstrated experience leading and mentoring others in security assessments, security control analysis, risk assessments, vulnerability assessments, or penetration tests of highly complex systems that support critical business operations (ex. Patient Care, Finance, HR)
</li><li>Advanced understanding of, and the experience mentoring others in, security-related technologies, systems, and tools
</li><li>Demonstrated experience using, and the ability to lead a team in, threat modeling and vulnerability review to impact the design of highly interconnected enterprise systems
</li><li>Advanced understanding of information security threats and vulnerabilities and how they translate to risks
</li><li>Advanced knowledge of common information security regulations and/or standards such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC and how to apply them
</li><li>Demonstrated experience leading service delivery, team activities, and initiatives
</li></ul>ABOUT UW MEDICINE &ndash; WHERE YOUR IMPACT GOES FURTHER
UW Medicine is Washington&rsquo;s only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine&rsquo;s mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow&rsquo;s physicians, scientists and other health professionals.
All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.
Become part of our team . Join our mission to make life healthier for everyone in our community.
Compensation, Benefits and Position Details
Pay Range Minimum:
$135,000.00 annual
Pay Range Maximum:
$160,008.00 annual
Other Compensation:
<ul><li></li></ul>Benefits:
For information about benefits for this position, visit https://www.washington.edu/jobs/benefits-for-uw-staff/
Shift:
First Shift (United States of America)
Temporary or Regular?
This is a regular position
FTE (Full-Time Equivalent):
100.00%
Union/Bargaining Unit:
Not Applicable
About the UW
Working at the University of Washington provides a unique opportunity to change lives &ndash; on our campuses, in our state and around the world.
UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.
Our Commitment
The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81 .
To request disability accommodation in the application process, contact the Disability Services Office at 206-543-6450 or dso@uw.edu .
Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law .</div>

Lead Cyber Security Analyst

Innoflight, Inc.

<div>GROW WITH US AND STAY EXTRAORDINARY: 
Launch your career to new heights with Innoflight&mdash;one of San Diego&rsquo;s fastest-growing Aerospace and Defense innovators. Here, visionary minds engineer the future of space technology through pioneering, compact, and cyber-secure solutions. From software-defined radios to cutting-edge cryptographic systems and avionics, everything we build powers the next era of New Space. Join our small, agile, and mission-driven team where your work has real impact and your growth has no limits. We&rsquo;re not just reaching for the stars&mdash;we&rsquo;re engineering them. Let&rsquo;s innovate the infinite, together. 
 
A DAY IN THE LIFE: 
As a Senior IT Cyber Security Specialist, you will play a critical role in protecting Innoflight's secure network infrastructure and mission-critical systems. You'll lead cybersecurity initiatives by implementing the Risk Management Framework (RMF), maintaining compliance with DoD security requirements, and strengthening the organization's overall cyber posture. Working closely with engineering, IT, government customers, and security teams, you'll safeguard enterprise systems, mentor junior cybersecurity professionals, and ensure our technologies remain secure, resilient, and mission ready. 
 
An Active Top Secret U.S. Security Clearance required. 
 
WHAT YOU&rsquo;LL DO:<ul><li>
Leads RMF Compliance: Executes all phases of the Risk Management Framework (RMF), including system categorization, security control implementation, assessment, authorization, and continuous monitoring to maintain compliance with DoD cybersecurity requirements.</li><li>
Manages Security Documentation: Develops and maintains System Security Plans (SSPs), Plan of Action &amp; Milestones (POA&amp;Ms), Risk Assessment Reports (RARs), and other RMF artifacts while supporting Authorization to Operate (ATO) and Interim Authority to Test (IATT) packages through eMASS.</li><li>
Strengthens Enterprise Security: Performs vulnerability scanning, system hardening, patch management, and remediation activities using tools such as Nessus, HBSS, and other approved cybersecurity solutions.</li><li>
Administers Security Technologies: Monitors and manages enterprise cybersecurity tools including SIEM platforms, intrusion prevention systems (IPS), firewalls, endpoint protection, email security, VPNs, and user behavior analytics to protect critical infrastructure.</li><li>
Supports Secure System Architecture: Provides technical guidance to ensure networks, servers, and applications are designed and maintained in compliance with cybersecurity standards and organizational security requirements.</li><li>
Responds to Security Incidents: Investigates cybersecurity events, performs root cause analysis, recommends corrective actions, and helps strengthen long-term system resilience against emerging threats.</li><li>
Develops Cybersecurity Standards: Creates and maintains standard operating procedures, technical documentation, network diagrams, and security processes that support operational excellence and regulatory compliance.</li><li>
Collaborates Across the Organization: Partners with IT, Engineering, Industrial Security, Physical Security, Special Programs, and government customers to ensure cybersecurity objectives are aligned across the organization.</li><li>
Supports End Users: Assists with endpoint configuration, access provisioning, incident troubleshooting, and cybersecurity awareness to help maintain a secure and productive computing environment.</li><li>
Provides Technical Leadership: Mentors junior cybersecurity team members, supports project execution, and advises leadership on cybersecurity risk, compliance, and strategic initiatives that protect Innoflight's mission-critical systems</li></ul>
YOU&rsquo;RE AWESOME AT:<ul><li>
Cybersecurity &amp; Compliance: Extensive experience implementing RMF, supporting ATO packages, and maintaining compliance with NIST SP 800-171, CMMC Level 2, DISA STIGs, and DoD cybersecurity requirements.</li><li>
Enterprise Security Administration: Skilled in securing Linux and Windows environments while administering enterprise security technologies including SIEM, firewalls, endpoint protection, IAM, and vulnerability management tools.</li><li>
Automation &amp; Technical Problem Solving: Experienced with Linux administration, Bash scripting, vulnerability remediation, system hardening, and implementing automation that improves operational efficiency.</li><li>
Leadership &amp; Collaboration: Able to communicate effectively with technical and non-technical stakeholders, mentor cybersecurity professionals, and provide strategic guidance in a fast-paced defense environment.</li></ul>
WHAT YOU&rsquo;LL NEED:<ul><li>
Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or a related field preferred; equivalent experience will be considered.</li><li>
7 or more years of progressive IT or cybersecurity experience, preferably within DoD, federal, or defense contractor environments.</li><li>
Strong experience securing and administering Linux systems (e.g., RHEL, Ubuntu), including Bash or other shell scripting for automation.</li><li>
Strong understanding of Identity and Access Management (IAM) principles and technologies.</li><li>
Solid knowledge of Linux and Windows file system permissions, access control, and configuration management.</li><li>
Familiarity with RMF, NIST SP 800-171, CMMC Level 2, DISA STIGs, and supporting ATO packages through eMASS.</li><li>
Experience administering network security technologies including firewalls, VPNs, VLANs, intrusion prevention systems, SIEM platforms, endpoint protection, and vulnerability management tools.</li><li>
Ability to support compliance reviews, implement security mitigations, and maintain comprehensive technical documentation.</li><li>
Must meet DoD 8570.1-M IAM Level III certification requirements (e.g., CISSP, CISM, GSLC).</li><li>
Excellent communication, organizational, analytical, and problem-solving skills.</li><li>
Active Top Secret U.S. Security Clearance required.</li></ul>
COMPENSATION &amp; BENEFITS 
The starting base salary for this position ranges from $135,000 to $160,000 per year, depending on the candidate&rsquo;s job-related knowledge, skills, and experience. In addition to a competitive base salary, Innoflight offers a well-rounded compensation package that includes a Profit-Sharing Bonus and a Cash Performance Bonus to reward both individual and company performance. Additional benefits include:<ul><li>
401(k) with 3% company match (automatic enrollment)</li><li>
Comprehensive medical, dental, vision, HSA &amp; life insurance</li><li>
10 paid holidays + 120 hours PTO (starting in year one)</li><li>
Access to ancillary benefits such as critical illness, accident, disability, legal and pet insurance.</li></ul>
WHY YOU&rsquo;LL LOVE WORKING HERE<ul><li>
Flexible Work-Life Balance: Enjoy a 9/80 work schedule with every other Friday off&mdash;whether you use it to recharge, work on a passion project, or spend time with family, the choice is yours.</li><li>
Continuous Learning &amp; Development: We&rsquo;re serious about professional development. From tuition reimbursement to internal &quot;Ask Me Anything&quot; sessions and weekly &ldquo;Lunch &amp; Learns,&rdquo; we make learning a core part of the job.</li><li>
Mission-Driven Culture: We aren&rsquo;t just building tech&mdash;we&rsquo;re enabling the next era of space exploration. Our Culture Ambassadors help lead initiatives around inclusion, positivity, recognition, and transparency. Here, your voice is heard, your work is respected, and your individuality is celebrated.</li></ul>
BE YOU, WITH US 
At Innoflight, we are committed to fostering an inclusive and equitable workplace where everyone belongs. We recognize that great talent comes in many forms, and you don&rsquo;t need to meet every requirement to bring value to our team. If this role excites you, we encourage you to apply&mdash;even if you don&rsquo;t check every box. 
 
YOU SHOULD KNOW: 
Potential new employees must successfully complete a background check which includes criminal search, education certification and employment verification prior to hire. Applicants must be authorized to work for any employer in the U.S as you must have the ability to obtain a security clearance. We are unable to sponsor or take over sponsorship of an employment Visa. 
 
A NOTE TO STAFFING AGENCIES: 
Innoflight does not accept unsolicited resumes from agencies, recruiters, or any third-party sources. Any such submissions will be considered property of Innoflight, and no fees will be paid in the event a candidate is hired from an unsolicited referral. 
 
To California residents applying for this job, please read Innoflight&rsquo;s CCPA Notice: https://www.innoflight.com/careers/california-consumer-privacy-act-notice-for-job-applicants. 
 
#LI-Onsite
MrmbBqadSj</div>

Sr. IT Cyber Security Specialist

Search 6030+ Senior cyber security analyst jobs near you this August. New roles added regularly across leading industries. Apply today.