Enterprise Data & Platform Security Analyst

Enterprise Data & Platform Security Analyst

Location:

Lutz, FL (Hybrid – 3 days onsite / 1 day remote) Contract Salary: $60,000–$80,000 annually Benefits: 16 accrued PTO days, paid client holidays, medical benefits available

Schedule:

Tuesdays and Thursdays onsite (additional onsite day as required)

Employment Type:

W2 Only (No C2C or 1099) Work Authorization:
Must be a U.S. Citizen or Green Card Holder

The Enterprise Data & Platform Security Analyst protects sensitive data across endpoints, networks, cloud services, and enterprise platforms by designing, implementing, and operating data protection controls.

This role partners with Security, Infrastructure, Application, Legal, Privacy, and business teams to reduce the risk of data loss, improve governance, support regulatory compliance, and strengthen the organization's overall security posture.

The role is also responsible for building and scaling security engineering capabilities across cloud infrastructure, identity systems, data services, Kubernetes and container platforms, CI/CD pipelines, secrets management, and platform observability.

• Design and lead enterprise-scale data protection strategies across on-premises, cloud, SaaS, and hybrid environments.
• Define policy architecture, control objectives, and implementation patterns for:
  Data classification, Encryption, Retention, Tokenization, Data exfiltration prevention.
• Drive roadmap planning, vendor evaluations, and continuous improvement initiatives for data protection platforms.

• Define secure architecture patterns and engineering guardrails for:
  Kubernetes, Containers, Virtual infrastructure, Storage platforms, Managed cloud services, APIs, Infrastructure-as-Code (IaC) pipelines.

• Lead complex incident investigations involving:
  Sensitive data exposure, Insider risk, Control breakdowns.
• Coordinate remediation strategies and security architecture improvements across infrastructure, cloud, application, and data teams.
• Drive incident response activities including forensic coordination, containment recommendations, lessons learned, and control enhancements.

• Lead security assessments, threat analysis, and control design reviews for:
  Enterprise platforms, Cloud environments, Databases, Middleware, Business-critical applications.
• Own vulnerability and misconfiguration investigations, prioritizing based on exploitability, business risk, and compensating controls.

• Translate business, legal, privacy, and regulatory requirements into practical technical and operational controls.
• Provide concise risk communication, metrics, and executive-ready summaries to leadership and governance stakeholders.

• Develop and improve standards, baselines, playbooks, and security procedures for enterprise services and data platforms.
• Develop dashboards, metrics, and trend analysis to measure policy effectiveness and risk reduction.

• Provide technical leadership, mentoring, and quality oversight for analysts and specialists at earlier career stages.

• Deep understanding of cybersecurity principles including:
  Confidentiality, Integrity, Availability, Least privilege, Defense in depth.
• Strong knowledge of:
  Data protection, Networking, Operating systems, Cloud fundamentals, Enterprise threat vectors.
• Deep familiarity with enterprise environments, ticketing systems, and documentation practices.
• Experience with SIEM, DLP, or endpoint monitoring tools.
• Ability to review and interpret logs from:
  Active Directory, VPN, Endpoint security platforms, Cloud environments.
• Ability to independently investigate complex security incidents, build timelines, gather evidence, and document findings.
• Ability to communicate technical findings to executive leadership through risk summaries and recommendations.
• Ability to manage multiple priorities in a fast-paced environment.
• Experience mentoring junior analysts and collaborating with HR, Legal, IT, Compliance, and business teams.
• Excellent analytical, organizational, written, and verbal communication skills.

• Minimum 5 years of Cybersecurity, Information Security, or related IT experience.
• Hands-on technical experience may include networking, telecommunications, communications systems, hardware, software, or related technologies.

The following may substitute for experience:

• Associate degree in Computer Science, Information Systems, or related IT field with 3 years of experience.
• Bachelor's degree in Computer Science, Information Systems, or related IT field with 1 year of experience.
• Up to one year of formal internship or co-op IT experience may count toward the experience requirement.