Cryptographic Agility Surveillance Analyst

• Monitor industry, regulatory, vendor, and academic sources for emerging cryptographic threats, vulnerabilities, standards changes, and technology developments
• Track developments related to encryption algorithms, cryptographic protocols, post-quantum cryptography (PQC), key management, digital certificates, and cryptographic libraries
• Research and summarize cryptographic intelligence from multiple sources and communicate findings to technical and non-technical stakeholders
• Assist in the identification and assessment of cryptographic risks that may impact applications, infrastructure, or security controls
• Support the creation of intelligence reports, risk summaries, dashboards, metrics, and presentations for security and technology teams
• Maintain inventories, datasets, and documentation used to support cryptographic risk monitoring and analysis activities
• Participate in periodic reviews of external advisories, standards publications, and vendor security announcements
• Support investigations into newly identified cryptographic weaknesses and help document potential business impacts
• Collaborate with engineering and architecture teams to understand cryptographic implementations and support remediation planning efforts
• Contribute to evidence gathering and reporting activities that support internal governance, audit, and regulatory requirements
• Assist in maintaining processes, playbooks, and operating procedures that support the Cryptographic Agility Surveillance Program
• Collaborate with other Cyber Threat Intelligence teams to establish consistent and mature threat intelligence processes and tooling
• Ability to apply the Admiralty System to establish and manage source reliability and information credibility to enhance automated processing of expansive, continuously collected intelligence
• Continuously build knowledge of cryptographic concepts, cybersecurity trends, and emerging technologies

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Engineering, Mathematics, or a related field, or equivalent practical experience
• One to three years of experience in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or a related field
• Foundational understanding of cybersecurity principles, encryption, authentication, and data protection concepts
• Basic knowledge of common cryptographic technologies, including TLS, PKI, certificates, hashing, and encryption
• Exposure to scripting or programming languages such as Python, Power Shell, Java, JavaScript, C#, or SQL
• Experience conducting research, data analysis, or technical investigations through academic, internship, or professional experience
• Knowledge of emerging topics such as post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management

Demonstrates expertise in cryptographic principles, risk assessment, and threat intelligence, with a strong foundation in cybersecurity practices and emerging technologies. Capable of conducting research and analysis to support cryptographic risk monitoring and remediation efforts.

• Cryptographic Risk Assessment
• Post-Quantum Cryptography
• Encryption Technologies
• Data Analysis
• Cybersecurity Principles

• Cryptography
• Encryption
• Authentication
• Data Protection
• TLS
• PKI
• Hashing
• Scripting
• Programming
• Technical Investigations

• Communication
• Collaboration
• Research
• Analytical Thinking
• Presentation Skills

• Cybersecurity
• Threat Intelligence
• Vulnerability Management
• Security Operations
• IT Audit

• Python
• Power Shell
• Java
• Java Script
• C#
• SQL