Senior Cybersecurity Analyst

Description

Salary: $135,000 - $143,000/year

Work Location: Remote with occasional on-site work in Washington, DC, at least once per month.

This role leads in the proactive defense of the organization's information systems. You will provide expert-level guidance on cybersecurity operations, risk mitigation, incident response, and security architecture, ensuring the IT environment remains secure, resilient, and compliant. You will act as a mentor and technical authority, driving continuous improvement in security practices.

• Architect, implement, and manage advanced security solutions (SIEM, ZTS, EDR, IDS/IPS), optimizing their effectiveness.
• Lead proactive threat hunting and vulnerability assessments.
• Develop and champion security best practices and standards.
• Provide expert guidance on secure system design and architecture.

• Lead and coordinate complex incident response efforts and conduct thorough post-incident analysis.
• Develop and maintain comprehensive incident response plans, playbooks, and procedures.

• Conduct comprehensive risk assessments and recommend mitigation strategies.
• Lead the development of security policies, ensuring compliance with frameworks such as NIST and ISO 27001.
• Provide advice on security compliance and audit requirements.

• Develop and deliver engaging security awareness training programs.
• Mentor and guide IT staff on secure configurations and best practices.

• Collaborate with senior management, IT teams, and business stakeholders to communicate security risks.
• Provide clear reports on security incidents and vulnerabilities.
• Represent the organization in security-related discussions with external vendors and partners.

• Research and evaluate emerging security technologies and threats.
• Identify process gaps and recommend enhancements to security operations.
• Contribute to the development of the organization's overall cybersecurity strategy.

• US citizenship required.
• Minimum of 10 years of hands‑on experience in cybersecurity, focusing on operations, incident response, and risk management.

• Deep expertise in firewalls, SIEM, IDS/IPS, ZTS, EDR, vulnerability scanning, and cloud security.
• Advanced understanding of network protocols, operating systems (Windows, macOS, Linux, iOS, Android), cloud environments (AWS, Azure, GCP), and containerization.
• Proficiency in scripting languages (e.g., Python, Power Shell).
• Experience with security architecture and design principles.

• Exceptional analytical skills to identify patterns and potential threats.
• Proven ability to lead and manage complex security incidents.

• Excellent written and verbal communication skills.
• Demonstrated leadership skills to mentor and guide the team.

• CISSP
• CompTIA Security+
• AWS Certified Security Specialty
• Microsoft Azure Security Technologies Certified
• Vendor certifications (e.g., Zscaler, Crowd Strike, Splunk)
• Certified Ethical Hacker (CEH)
• GIAC certifications (e.g., GSEC, GCIA, GCSH)

Must meet at least one of the following.

Ability to obtain and maintain a Public Trust.

• 3 weeks of Personal Leave (first year)
• 11 paid Holidays
• 5 days of Flexible Time Off
• 401(k) company match at 50% up to 10% of salary
• Medical, Dental, and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year

• We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Excellent benefits package.
• Great sense of camaraderie and outstanding opportunities for professional growth.
• We hire for careers, not just to fill positions.

* Equal Opportunity Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.*