Cybersecurity Analyst II

Job Responsibilities

The duties and responsibilities outlined below include essential functions of the role. Depending on business needs, this role may perform a combination of some or all the following duties.

• Design and architect end-to-end security solutions tailored to clients' environments, including identity and access management, endpoint protection, and cloud security.
• Lead technical security assessments, including architecture reviews, threat modeling, and risk analysis, to identify gaps and recommend actionable improvements.
• Evaluate, recommend, and implement security technologies and platforms — including SIEM, EDR/XDR, ZTNA, CASB, and OT/ICS security tools — aligned to client needs and industry best practices.
• Develop and maintain security reference architectures, solution designs, and technical documentation for client engagements.
• Serve as a subject matter expert (SME) during client onboarding, providing technical guidance on security tool deployment, configuration, and integration.
• Investigate security incidents and lead or support incident response efforts, including root cause analysis and post-incident remediation planning.
• Monitor and analyze security telemetry across client environments, identifying trends, anomalies, and emerging threats.
• Stay current on the threat landscape, emerging attack techniques, and new defensive technologies; translate that knowledge into practical recommendations for clients.
• Collaborate with internal teams, including Governance, Networking, App Development, to ensure cohesive service delivery and consistent security posture across the client base.
• Support compliance-related engagements by mapping architectural controls to frameworks such as NIST CSF, CIS Controls, HIPAA, and CMMC — contributing technical depth to GRC activities where needed.
• Contribute to internal capability development, including building tooling, playbooks, and automation to improve operational efficiency.

Qualifications

• Minimum 3 years of experience.
• Professional security certification, such as CISSP (ISC²) CISM (ISACA), CASP+ (CompTIA), GIAC, or something similar.
• Demonstrated experience designing and implementing security architectures in complex, multi-tenant or MSP environments.
• Deep technical proficiency across core security domains: network security, endpoint security, identity management, cloud security, and security monitoring.
• Hands-on experience deploying and configuring security platforms such as Microsoft Defender/Sentinel, CrowdStrike, Palo Alto, Fortinet, or equivalent enterprise-grade solutions.
• Strong understanding of zero trust principles, defense-in-depth strategies, and secure-by-design methodologies.
• Experience with Microsoft 365 security stack (Defender for Endpoint, Intune, Entra ID, Purview) is highly desirable.
• Familiarity with OT/ICS security concepts and platforms is a plus.
• Ability to produce clear, professional technical documentation — including architecture diagrams, solution designs, and executive-facing summaries.
• Excellent communication skills with the ability to explain complex security concepts to both technical teams and non-technical stakeholders.
• Strong analytical and problem-solving skills, with the ability to operate independently in a fast-paced, client-facing environment.
• Experience with GRC frameworks (NIST CSF, CIS Controls v8, ISO 27001) from a technical implementation perspective is a plus.

Pay

Pay Range = $80,000+ yearly

Status

FLSA and Employment Status: Non-Exempt; Full-Time