Cybersecurity Analyst (Security and AI Governance)

We need to output HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content. We need to parse the posting. Company description: "Company Cogent Communications is a global, Tier 1 facilities-based ISP..." This is about the company, not necessarily "About the role". Could be used as "About the role"? Usually "About the role" is job summary. The posting includes "Job Summary" paragraph. So we can put that under

About the role

maybe. Or we could treat "Job Summary" as about the role. The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we should map content accordingly. We need to include sections only if posting has real specific content. Let's extract: - About the role: Could be the company description + job summary? Probably job summary is appropriate. The company description is more about the company, but could be considered "About the role"? Might be better to include company description as part of About the role? The instruction says "About the role" heading. We'll put the job summary there. The company description maybe could be omitted? But we must preserve ALL substantive information; we cannot drop company description if it's substantive. However, we could include it under About the role as well. The heading is About the role, but we can include both company overview and job summary under that heading. That would preserve info. - Responsibilities: The "Essential Duties And Responsibilities" list. That's a list of duties. Use

• . - Requirements: Could be qualifications? The posting has "Qualifications" section with degree, experience, etc. Also there is "Qualifications" heading already. So we can map that to Requirements or Qualifications. The instruction lists both Requirements and Qualifications as possible headings. We need to decide which to use. Probably we should use "Qualifications" for the qualifications section (degree, experience). And maybe "Requirements" for any specific required skills? But the posting also has "Proficient In The Following Areas" which could be Skills. And "Preferred Certifications" maybe also qualifications. We'll need to decide. We have sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We have content for: - About the role: company description + job summary. - Responsibilities: essential duties list. - Qualifications: degree, experience, etc. - Skills: "Proficient In The Following Areas" list (knowledge of frameworks, etc.) plus maybe "Ability to work independently..." etc. Could be considered Skills. - Benefits: "A competitive base salary and a full benefits package including; Health, Dental, Vision, Paid Time Off (PTO), Short- and Long-Term Disability, Life Insurance, Holidays, Parental Leave, 401(k) plan with employer match, stock options, and an Employee Assistance Program. Most benefits take effect within 30 days of employment, and some require a waiting period." - Pay: "Compensation [Starting / Initial] Base Salary Pay Range: $100,000/yr - $120,000/yr Specific offers within the listed pay ranges are determined by a variety of factors such as experience, education, skills, certifications and business needs." - Schedule: Not mentioned. No schedule info. So we should NOT include Schedule section. - Requirements: Could be the "Minimum of 2-5 years of experience..." etc. But that's already in Qualifications. Might be redundant. Perhaps we treat "Qualifications" as the degree/experience, and "Requirements" as the specific technical requirements like familiarity with AI, etc. But the posting also has "Proficient In The Following Areas" which is more like skills/knowledge. Could map that to Skills. Then Requirements could be the "Minimum of 2-5 years of experience..." etc. However, the Qualifications section already includes degree and experience. To avoid duplication, we need to decide which heading to use for which content, ensuring we don't repeat content. We could combine: Use "Qualifications" for degree and experience. Use "Requirements" for the "Proficient In The Following Areas" and maybe "Ability to work independently..." etc. Use "Skills" for the "Proficient In The Following Areas"? Actually that seems like skills. Let's think: Typically job postings have: - About the role (company + summary) - Responsibilities - Requirements (minimum qualifications) - Qualifications (preferred qualifications) - Skills (technical skills) - Benefits - Pay - Schedule Given the posting, we have: - Qualifications (degree, experience) - could be Requirements. - Proficient In The Following Areas - could be Skills. - Preferred Certifications - could be Qualifications (preferred). Thus we could map: - Requirements: degree, experience, minimum 2-5 years, etc. - Qualifications: preferred certifications, maybe also "Experience with SIEM tools is a PLUS" etc. But those are plus, not required. - Skills: Proficient In The Following Areas (knowledge of frameworks, AI governance, etc.) plus ability to work independently, communication, analytical, etc. But we need to avoid duplication. Let's extract each piece. From posting: Qualifications section: "Cybersecurity, Computer Science, Information Systems, Data Science, or related Associate's or Bachelor's degree. Minimum of 2-5 years of experience in cybersecurity, information security, application security, cloud security, software development, or a related technical role. Experience with security monitoring, incident response, vulnerability management, risk assessment, and security control implementation. Familiarity with generative AI, machine learning concepts, large language models (LLMs), or AI-enabled business applications. Strong hands-on information security skills and experience. Ability to work independently on projects as assigned. Excellent communication, presentation, and organizational skills. Strong analytical and problem-solving abilities." Then "Proficient In The Following Areas" list: "Knowledge of cybersecurity frameworks and standards, including CIS Controls, NIST Cybersecurity Framework, and security best practices. Familiarity with AI governance principles and emerging AI risk management frameworks. Understanding of network security concepts, endpoint security technologies, identity and access management systems, threat detection methodologies and cloud security principles. Knowledge of application security concepts, API security, and secure software development practices. Understanding of risks associated with generative AI platforms, LLMs, prompt injection, data privacy, and AI model security. Ability to work independently and collaboratively in a fast-paced environment. Ability to write and present formal documentation, risk assessments, and executive-level reports. Experience with security information and event management (SIEM) tools and security monitoring platforms is a PLUS. Experience with cloud platforms such as Azure, AWS, or Google Cloud is a PLUS. Experience with scripting or automation tools such as Python or PowerShell is a PLUS. Experience supporting software development, DevSecOps, or application security initiatives is a PLUS." Then "Preferred Certifications": "Certified Information Systems Security Professional (CISSP) Certified Ethical Hacker (CEH) CompTIA Security+ GIAC Security Essentials (GSEC) Relevant AI Security, Cloud Security, Application Security, or Governance certifications are highly desirable." Thus we have overlapping items: Ability to work independently appears both in Qualifications and Proficient In The Following Areas. We need to preserve all substantive info, but we can combine duplicates? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." It doesn't forbid deduplication if it's same content repeated? It says do not invent or summarize away detail. Duplicated lines: we should remove duplicated lines. So we need to detect duplicated lines and remove them. The ability to work independently appears twice; we should keep only one instance. Thus we need to merge content, removing duplicates. Let's list all unique bullet points from Qualifications and Proficient In The Following Areas and Preferred Certifications. Qualifications bullets (as lines): - Cybersecurity, Computer Science, Information Systems, Data Science, or related Associate's or Bachelor's degree. - Minimum of 2-5 years of experience in cybersecurity, information security, application security, cloud security, software development, or a related technical role. - Experience with security monitoring, incident response, vulnerability management, risk assessment, and security control implementation. - Familiarity with generative AI, machine learning concepts, large language models (LLMs), or AI-enabled business applications. - Strong hands-on information security skills and experience. - Ability to work independently on projects as assigned. - Excellent communication, presentation, and organizational skills. - Strong analytical and problem-solving abilities. Proficient In The Following Areas bullets: - Knowledge of cybersecurity frameworks and standards, including CIS Controls, NIST Cybersecurity Framework, and security best practices. - Familiarity with AI governance principles and emerging AI risk management frameworks. - Understanding of network security concepts, endpoint security technologies, identity and access management systems, threat detection methodologies and cloud security principles. - Knowledge of application security concepts, API security, and secure software development practices. - Understanding of risks associated with generative AI platforms, LLMs, prompt injection, data privacy, and AI model security. - Ability to work independently and collaboratively in a fast-paced environment. - Ability to write and present formal documentation, risk assessments, and executive-level reports. - Experience with security information and event management (SIEM) tools and security monitoring platforms is a PLUS. - Experience with cloud platforms such as Azure, AWS, or Google Cloud is a PLUS. - Experience with scripting or automation tools such as Python or PowerShell is a PLUS. - Experience supporting software development, DevSecOps, or application security initiatives is a PLUS. Preferred Certifications bullets: - Certified Information Systems Security Professional (CISSP) - Certified Ethical Hacker (CEH) - CompTIA Security+ - GIAC Security Essentials (GSEC) - Relevant AI Security, Cloud Security, Application Security, or Governance certifications are highly desirable. Now we need to decide which sections to put them in. We have sections: Requirements, Qualifications, Skills. We could assign: - Requirements: the mandatory items (degree, experience, experience with monitoring, familiarity with generative AI, strong hands-on info sec skills, ability to work independently, excellent communication, strong analytical). That seems like core requirements. - Qualifications: preferred certifications (maybe also plus items?). But the plus items are not required; they are "PLUS". Could be considered Qualifications (preferred). Or we could treat plus items as Skills. - Skills: the Proficient In The Following Areas list (knowledge of frameworks, etc.) plus ability to write reports, etc. Also maybe the plus items (SIEM, cloud, scripting, DevSecOps) could be Skills as well. But we need to avoid duplication: ability to work independently appears in both Requirements and Proficient list; we should keep only one. We'll keep it in Requirements (since it's a core requirement) and remove from Proficient list. Also "Ability to write and present formal documentation, risk assessments, and executive-level reports" appears only in Proficient list; keep there. Now we need to decide if we need both Requirements and Qualifications sections. The posting has a "Qualifications" heading already, but we can repurpose. The instruction says we can use those headings. We'll include both if we have distinct content. Let's define: - Requirements: core mandatory qualifications (degree, years experience, experience with monitoring/incident response/vulnerability/risk assessment/security control implementation, familiarity with generative AI/ML/LLMs/AI-enabled apps, strong hands-on info sec skills, ability to work independently, excellent communication/presentation/org skills, strong analytical/problem-solving). - Qualifications: preferred certifications (CISSP, CEH, Security+, GSEC, relevant AI/security certifications). Also maybe the "PLUS" items? But those are more like skills/experience plus. Could be considered Qualifications (preferred). However, we also have a Skills