Senior Cyber Security Analyst

Summary

Join CannonDesign as a Cybersecurity Analyst to support and monitor cybersecurity operations. Monitor security alerts, investigate incidents, conduct risk assessments, implement security controls, and contribute to security policy development. The ideal candidate possesses strong analytical skills, a proactive mindset, and a passion for digital asset protection. Responsibilities include responding to security events, conducting vulnerability assessments, developing incident response procedures, implementing cybersecurity policies, and managing security controls. The role requires a Bachelor’s degree, 8-10+ years of IT experience with 5+ years in cybersecurity, and in-depth knowledge of IT infrastructure. Cybersecurity certifications are a plus. The salary range is $101,420.00 - $126,720.00 annually, with potential bonuses and a full benefits package.

Requirements

• Bachelor’s degree in cybersecurity, computer science, a related field or equivalent work experience
• Minimum 8-10+ years’ experience in Information Technology, with 5+ years focused in cybersecurity
• In-depth knowledge of IT infrastructure, including cloud platforms, operating systems (Windows & Linux/UNIX), and network components (routers, switches, firewalls, wireless access points)
• Experience working with Endpoint Protection Platforms, such as Microsoft Defender, SentinelOne Complete, etc
• Experience working with enterprise identity and access management solutions
• Experience on SSO (Single-Sign-On) technologies including SAML, federation of identities (IdP and SP), multi-factor authentication
• Experience working with enterprise SIEM platforms or Managed Detection and Response (MDR) services
• Experience working with Zero Trust solutions
• Working knowledge of Public Key Infrastructure, digital certificates and public-key encryption
• Strong understanding of enterprise security architecture design, security concepts, principles, and technologies
• Strong understanding of networking fundamentals and principals
• Strong communication, collaboration, and problem-solving abilities
• Ability to manage multiple projects independently while maintaining a security-first, customer-focused approach

Responsibilities

• Monitor, analyze and respond to security events, identify vulnerabilities, and develop strategies to address security incidents
• Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes
• Follow, prepare, design, and test security incident response procedures and playbooks
• Develop, implement, and maintain cybersecurity policies, procedures, and best practices and ensure compliance industry standards (e.g., CMMC, NIST SP 800-53 & 171, SOC 2)
• Deploy, manage and maintain all security controls, systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software
• Participant in and/or lead the implementation of security controls, tools, and infrastructure to protect systems and data
• Serve as a technical security expert, offering advice and support to IT and business units
• Stay informed on emerging cyber threats, attack vectors, and best practices, proactively recommending strategies to strengthen security posture

Preferred Qualifications

• Cybersecurity certifications are a plus (CompTIA Security+, CEH, GSEC, CISM, CISSP)
• Experience securing Azure and O365 environments; AWS is a plus
• Experience with CMMC, NIST 800-171, and SOC 2 a plus

Benefits

• Medical, dental and vision coverage
• Flexible spending account options
• Voluntary insurances
• Paid time off
• Flex-time schedules
• Remote work options
• 401k plan
• Employee perk programs