Senior Cyber Security Analyst

$120,000 - $130,000/Yr

Vaco - Farmers Branch, TX

Full-time - Mid Level

Farmers Branch, TX

Administrative and Support Services

About the position

Vaco Dallas is seeking a motivated Senior Cyber Security Analyst with 4-8 years of experience for a direct hire opportunity. The Cyber Security Analyst will be responsible for managing and strengthening the IT cybersecurity environment by overseeing incident response, identifying vulnerabilities, and working closely with both internal teams and external vendors. The ideal candidate will have a hands-on approach to security management while also playing a key role in strategic improvements to enhance our overall security posture. This role involves monitoring security controls, threat detection, and ensuring a proactive cybersecurity infrastructure. The right candidate will be eager to excel and contribute effectively to our cybersecurity initiatives. In this position, the Senior Cyber Security Analyst will continuously oversee the security environment to detect, prevent, and respond to cyber threats. They will analyze and address cyber risks, providing timely incident response and risk mitigation. The analyst will serve as the primary contact for internal responses to cybersecurity alerts and incidents, monitoring technical security controls, detection technologies, and online resources for emerging cyber threats. Additionally, the role includes administering Office 365 security tasks, collaborating with system administrators to ensure IT security protocols are in place, and managing user access audits. The analyst will also be responsible for identifying gaps in current security protocols and collaborating with leadership to create improvement plans and budgets. They will build business cases for necessary cybersecurity investments, lead internal phishing campaigns, and evaluate new security tools and technologies for potential implementation. Furthermore, the analyst will liaise with third-party vendors regarding cybersecurity questionnaires and manage cybersecurity renewals, ensuring updates and compliance are met in a timely manner. This role requires conducting regular vulnerability assessments on company systems and networks, acting as a project manager for network and infrastructure tasks, and assisting in addressing technical debt within the existing infrastructure.

Responsibilities

• Continuously oversee the security environment to detect, prevent, and respond to cyber threats.
• Analyze and address cyber risks, providing timely incident response and risk mitigation.
• Serve as the primary contact for internal responses to cybersecurity alerts and incidents.
• Monitor technical security controls, detection technologies, and online resources for emerging cyber threats.
• Administer Office 365 security tasks, including phishing email monitoring, activity log reviews, and handling employee offboarding.
• Collaborate with system administrators to ensure IT security protocols are in place and consistently enforced.
• Oversee user access audits and manage provisioning processes.
• Identify gaps in current security protocols and collaborate with leadership to create improvement plans and budgets.
• Build business cases for necessary cybersecurity investments, including resource allocation and technology upgrades.
• Lead internal phishing campaigns using KnowBe4, analyzing results to inform leadership of risks and improvement opportunities.
• Regularly evaluate new security tools and technologies for potential implementation.
• Liaise with third-party vendors regarding cybersecurity questionnaires and explain internal security processes.
• Work with external partners on outsourced cybersecurity operations, ensuring effective incident response and report follow-up.
• Manage cybersecurity renewals, ensuring updates and compliance are met in a timely manner.
• Conduct regular vulnerability assessments on company systems and networks, recommending and facilitating remediation as needed.
• Act as a project manager for network and infrastructure tasks, such as patching, without directly performing the technical work.
• Assist in addressing technical debt within the existing infrastructure, while proactively identifying areas for cybersecurity improvement.

Requirements

• Bachelor's degree in a related field or equivalent professional experience and certifications.
• Minimum of 4-8 years of experience in cybersecurity or a related field.
• Proficient with enterprise infrastructure technologies such as firewalls, routers, switches, wireless access points, VPNs, and both desktop and server operating systems.
• Strong expertise in Microsoft solutions, including Office 365, Azure, Active Directory, SQL, and Windows.
• Proficiency with scripting and automation, especially using Windows PowerShell.
• Experience implementing security frameworks such as NIST, CMMC, and ITARS.
• Strong communication skills, with the ability to articulate security concepts to both technical and non-technical audiences.

Nice-to-haves

• Relevant certifications such as CEH, CISM, CompTIA Security+, CISSP, GSEC, or equivalent.
• Experience with security technologies and vendors such as Mimecast, KnowBe4, Tenable, BeyondTrust, SolarWinds, and Wireshark.
• Experience securing both on-premises and cloud-hosted systems and applications.
• Familiarity with application and database security practices.

Benefits

• Competitive base salary
• Comprehensive employee benefits