Senior Cybersecurity Analyst - Threat and Vulnerability Management

Full-time - Senior

Hybrid - Philadelphia, PA

Professional, Scientific, and Technical Services

About the position

The PCAOB has a full-time, regular position for a Senior Cybersecurity Analyst - Threat and Vulnerability Management in the Office of Technology (OT). The Senior Cybersecurity Analyst - Threat and Vulnerability management will lead our Threat and Vulnerability Management program. The ideal candidate will play a pivotal role in identifying, assessing, and mitigating threats and vulnerabilities to ensure the security and resilience of the PCAOB IT infrastructure.

Responsibilities

• Act as a technical leader on threat and vulnerability management.
• Perform risk-based vulnerability assessments across systems, applications, and networks (on-prem and in the cloud).
• Review and analyze vulnerability data to identify trends and patterns.
• Advise and assist treatment/remediation teams in prioritizing vulnerability fixes and developing treatment plans.
• Develop, implement, and maintain a vulnerability lifecycle management program.
• Collaborate with OT and other colleagues to prioritize and remediate vulnerabilities.
• Design and implement automated solutions for vulnerability scanning and reporting.
• Provide technical guidance on secure system design and configurations.
• Collaborate with the rest of the security team to enhance overall security posture.
• Monitor and analyze threat intelligence feeds to identify potential risks.
• Conduct threat modeling and recommend mitigations for critical business applications.
• Proactively hunt for cyber threats and vulnerabilities within the organization's environment.
• Analyze security data and logs from multiple sources (MXDR, SIEM, EDR tools, etc.) to detect anomalous activity.
• Build and improve detection mechanisms to identify malicious behavior.
• Perform incident response tasks related to emerging threats and vulnerabilities.
• Lead vulnerability and threat management initiatives across the PCAOB.
• Install, configure, and maintain PCAOB security technologies.
• Act as a liaison between security, OT, and the business to align security practices.
• Participate in on-call rotation.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, or similar field.
• Minimum of 7+ years of Cybersecurity experience with a focus on threat and vulnerability management.
• Proficient with vulnerability scanning tools such as Rapid7 and Defender for Cloud.
• Proficient with risk-based vulnerability assessment.
• Experience in applying environmental facets to vulnerability scoring for prioritization.
• Strong Knowledge of Threat Intelligence platforms and frameworks such as Recorded Future and MITRE ATT&CK.
• Proficiency with security tools like SIEM (e.g. Sentinel, Chronicle), EDR platforms (e.g. Microsoft Defender for endpoints).
• Experience with scripting and automation (e.g. Python, Powershell).
• Familiarity with malware analysis, reverse engineering, and forensics.
• Strong analytical and problem-solving skills, with ability to collaborate effectively with diverse teams.
• A self-starter able to administer a number of open, ongoing assignments at any one time, where some assignments are routinely unstructured, requiring autonomy and independent judgment.
• In-depth experience successfully harmonizing diverse and competing interests.
• Ability to clearly articulate a position with sound logic, supporting empirical evidence, and impartiality.
• Ability to effectively represent the organization to a variety of both internal and external constituencies.
• Superior verbal and written communication skills.
• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.

Nice-to-haves

• GCIH, GCTI, GCFA, GCIA, or other relevant certification.
• Experience with Cloud environments and security solutions (Azure, AWS).
• Deep understanding of secure software development practices (DevSecOps).

Benefits

• Highly competitive compensation and benefits package.
• Hybrid work option with flexibility to work from anywhere in the U.S.
• Generous paid time off - Up to 6 weeks annually, in addition to 12 federal holidays, 2 floating holidays, and a year-end break.
• Highly competitive 401(k) match and savings options with immediate vesting.
• Comprehensive health benefit offerings including medical, dental, and vision plans.
• Supportive paid family leave benefits - Up to 16 weeks paid parental leave and up to 16 weeks paid caregiver leave.
• Life insurance benefits including basic life and AD&D insurance.
• Education benefits including Public Service Loan Forgiveness (PSLF) program and student loan repayment assistance.
• Well-being and family resources including mental health resources and paid volunteer time.
• Commuter benefits with tax-free employer subsidy.