IT Cybersecurity Analyst 2

Evergen is a global industry-leading contract development and manufacturing organization (CDMO) in regenerative medicine. As the only regenerative medicine company that offers a differentiated portfolio of allograft and xenograft biomaterials at scale, Evergen is headquartered in Alachua, FL, and has manufacturing facilities in West Lafayette, IN; Eden Prairie and Glencoe, MN; Neunkirchen, Germany;  and Marton, New Zealand.

We are proud to be Great Place to Work® Certified in 2026, reflecting our commitment to creating an exceptional employee experience and workplace culture. 

Help protect the technology, systems, and data that power life-changing medical device and regenerative medicine solutions. As a Cybersecurity Analyst, you'll play a critical role in safeguarding a highly regulated manufacturing environment while partnering with internal teams and a 24/7 Security Operations Center (SOC) to detect, respond to, and prevent cyber threats. This is a hands-on opportunity to make a direct impact, strengthen enterprise security, and help advance our cybersecurity maturity.

• Serve as the primary on-site liaison for Evergen's 24/7 managed Security Operations Center (SOC), coordinating security activities and responding to escalated threats across the enterprise.
• Investigate and validate security alerts by gathering technical and business context, identifying potential impacts, and improving the quality and effectiveness of threat detection.
• Lead hands-on response efforts, including containment, remediation, and recovery activities such as endpoint isolation, account protection, and threat mitigation.
• Partner with SOC analysts to investigate incidents, perform root cause analysis, document findings, and continuously improve incident response playbooks and procedures.
• Collaborate with cybersecurity partners to enhance detection capabilities, tune security use cases, and identify opportunities to strengthen monitoring coverage.
• Support vulnerability management efforts by conducting security scans, assessing risk, prioritizing remediation activities, and tracking progress with technology owners.
• Participate in penetration testing, security assessments, and configuration reviews to strengthen defenses and reduce organizational risk.
• Help administer and optimize cybersecurity technologies, including endpoint protection, email security, logging, identity management, multifactor authentication, and privileged access controls.
• Support cybersecurity governance initiatives by helping implement security policies, regulatory requirements, and industry best practices.
• Gather evidence and support audits, customer assessments, risk reviews, and compliance activities within a regulated environment.
• Develop and report key cybersecurity metrics, including incident response performance, vulnerability remediation, and security program effectiveness.
• Automate routine security reporting, monitoring, and control validation activities to improve efficiency and scalability.
• Partner closely with the Cybersecurity Officer to execute strategic cybersecurity initiatives and provide security guidance to both technical and business teams.
• Promote a security-first culture by educating stakeholders and supporting continuous improvement across the organization.

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; or an equivalent combination of education and experience.

• 3+ years of cybersecurity or information security experience, including security operations, incident response, and collaboration with a managed SOC or MDR provider.
• Hands-on experience with threat monitoring, alert triage, vulnerability management, endpoint security, identity and access management, network security, and cloud security.
• Experience supporting audits, risk assessments, and compliance activities in regulated environments.
• Experience within medical device, healthcare, life sciences, manufacturing, or other highly regulated industries is preferred.

• CompTIA Security+, CySA+, GIAC GSEC, GIAC GCIH, or comparable cybersecurity certifications.
• Microsoft Security, cloud security, or other advanced cybersecurity certifications are a plus.
• Additional credentials in incident response, penetration testing, identity security, network security, cloud security, or risk management are highly valued.

• Strong understanding of cybersecurity principles, defense-in-depth strategies, and Zero Trust security frameworks.
• Experience analyzing security events, assessing risks, and implementing practical solutions.
• Proven incident investigation, troubleshooting, and root cause analysis skills.
• Working knowledge of cloud, network, endpoint, identity, and enterprise application security controls.
• Strong collaboration and relationship-building skills with both technical and non-technical stakeholders.
• Excellent written and verbal communication skills, including the ability to explain cybersecurity concepts to diverse audiences.
• Highly organized, detail-oriented, and driven by continuous improvement.

• Paid Time Off (PTO)
• 401(k) with company match
• Holiday pay
• Medical, dental, and vision insurance
• Short-term and long-term disability coverage
• Paid parental leave and much more!

• Accountable: We own our actions and decisions.
• Agile: We embrace change to stay ahead of the curve and evolve to drive innovation and growth.
• Growth Mindset: We embrace challenges as opportunities for continuous learning.
• Customer-Centric: We prioritize customers at every touch point.
• Inclusive: We thrive on the richness of our diversity and ensure every voice is heard, respected, and celebrated.