Top Cybersecurity Analyst jobs

Monitor and investigate cybersecurity alerts, logs, incidents, and platform health across endpoint, network, and backup systems. The analyst will support gaming operations, maintain runbooks and audit documentation, develop monitoring automation, track security metrics, coordinate vendors, assist compliance efforts, and communicate risks and outcomes to leadership in a regulated 24/7 environment.

Designs, implements, and optimizes SIEM detection rules to identify malicious activity and improve threat coverage. Uses SOAR platforms to automate security operations and incident response workflows. Collaborates with security operations, incident response, engineering, and business stakeholders. Applies expertise in cybersecurity, networking, traffic analysis, firewalls, proxies, and network protocols to identify threats and anomalies.

Designs and maintains cybersecurity architectures and controls for classified defense systems. Conducts risk, vulnerability, threat, and compliance assessments; manages RMF documentation and accreditation activities; supports incident response and digital forensics; operates security monitoring and detection tools; and communicates cyber risks and remediation plans to technical and executive stakeholders.

Monitors security alerts and conducts end-to-end incident investigations, threat hunting, log and PCAP analysis, file analysis, and compromise investigations across Windows, Linux, network, and cloud environments. Documents findings, recommends mitigations, supports 24/7 security monitoring, and collaborates with forensics, threat intelligence, penetration testing, vulnerability management, and purple teams to improve security operations.

Protects and enhances NYC DCAS infrastructure, applications, networks, and cloud environments. Responsibilities include incident response, digital forensics, malware analysis, threat hunting, vulnerability management, security monitoring, IAM operations, cloud and application security assessments, audits, GRC activities, policy development, reporting, and remediation tracking. The role supports CISO initiatives, improves cyber resilience, mentors junior staff, and coordinates with technology teams, agencies, vendors, and external partners.

The Cyber Security Analyst SME governs security and compliance across cloud infrastructure and application environments. Responsibilities include maintaining security evidence mappings, enforcing CI/CD pipeline gates, conducting vulnerability assessments, analyzing CND events and logs, developing security policies, managing ATO and compliance activities, and advising engineering and governance teams. The role also supports AWS cloud security, data governance, reporting, risk analysis, incident response, and stakeholder communications.

Supports Department of Defense cybersecurity authorization efforts for cloud, hybrid, and vendor-supported systems. Executes RMF and ATO activities, develops and maintains authorization documentation, coordinates security control implementation, tracks vulnerabilities and POA&M items, supports continuous monitoring, and collaborates with system owners, engineers, assessors, vendors, and interagency stakeholders. Identifies risks, documentation gaps, dependencies, and authorization blockers while driving packages toward completion.

Provide fractional cybersecurity advisory and hands-on operations for hedge funds and family offices: conduct assessments, run vulnerability management and incident response, implement policies and controls, monitor logs and network traffic, test BCDR plans, advise on vendor selection, and report KPIs and remediation plans.

Maintain and interpret cybersecurity compliance standards (NERC CIP, NIST, ISO, etc.), administer internal control systems, support audits, investigate non-compliance, design corrective actions, and identify automation opportunities while collaborating with plant teams and stakeholders.

Analyzes and responds to cyber threats, documents security risks and incidents, supports threat hunting and incident response, conducts security assessments, evaluates software for cybersecurity standard violations, and collaborates across security teams. The role also mentors junior analysts, supports GRC and compliance activities, performs root-cause and IOC analysis, and contributes to process improvements, tabletop exercises, and remediation efforts.

Supports cybersecurity operations for a 24/7 public transit organization by monitoring systems, investigating alerts and threats, assisting with incident response and vulnerability management, maintaining security controls and documentation, supporting audits, and collaborating with infrastructure, application, and service desk teams. The role also contributes to security awareness and risk remediation activities.

Monitor cybersecurity tools, investigate alerts and incidents, support endpoint protection, threat detection, response, and firewall solutions. Manage system, application, and data access; audit identity and access management; report threats and vulnerabilities; assist with security policies, procedures, compliance, and project security practices. The role requires knowledge of Active Directory, Azure/Entra, Windows Server, networking, CMMC, and NIST SP 800-171.

Provides cybersecurity oversight and continuous compliance for secure AWS and USMC cloud services. Responsibilities include cloud and network security, DevSecOps pipeline administration, vulnerability remediation, incident response, logging and monitoring, RMF and STIG compliance, infrastructure-as-code support, and security-control validation. The role coordinates with engineering and mission teams to maintain secure IL6 services and requires Secret clearance with Top Secret eligibility, U.S. citizenship, and quarterly travel.

Supports DoD cybersecurity risk management and authorization activities for DCSA systems. Drives the seven-step RMF lifecycle, maintains eMASS security packages, reviews vulnerability scans, coordinates remediation, tracks POA&M and ATO activities, conducts security control assessments, and prepares SSP and A&A documentation. The role interfaces with program managers, engineers, ISSOs, and leadership while ensuring compliance with DoD, DCSA, NIST, and DISA security requirements.

Supports the Global Cybersecurity PMO through governance audits, compliance reviews, risk and issue management, and business analysis. Gathers and documents cybersecurity project requirements, facilitates stakeholder workshops, develops process maps, conducts gap analyses, and translates business needs into system enhancements. Administers Clarity PPM, maintains data integrity and access controls, supports reporting and analytics, and develops training and governance materials. The role is primarily in-office in South Florida with minimal travel.

Supports global cybersecurity projects through business analysis, PMO governance, requirements gathering, process modeling, risk and issue management, and reporting. Administers Clarity PPM, maintains data integrity and access structures, supports testing and upgrades, and develops training and governance materials. The role facilitates stakeholder workshops, performs audits and compliance reviews, conducts gap analyses, and recommends process improvements. This is an in-office position in the Miami/Fort Lauderdale area with minimal travel.

Supports the Global Cyber Security PMO through business analysis, governance, compliance reviews, requirements gathering, process modeling, risk and issue management, and reporting. Administers Clarity PPM, maintains data integrity and access structures, supports upgrades and integrations, and develops training and governance materials. The role analyzes cybersecurity project needs, facilitates stakeholder workshops, translates business objectives into system requirements, and recommends process improvements.

Provides 24/7 cybersecurity monitoring and incident response for DTRA’s distributed network environment. Responsibilities include analyzing network and host artifacts, conducting incident triage, investigating threats, identifying vulnerabilities, escalating incidents, documenting cyber defense activities, researching adversaries, and supporting DoD CSSP compliance. The analyst monitors security tools, performs shift turnover, collaborates with cybersecurity teams, and provides situational awareness to leadership.

Performs cybersecurity compliance assessments, RMF documentation, security audits, continuous monitoring, STIG remediation, incident reporting, and authorization support for government information systems. Maintains ATO artifacts, SSPs, POA&Ms, and security controls in eMASS while coordinating corrective actions with engineers, administrators, and developers. Requires DoD IAT II certification, extensive RMF and compliance experience, U.S. citizenship, and Top Secret/SCI clearance eligibility.

Supports cybersecurity operations through alert monitoring, threat investigation, incident triage, phishing and malware analysis, vulnerability remediation, SIEM and security-tool optimization, and security reporting. The role also leads business continuity planning, impact analyses, tabletop exercises, and recovery documentation. It assists enterprise risk management by maintaining risk registers, developing mitigation strategies, tracking risk indicators, and preparing reports for leadership. Candidates need relevant cybersecurity education or equivalent experience and must hold or obtain a security certification.

Support Risk Management Framework package development and Authority to Operate activities for Navy land-based test site systems. Responsibilities include security assessments, continuous monitoring, configuration and change management, vulnerability remediation, patch verification, incident reporting, and compliance with NIST, DoD, DISA, and Navy requirements. The role requires experience with eMASS or Xacta, ACAS/Nessus, STIGs, Windows and Linux systems, and security documentation.

Monitors, detects, investigates, and responds to enterprise cybersecurity threats within a Security Operations Center. Responsibilities include SIEM and EDR alert triage, incident response, endpoint and identity threat analysis, cloud security monitoring, vulnerability remediation support, and investigation of phishing, malware, ransomware, and unauthorized access. The analyst also supports Zero Trust initiatives, SOAR automation, playbook development, root-cause analysis, and continuous improvement of security operations.

Supports DoD cybersecurity and Risk Management Framework activities, including Assessment and Authorization, security incident response, vulnerability and threat assessment, compliance with NIST and NISPOM standards, cybersecurity program maintenance, employee training, and liaison work with government personnel. The role serves in a mid-level ISSO capacity and requires eligibility for a Secret clearance.

Partner with business and technology stakeholders to deliver Privileged Access Management (PAM) transformations: facilitate workshops, gather and document BRDs, user stories, and process flows, support application onboarding and solution design, coordinate UAT and testing, and produce status reports and stakeholder communications to drive adoption of PAM capabilities.

Leads cybersecurity engineering, Risk Management Framework activities, security control assessments, authorization artifact development, vulnerability management, and enterprise compliance oversight for Department of the Air Force financial management systems. Conducts mission-impact risk analysis, prepares ATO decision packages, translates DoD and Air Force cybersecurity policies into implementation guidance, briefs leadership and Authorizing Officials, validates engineering changes, and mentors cybersecurity analysts and ISSOs.