OVERVIEW:

We are seeking a Security Analyst II for a hybrid contract position supporting enterprise-level cybersecurity operations. The ideal candidate will have a strong background in audit/compliance, a technical understanding of networking, and exposure to NERC CIP standards. This role blends hands-on security analysis with leadership in architecture, compliance, and OT system protection.

BASIC QUALIFICATIONS:

• Bachelor’s degree in Information Security, Computer Science, Engineering, or related field

(or equivalent combination of education and experience)

• 5+ years of experience in IT or cybersecurity, including hands-on work with:
• Security operations
• Networking and/or telecom
• Security control implementation
• Familiarity with ICS/OT security principles and risk mitigation strategies
• Broad security experience across desktop, mobile, server, network, and web-based systems
• Strong analytical, problem-solving, and project management skills
• Ability to adapt to fast-changing technologies and integrate multiple tools to solve problems

PREFERRED QUALIFICATIONS:

• Advanced degree in Cybersecurity or related discipline
• Industry certifications such as CISSP, CISM, or equivalent (especially cloud security certs)
• Experience with NERC CIP, SOX, or other regulated environments
• Background in OT or utility/energy-sector cybersecurity
• Active Secret Security Clearance

• Apply secure architecture design and operations, including cloud security, to mitigate business risk.
• Protect the integrity, confidentiality, and availability of critical IT and OT systems.
• Lead the design and development of cybersecurity controls and processes.
• Monitor, analyze, and correlate system logs for threat detection and active defense.
• Design and implement tests to evaluate cybersecurity defense effectiveness.
• Participate in the 24x7 on-call rotation for incident response support.
• Serve as a technical advisor and mentor for junior cybersecurity staff.
• Work closely with internal teams and vendors to ensure appropriate enforcement of security controls.
• Coordinate and report on internal security investigations and compliance reviews.
• Ensure compliance with regulatory standards such as NERC CIP, SOX, and other industry mandates.
• Support special projects involving security assessments, audits, or infrastructure upgrades.
• Contribute to cross-functional security initiatives and knowledge sharing across the organization.