Cyber Security Analyst

Notes:

• Must have hands-on experience in cybersecurity risk assessments and vulnerability management.
• Strong cybersecurity background and a solid understanding of the NIST cybersecurity framework.

Core Responsibilities:

• Perform risk-based cybersecurity assessments using the NIST Cybersecurity Framework
• Conduct Threat Modeling to identify and evaluate cybersecurity risks
• Review vulnerability information and assess risk impact, exploitability, and residual risk
• Maintain and update vulnerability risk registers and risk treatment documentation
• Evaluate the adequacy of existing security controls (e.g., access controls, encryption, vulnerability management, logging) as a part of assessments
• Document assessment results clearly and support risk-based decision making
• Collaborate with system owners and stakeholders to gather evidence and clarify system context
• Support management in the continuous improvement of cybersecurity strategies, policies, and standards to safeguard company information, systems, and technology assets.

Skills & Requirements:

• Proven experience with a wide range of information security processes and principles, including but not limited to risk assessments, threat modeling, risk analysis, and defense in depth.
• Practical understanding of NIST CSF, NIS2 EU Directive and risk-based security principles
• Strong capability in identifying, analyzing, and mitigating cybersecurity threats using a risk driven approach
• Solid and broad cybersecurity background, including strong knowledge of regulatory requirements and industry best practices
• Strong analytical, communication and documentation skills, with ability to collaborate effectively with diverse teams.
• Self-driven and proactive, with a demonstrated ability to take initiative and work independently
• Experience using Microsoft Office 365 tools, including Excel, PowerPoint, Word, and Power BI

Education/ Certifications:

• Master’s degree in Cybersecurity (preferred) / Master’s degree in computer science or related technical discipline (second preference) Bachelor’s degree in cybersecurity or related field (third preference)
• CompTIA Security+ (preferred / nice to have)
• Other relevant cybersecurity certifications related to risk management or frameworks (optional)

Top 5 skills/requirements –

• Performing cybersecurity risk-based assessments.
• Hands-on past work experience on NIST Framework.
• Risk based cybersecurity Threat identification and mitigation activities.
• Strong Cybersecurity background

Beacon Hill offers a robust benefit package including, but not limited to, medical, dental, vision, and federal and state leave programs as required by applicable agency regulations to those that meet eligibility. Upon successfully being hired, details will be provided related to our benefit offerings.