Cybersecurity Analyst III (contract)

Location

US-based, remote. This role will accommodate east coast hours.

This is a direct, W-2 consulting role with TekStream. NOT OPEN to third party recruiters.

Position Summary

The Cybersecurity Analyst III:

collaborates with business stakeholders and IT to define security requirements, prioritize initiatives, coordinate security product upgrades, and evaluate emerging technologies. Supports the development and improvement of the organization’s cybersecurity architecture, policies, controls, and processes.

Serves as a liaison between business domains and IT to communicate security requirements and coordinate security considerations for technology releases and implementations. Provides technical guidance, mentoring, and coaching to other cybersecurity analysts.

Applies strong analytical, communication, problem-solving, project management, and risk management skills to translate business needs into effective security solutions for technical and nontechnical audiences.

Essential Duties and Responsibilities

• Collaborate with stakeholders, decision-makers, system owners, end users, and development teams to define business, operational, financial, and security requirements and translate them into actionable project tasks.
• Apply information security principles, frameworks, policies, standards, and best practices to support organizational security objectives.
• Develop, analyze, and communicate functional specifications, process changes, enhancements, and technical recommendations.
• Coordinate requirements planning and security reviews for new products, applications, technology releases, and enhancements to existing systems.
• Plan and manage multiple cybersecurity projects through completion using appropriate project management and Agile methodologies, including Scrum and Kanban.
• Research emerging technologies and security practices to identify opportunities to strengthen cybersecurity architecture and improve operational effectiveness.
• Analyze existing processes, recommend improvements, and mentor colleagues in implementing effective solutions.
• Administer and monitor anti-malware and antivirus solutions, security controls, and related technologies.
• Manage daily vulnerability management activities, track remediation efforts, and report program metrics.
• Work with managed security service providers to monitor security events, optimize Security Information and Event Management (SIEM) systems, and improve threat detection.
• Develop and maintain automated threat detection and remediation playbooks using Security Orchestration, Automation, and Response (SOAR) tools.
• Assess network and system risks and vulnerabilities, recommend corrective actions, and conduct risk assessments independently or collaboratively.
• Investigate security incidents and serious threats, support intrusion management, and develop plans to test and validate responses to high-impact threats.
• Produce security reports, metrics, and briefings to communicate risks, findings, and recommendations to technical and business stakeholders.
• Provide technical expertise on security controls and collaborate with IT and development teams to support secure system configurations and implementations.
• Support security awareness, training, and education initiatives.
• Interpret applicable security laws, regulations, and compliance requirements; assist with regulatory audits and conduct system audits as needed.
• Develop and maintain IT security policies, standards, procedures, and process documentation.
• Standardize security processes to support regulatory, compliance, and organizational requirements.
• Support vendor due diligence and vendor risk management, including documentation reviews, contract assessments, and recommendations for risk mitigation.
• Assist with disaster recovery planning and document complex process changes, installations, and system updates.
• Track significant security and operational issues and recommend preventive measures.
• Perform other technical and administrative duties as assigned.
• Travel as required to fulfill job responsibilities and educational requirements, including occasional overnight stays.

Qualifications

To perform this job successfully, an individual must be able to fulfill the essential duties and responsibilities. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.

Education and Experience

• Bachelor’s degree and 4–6 years of related experience and/or training, or an equivalent combination of education and experience.

Knowledge, Skills, and Abilities

• Advanced knowledge of information security principles, standards, controls, and regulatory requirements.
• Working knowledge of software development, hardware, and cybersecurity engineering concepts.
• Understanding of project management methodologies, including Agile, Scrum, and Kanban.
• Strong analytical, problem-solving, communication, and documentation skills.
• Ability to translate business requirements into technical security solutions and communicate effectively with diverse audiences.
• Proficiency in risk assessment, vulnerability management, incident response, and security process improvement.
• Ability to independently analyze complex issues, recommend solutions, and mentor other cybersecurity professionals.

Preferred Certifications

CompTIA Cybersecurity Analyst (CySA+)

CompTIA Advanced Security Practitioner (CASP+)

EC-Council Certified Ethical Hacker (CEH)

Relevant GIAC security certifications

ISC2 Certified Information Systems Security Professional (CISSP)