Senior Cybersecurity Analyst

AeroVironment

. Lead complex cybersecurity investigations from triage through containment, eradication, recovery, and closure .

Posted 10/27/2026full-timeSimi Valley • California • United StatesSenior💰 $100,500 - $153,250 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading complex cybersecurity investigations, incident response, and digital forensics while effectively coordinating with cross-functional teams. Proficient in analyzing security telemetry and developing incident response playbooks to enhance organizational security posture.

Highest-signal resume keywords

Cybersecurity Incident ResponseDigital ForensicsSIEM PlatformsIncident Response ProcessesThreat Hunting

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Incident InvestigationMalware AnalysisScriptingDigital Evidence AnalysisNetwork MonitoringCloud SecurityOperating System Log AnalysisVulnerability ManagementMITRE ATT&CKNIST Incident Response Framework

Soft Skills

Analytical SkillsDecision-MakingCommunication SkillsLeadership SkillsMentoring

Tools & Technologies

Microsoft SentinelMicrosoft DefenderPowerShellPythonBashActive DirectoryAWSGoogle CloudEntra IDOkta

Certifications & Qualifications

GCIHGCFEGCFAGNFACISSPSecurity+CEH

Industry Keywords

NIST 800-61NIST 800-53ISO 27001CMMCITARFedRAMPEnterprise SecurityManufacturing SecurityAerospace SecurityDefense Security

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Lead complex cybersecurity investigations from triage through containment, eradication, recovery, and closure
Serve as technical lead for escalated security incidents and coordinate response activities across analysts and technical teams
Analyze endpoint, identity, email, network, and cloud telemetry to determine incident scope, attack vectors, affected assets, adversary activity, and business impact
Develop incident timelines and identify root causes, persistence mechanisms, lateral movement, and indicators of compromise
Collect, preserve, and analyze digital evidence according to evidence-handling, chain-of-custody, and retention procedures
Coordinate containment and remediation with IT, engineering, application owners, and business stakeholders
Investigate phishing, account compromise, malware, ransomware, unauthorized access, data exfiltration, and suspected insider threats
Use Microsoft Sentinel, Microsoft Defender, and other security platforms to correlate alerts, develop investigative queries, and validate findings
Conduct threat hunting based on incident findings, threat intelligence, and adversary techniques
Maintain incident records and provide technical findings, executive summaries, status updates, and recommendations
Escalate significant incidents and coordinate with leadership, Legal, Human Resources, Privacy, and Compliance
Lead post-incident reviews, identify control gaps, and track corrective actions
Develop and maintain investigation playbooks, response procedures, escalation criteria, and evidence-collection guidance
Partner with security engineers to improve detection coverage, reduce false positives, and automate investigative and response tasks
Mentor analysts, review investigation quality, and strengthen team capabilities through case reviews, exercises, and knowledge sharing
Participate in on-call rotation and lead after-hours response to critical incidents as required

Requirements

What you’ll need

5+ years of experience in cybersecurity incident response, security operations, digital forensics, or related discipline
Experience leading investigations and response for complex security incidents, including ransomware, malware, phishing, business email compromise, account compromise, credential theft, insider threats, data exfiltration, unauthorized access, and privilege escalation
Strong knowledge of incident response processes: preparation, detection, analysis, containment, eradication, recovery, and lessons learned
Experience with SIEM platforms, EDR tools, network monitoring and intrusion detection systems, vulnerability management platforms, and digital forensic and malware analysis tools
Proficiency analyzing operating system logs, authentication logs, network traffic, endpoint telemetry, and cloud security events
Knowledge of MITRE ATT&CK, the Cyber Kill Chain, and the NIST Incident Response Framework
Experience with scripting or automation using PowerShell, Python, Bash, or similar
Ability to write incident reports, technical findings, executive summaries, and after-action reports
Ability to participate in on-call rotation and respond during high-severity incidents
Strong communication, analytical, decision-making, and incident leadership skills
Ability to maintain confidentiality and handle sensitive information appropriately
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field or equivalent practical experience
Professional certifications such as GCIH, GCFE, GCFA, GNFA, CISSP, Security+, or CEH
Experience in enterprise, manufacturing, aerospace, defense, or other regulated environments
Experience with Microsoft Azure, AWS, or Google Cloud
Experience with Active Directory, Entra ID, Okta, or similar identity and access systems
Knowledge of NIST 800-61, NIST 800-53, ISO 27001, CMMC, ITAR, or FedRAMP
Experience with threat hunting, malware triage, reverse engineering, memory and disk forensics
Experience developing incident response playbooks, detection logic, automation, and operational metrics
Prior experience mentoring junior analysts or coordinating cross-functional response teams
Active U.S. security clearance, or ability to obtain and maintain one
Must qualify as a U.S. person under ITAR/EAR or be approvable for an export license; some positions require current U.S. citizenship
Ability to work in an office environment
Secret clearance level

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
401K with company matching
9/80 work schedule
Paid holiday shutdown