FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior Cyber Security Analyst
Strategic Growth Partners. Support cybersecurity assessments through control gap analysis, evidence gathering, and remediation tracking .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in cybersecurity assessments, incident response, and compliance remediation, with a strong focus on Zero Trust and IAM readiness. Proficient in GRC frameworks and automated compliance tooling, ensuring effective risk management and continuous monitoring.
Highest-signal resume keywords
Cybersecurity AssessmentsIncident Response EngagementsGRC FrameworksZero Trust ImplementationSecurity+ Certification
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Control Gap AnalysisEvidence GatheringVulnerability ManagementPenetration Testing SupportContinuous MonitoringCompliance DashboardsAutomated Evidence CollectionIncident TriageCloud SecurityAI-Assisted Threat Detection
Soft Skills
Knowledge SharingContent CreationLeadership Support
Tools & Technologies
SIEMSOAREMASSServiceNow GRCXactaArcherSCAP/OSCALACASCDM
Certifications & Qualifications
Security+CySA+GSECCISSPCISMCAPCISACCSP
Industry Keywords
NIST CSFNIST SP 800-53ISO 27001CIS ControlsSOC 2DoD RMFHIPAAPCI DSSGLBAGDPR
Tech Stack
Tools & technologiesAWSAzureCloudCyber SecurityGoogle Cloud PlatformServiceNowTypeScript
About the role
Key responsibilities & impact- Support cybersecurity assessments through control gap analysis, evidence gathering, and remediation tracking
- Assist in designing security operations processes, incident response playbooks, and escalation procedures
- Assess Zero Trust and IAM readiness and support implementation roadmaps
- Analyze dependencies between security remediation and technology or cloud migration initiatives
- Support ICAM modernization, onboarding backlog analysis, and process streamlining
- Support readouts of cyber and identity programs, including leadership, resources, financials, schedules, and obstacles
- Build and support continuous control-monitoring programs, automated evidence collection, compliance dashboards, and KPIs
- Support authorization maintenance, POA&M lifecycle management, significant-change reviews, reauthorization triggers, and third-party assurance
- Contribute findings and analysis to broader engagement deliverables
- Support practice development through internal knowledge sharing and content creation
Requirements
What you’ll need- 4+ years of professional experience in cybersecurity for complex, large enterprises
- Demonstrated experience supporting security assessments, incident response engagements, or compliance remediation efforts
- Government or defense experience strongly preferred; regulated industry experience in financial services or healthcare can substitute
- Bachelor's degree required
- Security+, CySA+, GSEC, or equivalent certifications strongly preferred
- CISSP, CISM, CAP, CISA, or CCSP is a plus
- Comfortable with travel up to 60%
- Active Secret Clearance required
- TS/SCI eligibility strongly preferred
- U.S. Citizenship and Residency required
- Experience with GRC frameworks including NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, SOC 2, and DoD RMF/ATO packages
- Hands-on SIEM/SOAR, log analysis, incident triage, vulnerability management, penetration testing support, and DISA STIG compliance
- IAM, Zero Trust, PAM, DoD Zero Trust Strategy and Reference Architecture
- Cloud security across AWS, Azure, and/or GCP; container/workload protection basics; DoD cloud impact levels IL2–IL6
- DoD frameworks including RMF, DISA STIGs, and DoDI 8500 series, or substitute experience with HIPAA, PCI DSS, GLBA, or GDPR
- AI-assisted threat detection and analysis competency
- Vendor and third-party risk review
- Security awareness and phishing simulation program support
- Federal contracting experience
- ICAM, PKI, CAC and derived credentials, and enterprise identity-service onboarding
- Cyber sensing and analytics and quantum-readiness planning exposure
- Continuous monitoring/compliance, NIST SP 800-137, RMF Monitor, cATO, POA&M management, and risk acceptance
- Automated compliance tooling such as eMASS, Xacta, ServiceNow GRC, Archer, SCAP/OSCAL, ACAS, and CDM
- Compliance as code, policy-as-code, CI/CD controls, and DoD Enterprise DevSecOps
Benefits
Comp & perks- Hourly rate is DOE
- 60% travel/hybrid workplace arrangement