Description
The Cyber Security Resiliency Senior Technical Analyst operates as a senior individual contributor and analytical leader within the Cyber Resiliency team. This role independently leads complex analytical domains, establishes analytical standards, and translates ambiguous security data into actionable, program-level insights.
Responsibilities:
- Lead complex analytical workstreams supporting the Cyber Resiliency and Exposure Management program, independently defining analytical approaches, assumptions, and success criteria.
- Develop, refine, and govern KPIs, exposure metrics, and performance insights derived from large-scale security data to ensure consistency, accuracy, and relevance.
- Conduct advanced and independent analysis of vulnerability, configuration, and telemetry datasets to identify systemic risks, resilience gaps, and emerging trends.
- Correlate threat, vulnerability, and exploit intelligence to produce prioritized, data-driven remediation recommendations and clear risk narratives for stakeholders.
- Contribute to the evolution and maturation of resiliency program requirements aligned with NIST CSF, HITRUST, CIS Controls, and CCM frameworks.
- Partner with operational teams to identify and assess gaps in technology coverage, scanning, or telemetry collection across enterprise systems, cloud environments, and middleware.
- Translate complex analytical insights into actionable technical and process improvements, influencing outcomes through cross-team collaboration and data-driven recommendations.
- Educate and drive engagement of security engineering and operational teams to lead in-depth resiliency and exposure reviews.
Requirements:
- 4-7 years of experience in cybersecurity operations, vulnerability management, or cyber risk analysis.
- 1 year of experience performing data analytics with visualization tools, e.g., PowerBI.
- Strong familiarity with security frameworks, such as NIST CSF, HITRUST, and CCM.
- Understanding of CVSS, EPSS, KEV, and other prioritization or threat correlation methods.
- Strong analytical skills and ability to interpret and present complex data.
- Effective communication and collaboration with technical and non-technical audiences.
- Demonstrated experience independently leading complex cybersecurity analyses and influencing technical stakeholders using data-driven insights.