Security Analyst - Intermediate

Must Have/Required Skills

• The candidate must have 3 years’ experience supporting enterprise cybersecurity operations, including threat monitoring, incident response, and risk analysis.
• The candidate must have 3 years hands-on experience working with data protection technologies such as data loss prevention (DLP), insider risk management tools, and data security posture management for AI (DSPM for AI).
• The candidate must have 3 years’ experience reviewing and triaging data related security alerts, analyzing access and movement of sensitive information, documenting findings, and escalating incidents according to established procedures.
• The candidate must also have 3 years of collaborating with technical and nontechnical teams to resolve security issues and supporting continuous improvement in the agency’s data security posture.

Preferred/Nice to Have Skills

• Experience working with AI driven security tools, Cortex, particularly DSPM platforms designed to manage sensitive data used by AI systems, is preferred.
• Experience finetuning DLP policies, refining insider risk alerts, or supporting data governance programs is beneficial.
• Familiarity with Azure security, identity-based access controls, conditional access, and security automation or scripting is also preferred.

Required Education and/or Certifications

A bachelor’s degree in cybersecurity, information technology, computer science, or a related field is required; equivalent experience may be considered. A foundational security certification such as CompTIA Security+ or GIAC Security Essentials (GSEC) is required. Preferred certifications include Microsoft SC100, SC200, CEH, or an Associate level CISSP.