Cyber Security Analyst-Level 3

Position Description

 

We are seeking a skilled and motivated Cyber Security Analyst to join our Cyber Security team. In this hybrid role, you will focus on critical tasks across three key areas: Cyber Security Architecture, Cybersecurity Strategy, and Special Projects. You will collaborate with cross-functional teams to strengthen the organization’s security infrastructure, support strategic cybersecurity initiatives, and contribute to special projects that enhance the overall security posture.

 

Key Responsibilities

 

Cyber Security Architecture

 

• Design, implement, and optimize the organization’s security architecture to align with industry best practices and regulatory standards.
• Lead and support efforts to develop scalable security solutions for both on-premises and cloud environments.
• Perform threat modeling, risk assessments, and security reviews of new infrastructure and technologies to ensure they meet security requirements.
• Develop security frameworks and reference architectures to guide implementation and integration of security controls across the enterprise.
• Work with IT teams to ensure that security is embedded into systems, networks, and applications from the outset.

 

Cybersecurity Strategy

 

• Contribute to the development and refinement of the Laboratory’s long-term cybersecurity strategy, identifying key security priorities and risk mitigation tactics.
• Stay current with evolving cyber threats, trends, and emerging technologies, providing recommendations for strategic security investments.
• Support leadership in making informed decisions regarding security priorities, resource allocation, and risk management.
• Assist with aligning cybersecurity objectives to broader organizational goals to ensure security is integrated into business operations.

 

Key Responsibilities (cont.)

 

 

Special Projects

 

• • Lead or support cybersecurity special projects related to security enhancements, incident response, compliance, and other strategic initiatives.
  • Collaborate with cross-functional teams to drive security improvements and ensure project objectives are met within scope, time, and budget constraints.
  • Assist with incident response activities, including identifying root causes and implementing corrective actions.
  • Support vulnerability management efforts, conducting assessments, and working with teams to remediate identified weaknesses.
  • Drive initiatives for continuous improvement of cybersecurity processes, policies, and tools across the organization.

 

Minimum Qualifications

 

• Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience).
• 5+ years of experience in cybersecurity, with a focus on architecture, strategy, or special projects.
• Strong understanding of security frameworks (e.g., NIST, ISO 27001) and risk management methodologies.
• Hands-on experience with security tools, vulnerability management, and incident response processes.
• Experience with security architecture design, including cloud security platforms (AWS/Azure).
• Ability to analyze complex security issues and develop actionable solutions.
• Excellent written and verbal communication skills with the ability to present complex information to both technical and non-technical stakeholders.
• Ability to collaborate effectively with cross-functional teams and lead initiatives across a wide variety of projects.
• Certifications such as CISSP, CISM, CASP or CCSP are a plus.

 

Preferred Qualifications

 

• Exposure to DevSecOps practices and security automation tools.
• Experience with security assessments and audits in regulated environments.
• Familiarity with CI/CD security and securing development pipelines.

 

Hiring Range: $92,900-$123,000

 

 

Disclaimer: MIT Lincoln Laboratory provides a typical hiring range as a good faith estimate of what we reasonably expect to offer for this position at the time of posting. The final salary offered to a selected candidate will depend on various factors, including—but not limited to—the scope and responsibilities of the role, the candidate’s experience, skills and education/training, internal equity considerations and applicable legal requirements. This range reflects base salary only and does not include additional forms of compensation or benefits.