Sr. Cyber Security Analyst

If you think your skills, experience and aspirations make you a good match for this position, we encourage you to apply. This position may be filled anywhere in the United States. Preference may be given to candidates that can work in one of the CannonDesign locations.    ABOUT THE ROLE

As a Cybersecurity Analyst, you will be responsible for supporting and monitoring CannonDesign's cybersecurity operations. The Cybersecurity Analyst is a cybersecurity professional who monitors security alerts, investigates security incidents, conducts risk assessments, implements security controls, and contributes to the development of security policies & procedures. The ideal candidate has strong analytical skills, a proactive mindset, and a passion for defending digital assets in an ever-evolving threat landscape.

HERE'S WHAT YOU'LL DO

• Monitor, analyze and respond to security events, identify vulnerabilities, and develop strategies to address security incidents.
• Conduct vulnerability assessments, risk analysis, and security audits to identify weaknesses in systems and processes.
• Follow, prepare, design, and test security incident response procedures and playbooks.
• Develop, implement, and maintain cybersecurity policies, procedures, and best practices and ensure compliance industry standards (e.g., CMMC, NIST SP 800-53 & 171, SOC 2).
• Deploy, manage and maintain all security controls, systems and their corresponding or associated software, including endpoint security software, intrusion detection systems, cryptography systems, and privileged account management software.
• Participant in and/or lead the implementation of security controls, tools, and infrastructure to protect systems and data.
• Serve as a technical security expert, offering advice and support to IT and business units
• Stay informed on emerging cyber threats, attack vectors, and best practices, proactively recommending strategies to strengthen security posture.

  HERE'S WHAT YOU'LL NEED

• Bachelor’s degree in cybersecurity, computer science, a related field or equivalent work experience.
• Minimum 8-10+ years’ experience in Information Technology, with 5+ years focused in cybersecurity.
• Cybersecurity certifications are a plus (CompTIA Security+, CEH, GSEC, CISM, CISSP).
• In-depth knowledge of IT infrastructure, including cloud platforms, operating systems (Windows & Linux/UNIX), and network components (routers, switches, firewalls, wireless access points).
• Experience working with Endpoint Protection Platforms, such as Microsoft Defender, SentinelOne Complete, etc.
• Experience working with enterprise identity and access management solutions.
• Experience on SSO (Single-Sign-On) technologies including SAML, federation of identities (IdP and SP), multi-factor authentication.
• Experience securing Azure and O365 environments; AWS is a plus.
• Experience working with enterprise SIEM platforms or Managed Detection and Response (MDR) services.
• Experience working with Zero Trust solutions.
• Experience with CMMC, NIST 800-171, and SOC 2 a plus.
• Working knowledge of Public Key Infrastructure, digital certificates and public-key encryption.
• Strong understanding of enterprise security architecture design, security concepts, principles, and technologies.
• Strong understanding of networking fundamentals and principals.       
• Strong communication, collaboration, and problem-solving abilities.
• Ability to manage multiple projects independently while maintaining a security-first, customer-focused approach.

  The salary range for this position is $101,420.00 - $126,720.00 annually.  This salary range is the range we believe is the anticipated range of possible base compensation at the timing of the posting. We may ultimately pay more or less than the anticipated salary range for the position. Employees may be eligible for discretionary bonuses. We offer a full benefit package including medical, dental and vision coverage and flexible spending account options and voluntary insurances. We have paid time off, flex-time schedules, remote work options and a 401k plan and employee perk programs. For a general overview of our benefits, please visit our careers page at https://www.cannondesign.com/careers/benefits. Actual compensation may vary from posting based on geographic location, work experience, education and/or skill level.   ABOUT OUR FIRM CannonDesign is a design practice where strategy, experience, architecture, engineering, and social impact converge. We don’t just dream up solutions — we create and bring them to life in ways to solve some of the biggest challenges facing our clients and the society. At the heart of everything we do is Living-Centered De