IT Cybersecurity Analyst 2

Responsibilities

• Design and maintain enterprise security architecture, technical standards, and reference patterns across on-premises, cloud, endpoint, network, identity, and application environments.
• Lead the technical design, implementation, integration, and optimization of cybersecurity platforms and controls.
• Evaluate new technologies and major system changes for security risk, control requirements, and alignment with enterprise architecture.
• Embed security requirements into infrastructure, application, ERP, manufacturing systems, and digital transformation initiatives.
• Design and improve security monitoring, alerting, threat detection, threat hunting, and response capabilities across the enterprise.
• Lead technical investigation, containment, recovery, and root cause analysis for complex cybersecurity incidents.
• Develop and maintain incident response playbooks, technical procedures, escalation paths, and lessons learned actions.
• Lead enterprise vulnerability and exposure management across servers, endpoints, network devices, cloud services, applications, and other technology assets.
• Prioritize and coordinate remediation based on business criticality, exploitability, threat intelligence, regulatory impact, and compensating controls.
• Coordinate penetration testing, security assessments, secure configuration reviews, and validation of remediation activities.
• Provide technical leadership for identity and access management, privileged access, multifactor authentication, conditional access, and access governance controls.
• Engineer and optimize endpoint protection, email security, network security, cloud security, data protection, segmentation, encryption, logging, and secure remote access capabilities.
• Define security baselines and hardening standards and review exceptions to determine appropriate compensating controls.
• Translate cybersecurity frameworks, company policies, and regulatory requirements into practical technical controls and security requirements.
• Provide technical evidence and subject matter expertise for audits, customer assessments, risk reviews, regulatory activities, and third-party evaluations.
• Develop scripts, workflows, integrations, dashboards, and repeatable processes that automate security monitoring, investigation, response, reporting, and control validation.
• Establish and monitor meaningful technical metrics for cybersecurity risk, control health, vulnerabilities, incidents, and remediation progress.
• Lead complex cybersecurity projects and provide technical oversight for work performed by vendors and service providers.
• Serve as a trusted cybersecurity advisor and facilitate technical design reviews, risk discussions, and decisions for high-impact initiatives.
• Mentor engineers, administrators, and analysts and communicate complex cybersecurity risks and recommendations clearly to technical and non-technical audiences.

Requirements

Education: Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; or equivalent combination of education and experience.

Experience: Minimum 3 years of progressive cybersecurity or information security experience, including advanced security engineering responsibilities and the design and implementation of enterprise security architecture and technical controls in a complex, multi-site environment.

Hands-on experience across security monitoring, detection and response, vulnerability management, identity security, endpoint security, network security, cloud security, and technical response to complex cybersecurity incidents.

Experience evaluating technology risk and supporting audits, risk assessments, and compliance activities in a regulated environment; experience in manufacturing, healthcare, medical device, life sciences, or another regulated industry preferred.

Certifications Preferred: CISSP, CCSP, GIAC, Microsoft Security, AWS Security, or other advanced cybersecurity certification. Additional certifications in incident response, cloud security, penetration testing, identity, network security, or risk management are beneficial.

Skills

• Deep technical knowledge of cybersecurity architecture, defense-in-depth, and Zero Trust principles.
• Strong expertise in threat detection, incident response, vulnerability management, and security operations.
• Experience securing cloud, network, endpoint, identity, and enterprise application environments.
• Ability to analyze complex technical risks and develop practical, scalable security solutions.
• Strong troubleshooting, investigation, and root cause analysis capabilities.
• Ability to lead through technical influence and collaborate effectively across cross-functional teams.
• Excellent written and verbal communication skills, including the ability to communicate cybersecurity risk to technical and business audiences.
• Strong project leadership, organizational, and continuous improvement skills.

Travel

Occasional travel between Evergen locations may be required.

Physical Requirement

• Move or lift objects up to 25 pounds
• Frequent (>75%) stationary position (standing or sitting) while utilizing digital displays
• Frequent (>75%) fine manipulation using hands and fingers (typing, opening, writing, clicking, paper sorting, etc.)

Working Environment

Onsite: Office environment with assigned workstation. Remote positions only: Home office environment with minimum distractions.