Cyber Security Analyst II

Role overview

Responsibilities

• Administer and tune Defender, Entra ID, Intune, and Purview security capabilities.
• Draft policies and procedures mapped to NIST SP 800-171 and CMMC Level 2 practices.
• Own identity lifecycle, access reviews, privileged access management, and authorized-user processes.
• Run vulnerability and patch management, including prioritization, SLA tracking, and remediation reporting.
• Investigate incidents, lead post-incident reviews, and maintain the incident response plan.
• Maintain audit evidence, the System Security Plan, and the POA&M.
• Execute phishing simulations, deliver targeted training, and mentor the junior analyst.

Required qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or a related field, or equivalent certifications and hands-on experience.
• U.S. citizenship is required.
• Strong written communication for executive, auditor, and government-customer documentation.

Preferred qualifications

• 3–5 years of cybersecurity experience, including at least 2 years administering Microsoft security technologies in production.
• Experience authoring security policies and procedures.
• Working knowledge of NIST SP 800-171 Rev. 2 or CMMC Level 2.
• DIB, defense contractor, or cleared facility experience.
• Experience with GCC or GCC High, SIEM platforms, DFARS, ITAR, or SPRS.
• Microsoft security certifications or CMMC RP/CCP certification.

Technical skills

• Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID, Intune, Purview, Nessus or equivalent vulnerability tools, SIEM platforms, and incident response.

Compensation

• Total compensation ranges from $98,311 to $147,468 per year.
• The position includes a Business Profit Plan and benefits such as medical, dental, vision, 401(k) matching, and paid time off.

About Smiths Detection