Senior Cybersecurity Analyst

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; equivalent education, certifications, training, and experience may be considered.

7+ years of cybersecurity, information security, information assurance, risk management, or related IT security experience, including 3+ years in a senior-level cybersecurity role within a complex enterprise environment.

Strong knowledge of NIST SP 800-171, CMMC, and federal/DoD contractor cybersecurity requirements, including protection of CUI and FCI.

Experience with SSPs, POA&Ms, security controls, compliance evidence, risk assessments, audits, and CMMC readiness/assessments.

Experience with vulnerability management, including scanning, analysis, prioritization, remediation, and validation.

Hands-on experience with SIEM, EDR, endpoint security, firewalls, identity/security monitoring tools, and cybersecurity incident response.

Experience securing Microsoft 365/GCC High, Azure, Entra ID, and Active Directory, including MFA, Conditional Access, RBAC, privileged access, and identity security.

Working knowledge of Windows Server, endpoint technologies, network infrastructure, TCP/IP, VLANs, firewalls, VPNs, virtualization, cloud services, and network security.

Experience with endpoint protection, EDR, encryption, system hardening, secure configurations, access controls, patch management, and configuration management.

Experience conducting cybersecurity risk assessments, control gap analyses, security reviews, and risk mitigation activities.

Ability to translate technical and regulatory requirements into practical security controls, procedures, technical requirements, and remediation plans.

Experience with vendor/third-party risk management, cybersecurity policies and procedures, incident response planning, and security documentation.

Strong analytical, investigative, problem-solving, communication, and organizational skills, with the ability to manage multiple cybersecurity priorities.

Ability to work independently and collaborate effectively with IT teams, leadership, business units, vendors, auditors, assessors, and other stakeholders.

Ability to provide senior-level technical guidance and mentoring to IT and cybersecurity personnel.

Ability to support after-hours incident response or emergency cybersecurity activities as required.

Must be legally authorized to work in the United States and meet all applicable U.S. Government/DoD background, eligibility, and security requirements.

Must possess or be able to obtain and maintain an active U.S. Government security clearance at the level required for assigned contracts.

Ability to work in an office environment with prolonged periods of sitting and computer use.

Ability to travel domestically up to 20% as business needs require.

Ability to lift up to 25 pounds occasionally.

At Tlingit Haida Tribal Business Corporation (THTBC), our work goes beyond delivering exceptional services—we are driven by a mission to create meaningful impact. When you join our team, you become part of an organization that values purpose, performance, and people.

We offer the opportunity to work in dynamic, fast-paced environments where your contributions directly impact mission success. Our teams are built on collaboration, accountability, and a commitment to excellence, ensuring you are supported while being challenged to grow.