Sr. Cyber Security Analyst

Madison-Davis
  • Waltham, MA
  • Instant Apply
30+ days ago

Job Description


A growing cloud-first technology organization operating in a highly regulated environment is seeking a Senior Cybersecurity Analyst to help mature its cybersecurity program.

This is a broad security position for someone who combines hands-on technical expertise with governance, risk, compliance, automation, and cross-functional leadership. The successful candidate will independently own initiatives spanning vulnerability remediation, incident response, cloud security, audits, policy development, risk assessments, and AI-enabled security workflows.

This is not a traditional alert-monitoring or vulnerability-scanning role. The analyst will take ownership of security issues from initial identification through remediation and validated closure.

** Considering applicants in Waltham, MA / Boston, MA - Hybrid / New York / Florida / Texas / Virginia / Washington **

RESPONSIBILITIES
  • Own vulnerability-remediation activities from initial finding through validated closure.
  • Prioritize vulnerabilities and coordinate remediation timelines and SLAs with engineering and infrastructure teams.
  • Participate in security and privacy incidents, including investigation, evidence collection, root-cause analysis, and post-incident activities.
  • Coordinate incident work across security, engineering, legal, customer-facing, and business teams.
  • Review cloud-security findings and recommend practical corrective actions.
  • Perform security-design reviews, risk assessments, and control evaluations.
  • Develop and maintain security policies, standards, procedures, runbooks, and recommendations.
  • Support internal and external audits, control validation, and evidence collection.
  • Identify opportunities to automate recurring security activities and reporting.
  • Build Python and AI-assisted workflows that improve investigations, analysis, and operational efficiency.
  • Help establish repeatable processes and mature the broader cybersecurity program.
  • Communicate security risks and remediation requirements to technical and nontechnical stakeholders.

Role Requirements:
  • 5+ years of cybersecurity or information-security experience.
  • Demonstrated ownership of vulnerability-remediation initiatives.
  • Experience driving findings through prioritization, remediation, SLA tracking, and closure validation.
  • Hands-on incident-response and investigation experience.
  • Strong AWS or comparable cloud-security knowledge.
  • Experience developing security policies, standards, or governance processes.
  • Experience supporting security audits and compliance programs.
  • Knowledge of ISO 27001, SOC 2, NIST CSF, CIS Controls, or similar frameworks.
  • Python, scripting, or security-automation experience.
  • Practical experience using AI-enabled tools in security or technical workflows.
  • Experience independently leading projects or major workstreams.
  • Strong communication and cross-functional stakeholder-management skills.
  • Ability to influence engineering teams without direct reporting authority.

PREFERRED EXPERIENCE
  • Qualys experience.
  • AWS-native security services such as GuardDuty, Security Hub, IAM, KMS, CloudTrail, Config, or Inspector.
  • ISO 42001 or AI-governance exposure.
  • Application-security, threat-modeling, or architecture-review experience.
  • WAF, Cloudflare, or Akamai experience.
  • Claude Code, GitHub Copilot, or comparable AI-development tools.
  • Experience in a regulated, SaaS, healthcare, or financial-technology environment.
  • CISSP, CISM, CCSP, GSEC, or comparable certification.

Numbers & Facts

LocationWaltham, MA

Skills

  • Amazon Web Services (AWS)unmatched
  • Analysis Skillsunmatched
  • Applications Securityunmatched
  • Artificial Intelligence (AI)unmatched
  • Automationunmatched
  • CCSP - Cisco Certified Security Professionalunmatched
  • CISM - Certified Information Security Managerunmatched
  • CISSP - Certified Information Systems Security Professionalunmatched
  • Cloud Computingunmatched
  • Communication Skillsunmatched
  • Computer Securityunmatched
  • Corrective Actionunmatched
  • Cross-Functionalunmatched
  • Customer Relationsunmatched
  • Establish Prioritiesunmatched
  • External Auditunmatched
  • GSEC - GIAC Security Essentials Certificationunmatched
  • GitHubunmatched
  • Healthcareunmatched
  • ISO (International Organization for Standardization)unmatched
  • Identify Issuesunmatched
  • Incident Responseunmatched
  • Information/Data Security (InfoSec)unmatched
  • Internal Auditunmatched
  • Internet Securityunmatched
  • Leadershipunmatched
  • Legalunmatched
  • Operational Auditunmatched
  • Operational Strategyunmatched
  • Policy Developmentunmatched
  • Privacy Controlsunmatched
  • Process Developmentunmatched
  • Programming Toolsunmatched
  • Protective Servicesunmatched
  • Python Programming/Scripting Languageunmatched
  • Riskunmatched
  • Risk Analysisunmatched
  • Risk Managementunmatched
  • Root Cause Analysisunmatched
  • Scripting (Scripting Languages)unmatched
  • Security Analysisunmatched
  • Security Attacksunmatched
  • Security Auditingunmatched
  • Security Designunmatched
  • Service Level Agreement (SLA)unmatched
  • Software as a Service (SaaS)unmatched
  • Threat Modelingunmatched
  • U.S. National Institute of Standards and Technology (NIST)unmatched
  • Vulnerability Scannersunmatched

Be found by employers

5,500+ employers search our resume database daily. Add yours to get found by recruiters looking for candidates like you.

Level up your application

Professional resume templates

Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

Free resume templates

Free resume builder

Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

Free resume builder