Position Title

Security Analyst II

Department

Cybersecurity & Program Management

Corporate Area

PBS Technology

Status

Regular, Full time Exempt

Manager Title

Director, Cybersecurity

Position Overview

The Security Analyst II is responsible for the design, configuration, testing, and deployment of on-prem and cloud services. They will provide Incident Response, threat hunting and proactive support of all development activities in both the cloud and on-prem environments.

Key Responsibilities Will Include, But Are Not Limited To

Monitor information systems and assets to detect anomalous activity and understand its potential impact, maintaining and testing detection processes to keep them effective
Lead incident response — analyzing, containing, and resolving incidents while coordinating with internal teams and external partners such as MSSPs, CSIRTs, and vendors
Execute and maintain response and recovery procedures to restore systems and assets affected by cybersecurity incidents
Continuously improve detection, response, and recovery by incorporating lessons learned from post-incident reviews
Understanding the use of Artificial Intelligence (AI) and how to securely deploy, monitor, and test.
Ability to streamline workflows using AI for security operations
Supporting the secure adoption and governance of enterprise AI tools, including monitoring for shadow AI, data exposure, and misuse in line with the organization’s AI governance program
Operating the vulnerability management lifecycle across cloud and on-premises assets, including authenticated scanning, risk-based prioritization, and driving remediation to closure with system and application owners
Tracking remediation against service-level targets and reporting on vulnerability posture, exceptions, and residual risk to stakeholders and leadership
Building out and maintaining automation scripts and workflows using Microsoft Power Automate (a core PBS platform) and additional scripting such as PowerShell and Python, along with SOAR playbooks, to reduce manual effort and accelerate detection and response
Additional activities as necessary to support the overall cybersecurity and PBS mission

Requirements For Success

Experience requirement:

Minimum of 3 years’ experience working as a systems engineer or administrator
Minimum of 4 years’ experience working as a security analyst
Minimum of 5 years’ cybersecurity experience

Education And/or Certification Requirement

GCIH, GCIA, GMON, GCED, or equivalent GIAC defense focused certifications desired
Certifications by EC-Council, ISC2, Cisco, Microsoft, Fortinet, CompTIA, Offensive Security, etc. to be considered based on relevance to defensive cybersecurity operations
Bachelor’s Degree in a related field such as cybersecurity, information technology, or computer science; equivalent combination of education and experience may be considered

Skills And Abilities

Ability to participate as a technical lead on all projects requiring cybersecurity expertise and consultation
Ability to lead a Cybersecurity Incident Response Team (CIRT), Computer Security Incident Response Team (CSIRT) and Managed Security Services Partners (MSSPs) in the execution of daily incident response activities
Ability to deploy, integrate, configure, and maintain systems which comprise the overall cybersecurity technology stack
Ability to build and maintain security automation and integrations using scripting (PowerShell, Python) and low-code platforms such as Microsoft Power Automate
Ability to communicate complex cybersecurity concepts in a clear and concise manner for laypersons unfamiliar with cybersecurity and/or IT concepts
Desire and ability to help drive organizational adoption and buy-in of cybersecurity policies and standards across the PBS ecosystem
Eagerness to develop, grow, and maintain strong inter-team relationships across the business to aid in the accomplishment of the PBS mission

Preferred Qualifications

Expert knowledge in the following technologies and concepts: DFIR, IAM, PAM, DLP, NGFW, EDR, SIEM, IDS/IPS
Strong foundational knowledge in IT technologies and concepts not limited to email security technologies, application security, cloud security (IaaS & PaaS, etc.), MITRE ATT&CK, SIEM, SOAR, CASB, MSSPs, DNS, Linux, Windows
Fundamental knowledge of NIST, MDM, OWASP, PowerShell/Python/JavaScript, MacOS, malware analysis, LOLBAS, vulnerability management, WAF, CIS Benchmarks
Hands-on experience with vulnerability management and cloud security posture tooling (e.g., authenticated vulnerability scanners, CSPM, WAF)
Experience automating security operations through SOAR, scripting, and low-code workflow platforms (e.g., Microsoft Power Automate)

The base pay range for this position at the beginning of employment is expected to be between $155,000 and $165,000/year. The actual base pay offered may vary depending on multiple individualized factors, including but not limited to job-related knowledge, skills, and experience. The total compensation package for this position will also include other elements for eligible employees, including: (i) eligibility for discretionary bonuses; (ii) various insurance options, including medical, dental, vision, hearing, life, accidental death and dismemberment, short-term and long-term disability, and business travel accident insurance; (iii) identity protection program; (iv) employee assistance program; (v) financial and retirement savings benefits including the PBS Retirement Plan 403(b); (vi) paid time off (17 days per year), paid sick time benefits (12 days per year), paid parental leave (60 days / 12 weeks ), and paid holidays (12 days per year). Details of these benefit plans will be provided upon request. The application window for this position is expected to close on 7/31/2026.

If hired, the employee will be in an “at-will position,” and the Company reserves the right to modify the base hourly rate/salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

PBS is an Equal Opportunity Employer in accordance with the EEOC and the Commonwealth of Virginia.

PBS jobs

Security Analyst II

Never Miss a New Opportunity