Cybersecurity Analyst
At a glance
Mid-level Security Operations & Analysis role at VISTRADA. Remote · full-time.
In listing Security Operations & Analysis salary
remoteroles summary, based on the employer's posting.
What you'll do
- Assess client compliance against frameworks such as CMMC, NIST and ISO, and help identify security improvements
- Write and revise cybersecurity policies, then help build awareness materials and deliver client training
- Run scripted penetration tests and vulnerability scans, then explain the findings in client reports
- Set up clients in GRC platforms and guide them in using those tools
- Support client incident response, security exercises and advisory work, while tracking emerging risks
What you bring
- A bachelor’s degree in cybersecurity policy development
- One to five years of experience, including vulnerability scanning or penetration testing
- Working knowledge of NIST, CMMC, PCI, HIPAA and related security standards
- You can manage concurrent assessments and deliverables, communicate clearly, and work well both independently and with a team
- You hold or are pursuing CISA, CISSP or a comparable certification
Who this fits
This mid-level role suits someone who can balance several client assessments, communicate with clients and colleagues, and learn across cybersecurity work. You’ll work mostly from home, with occasional visits to client sites.
From the employer
Vistrada is looking to hire a strong Cybersecurity Analyst to join our Cybersecurity practice.
A Cybersecurity Analyst is part of a team that consults with clients about cybersecurity related topics and strategies. This role helps clients identify cybersecurity related improvements, conduct cybersecurity risk assessments, conduct cybersecurity scans and testing, document cybersecurity related policies and procedures, and respond to cybersecurity related issues.
Responsibilities Include:
- Conduct regulatory compliance audits and assessments utilizing frameworks like CMMC, NIST, CSF, ISO, PCI, HIPAA, etc.
- Create and update cybersecurity related policies and procedures.
- Participate in the creation of cybersecurity awareness training programs, materials and conduct training sessions.
- Perform scripted penetration testing and vulnerability scanning utilizing tools like Clone Systems.
- Review and deliver penetration testing and vulnerability scanning reports to clients.
- Participate in the on-boarding of clients into GRC tools like Apptega.
- Provide training and support to clients for our GRC tools.
- Participate in activities related to phishingsocial engineering testing, physical security assessments, and tabletop exercises.
- Participate in activities related to our advisory services offerings including planning, budgeting, presentation building, crisis management, etc.
- Participate in activities related to cybersecurity incident response and remediation.
- Keep abreast of emerging technologies related to cybersecurity and communicate findings to the team.
- Keep abreast of emerging cybersecurity vulnerabilities and help develop notifications and action plans for our clients.
Required Experience/Skills:
- Knowledge of NIST 800-53, NIST 800-171, CSF, CMMC, DFARS, IS027001, PCI, HIPAA and other regulations
- Possess a bachelor’s degree in Cybersecurity
- Policy Development
- 1-5 years of experience
- Vulnerability Scanning / Penetration Testing
- Ability to handle multiple assessments at one time
- Possess/pursuing certifications such as CISA or CISSP, or something similar
- Strong analytical skills and ability to effectively prioritize and coordinate multiple deliverables simultaneously
- Strong ability to work effectively in a team and to communicate verbally and in writing with both external and internal customers
- Eagerness to learn in diverse areas, as well as possess a strong ability to work independently to produce desired results
Job Type: Full-time; Work mostly from home and occasionally at client sites.
Benefits: Medical, Dental, 401K (with employer match), Disability, Paid Time Off, and Bonus Program.
Salary Range: $60K-$80K
Company Background:
Vistrada is a Business, Technology, and Management services firm dedicated to helping clients plan and implement initiatives across Business and Technology Transformation, Integrated Risk Management, Cybersecurity, and Managed Services. Vistrada provides deep expertise and flexible team structures ensuring agility and responsiveness to support our client’s evolving needs. We leverage the right team during a client’s journey to optimize their investment and commitment.
Founded in 2007, Vistrada LLC is a profitable privately-held minority-owned organization. With more than 500+ people successfully serving clients today, our teams operate with a breadth of expertise bringing Big 4 consulting, agency, and Fortune 500 company experiences to clients. Our clients include the most prestigious institutions and many emerging companies with relationships spanning 10+ years. Vistrada has extensive public and private sector experience.
Security Operations & Analysis work from LinkedIn, X, Reddit and Upwork, in one list.
Each morning you get everything that fits, strongest first.
Security Operations & AnalysisRemote
Find me workBy the team behind remoteroles.