Cyber Security Analyst II

Memorial Sloan Kettering Cancer Center•New York, NY

1d•$124,000 - $204,700•Hybrid

About The Position

The Cyber Security Analyst II role focuses on strengthening third-party risk visibility, enhancing real-time monitoring capabilities, and securing vendor integrations across enterprise SaaS and cloud environments. This position blends hands-on security engineering with analytical expertise, enabling proactive detection, investigation, and mitigation of vendor-related risks while supporting secure, scalable business operations. MSK’s Cyber Security Analyst II role emphasizes real-time vendor monitoring, SaaS integration security, and proactive risk detection. You’ll design monitoring solutions, analyze alerts, and collaborate with threat hunting teams to strengthen third-party risk management across complex enterprise environments.

Requirements

Strong foundation in cybersecurity principles, risk management, and threat detection methodologies
Experience with enterprise SaaS platforms such as ServiceNow, Workday, and Salesforce
Hands-on experience with APIs, cloud integrations, and hybrid/cloud-first security environments
Familiarity with threat hunting frameworks and incident response workflows
Understanding of regulatory and compliance standards related to vendor and supply chain risk
Analytical thinking to correlate vendor behavior across systems and detect anomalies
Cross-functional communication to align cybersecurity, vendor management, engineering and organzational stakeholders
Technical adaptability across APIs, cloud platforms, and evolving SaaS ecosystems
Problem-solving mindset focused on improving visibility, detection, and risk reduction
Ownership and accountability in driving initiatives and enhancing security capabilities

Responsibilities

Design and implement monitoring tools to track third-party vendor activity across enterprise networks in real time
Analyze and triage security alerts related to vendor access, SaaS integrations, and external systems
Act as a liaison between cybersecurity operations and threat hunting teams to escalate vendor-related risks
Partner with threat hunting teams to build and mature third-party threat detection capabilities
Integrate and normalize data from platforms such as ServiceNow, Workday, and Salesforce
Develop API-based integrations across SaaS and cloud environments for centralized telemetry visibility
Identify risks from persistent vendor access beyond contract expiration
Optimize monitoring tools to reduce false positives and improve signal quality
Align monitoring practices with vendor risk management, supply chain security, and compliance requirements