Cybersecurity Staff Analyst | Human Risk

The Home Depot•GEORGIA - VIRTUAL - GA01, GA

3d•$120,000 - $160,000

About The Position

The Cybersecurity Staff Analyst is the Training and Awareness Team’s team lead and most senior individual contributor. The role helps evolve the program from traditional security awareness—centered on simulation pass/fail metrics and annual compliance training—to a mature Human Risk Management program that adapts to behavioral risk. The analyst works with minimal oversight, uses independent judgment on ambiguous problems, and partners with the Cybersecurity Manager on strategy and key initiatives without formal people-management authority or direct reports. The role applies cyber threat intelligence expertise to connect simulation results with behaviors that drive real-world compromise. It independently collects, analyzes, and translates threat actor tactics, techniques, and procedures, social engineering trends, and MITRE ATT&CK-mapped behavior into simulation scenarios, awareness content, training recommendations, and evidence for adopting adaptive, risk-based capabilities. The position provides day-to-day direction and technical leadership across Training, Simulation, and Awareness; advances Human Risk Management and platform initiatives; and may serve as acting manager when the Manager is unavailable. It also works with internal security and business stakeholders and manages day-to-day coordination with the simulation platform’s managed-service resource and vendor. Process improvement, training advisory work, and informal team mentorship are responsibilities the employee is expected to grow into within approximately six months; demonstrated experience is required upon hire. The role typically reports to a Manager or Senior Manager, has no direct reports, requires no travel, and is based in a comfortable indoor environment. Work is primarily sedentary, with frequent opportunities to move and rare need to move or lift light items. The listed pay range for residents of specified locations is $120,000 to $160,000.

Requirements

At least 8 years of work experience.
Bachelor’s degree or equivalent in a field of study related to the job, or knowledge, skills, and abilities typically acquired through completion of such a program.
Must be at least 18 years old.
Must be legally permitted to work in the United States.
Demonstrated experience in process and operational improvement, training advisory work, and team mentoring is required upon hire.
Ability to work with minimal oversight and exercise independent, sound judgment on ambiguous problems.
Cyber threat intelligence expertise, including collecting, analyzing, and translating threat intelligence and social engineering behavior into actionable program inputs.

Nice To Haves

At least 2 years of previous leadership experience.

Responsibilities

Oversee multiple projects simultaneously and align solutions with customer expectations.
Communicate with business partners at various levels and collaborate with stakeholders, colleagues, developers, and others to deliver high-quality solutions.
Partner cross-functionally to define, assess, communicate, implement, train, and manage change for projects.
Lead, mentor, and guide team members and partners; serve as a subject matter expert and conduct research and analysis within assigned projects.
Provide day-to-day direction, prioritization, and technical leadership across the Training, Simulation, and Awareness pillars, and offer cross-pillar technical input as useful.
Partner with the Cybersecurity Manager to translate strategy into prioritized initiatives and advance key workstreams.
Drive strategic initiatives, including the Human Risk Management transformation, platform roadmap adoption, and new capability rollouts; partner across pillars to clear blockers.
Provide interim leadership and direction when the Manager is unavailable.
Support the transition to adaptive, targeted, intelligence-driven Human Risk Management, including adaptive training pathways, real-time behavioral triggers, and risk-based targeting.
Use simulated and real-world behavioral signals—including repeat simulation failures, malicious email clicks, and DLP-flagged policy violations—to identify high-risk populations.
Build data-backed cases for capabilities such as adaptive learning, real-time triggers, and deepfake or vishing capabilities, partnering with the Manager and leadership on roadmap priorities.
Collect, evaluate, and track threat intelligence from open-source, internal, vendor, commercial, and technical sources; analyze threat actor behavior and social engineering TTPs mapped to MITRE ATT&CK.
Deliver recurring threat-landscape briefings on emerging risks relevant to associates and contractors, and partner closely with the CTI team.
Own applied threat intelligence by translating intelligence into simulation themes, awareness content, and training recommendations.
Work with Data Loss Prevention to incorporate policy-violation and insider-risk signals into program identification and response.
Direct the simulation platform managed-service resource on simulations and training informed by threat intelligence and risk data; review reporting for quality and relevance.
Coordinate platform technical-support requests and roadmap or strategy sessions with the vendor, involving the Manager for contract or investment decisions.
Maintain current knowledge of the platform roadmap, flag milestones and capabilities, and recommend platform enhancements or complementary tools for the Manager’s evaluation.
Design realistic, threat-informed social engineering simulations based on observed active adversary behavior.
Translate threat intelligence into timely content recommendations for broad and targeted awareness campaigns, threat-based content, and seasonal or high-risk-period messaging.
Collaborate with Security Operations, CTI, Incident Response, Threat Detection, DLP, Communications, and other stakeholders to align intelligence and messaging with enterprise risk.
Deliver threat-informed briefings, trend metrics, risk insights, and KPIs to cybersecurity leadership, emphasizing risk reduction and program maturity.
Identify and lead process, tool, handoff, and documentation improvements; document changes and keep the Manager informed about improvements and their rationale.
Advise the Training pillar on emerging threats and recommend updates to compliance and role-based training; provide input and quality review while the Training pillar retains ownership of content development, delivery, and Contractor Compliance execution.
Informally mentor Analyst I/II and Senior Analyst team members across Training, Simulation, and Awareness to strengthen technical and analytical rigor.