Senior Cybersecurity Analyst

ISO New England, Inc•Holyoke, MA

3d•$135,000 - $168,000•Hybrid

About The Position

ISO New England is seeking an experienced Cybersecurity Analyst to support and enhance enterprise cloud, infrastructure, AI, and DevSecOps security initiatives. The role advances cybersecurity strategy through cross-functional collaboration to strengthen technical security, governance, risk management, and regulatory compliance. It provides technical leadership and expertise in support of evolving business objectives and addresses emerging cyber threats across enterprise, cloud, AI, DevSecOps, and regulated environments. The analyst works with internal stakeholders to drive security initiatives, influence technical decisions, and promote security, resilience, and continuous improvement. The ideal candidate has experience in cloud security, vulnerability management, DevSecOps, AI security, network security, and security compliance, and can collaborate across technical teams to implement and maintain enterprise security standards. This is a hybrid U.S.-based role with three days per week onsite. Relocation assistance may be available based on distance; candidates residing outside the United States must relocate. The employer does not sponsor work visas for this position.

Requirements

At least 5 years of experience in cybersecurity, security engineering, or AI security roles.
At least 3 years of security experience with AWS and/or Azure cloud platforms.
Experience designing and implementing enterprise security solutions across cloud, infrastructure, applications, and hybrid environments.
Hands-on experience with AWS and/or Azure, including IAM, CSPM, CIEM, container security, and cloud security best practices.
Experience integrating security controls into CI/CD pipelines and DevSecOps environments.
Knowledge of AI security concepts, including Generative AI, LLM security, AI governance, and AI risk management.
Experience performing vulnerability management, security assessments, configuration reviews, threat modeling, and cybersecurity risk assessments.
Knowledge of enterprise security technologies, including SIEM, EDR/XDR, CNAPP, DSPM, vulnerability management, identity and access management, encryption, and security monitoring platforms.
Familiarity with cybersecurity frameworks and regulatory standards, including NERC CIP, the NIST Cybersecurity Framework, NIST Special Publication 800 Series, ISO 27001, CIS Controls, and applicable regulatory requirements.
Strong analytical, troubleshooting, communication, documentation, and cross-functional collaboration skills.
Ability to manage multiple priorities independently while providing technical leadership and driving continuous security improvements.
Experience with API security practices, including secure API design, authentication and authorization mechanisms, access control, encryption, and protection against API-based threats.

Nice To Haves

Bachelor’s degree in information technology, cybersecurity, computer science, or a related field.
Advanced degree such as a master’s in Cybersecurity Management, Information Assurance, Artificial Intelligence, or a related field.
Industry cybersecurity, cloud security, and AI security certifications or training, including CISSP, CISM, AWS Certified Security – Specialty, Microsoft Azure Security Engineer Associate (AZ-500), ISC2 Certified in AI Security when available, or OWASP AI Security and LLM Security knowledge or training.
Five or more years of cybersecurity experience (listed as desired, not required).

Responsibilities

Develop and implement enterprise cybersecurity strategies aligned with business objectives, regulatory requirements, and industry best practices.
Ensure compliance with cybersecurity frameworks and regulations, including NERC CIP, NIST frameworks, CIS controls, FERC regulations, and SOC 1/SOC 2 requirements.
Implement enterprise security controls across cloud, infrastructure, applications, AI/ML environments, and regulated operational technology systems.
Conduct cloud security assessments across AWS and Azure environments, including IAM, CSPM, CIEM, container security, and configuration management.
Integrate security controls throughout CI/CD pipelines and DevSecOps processes, including automated vulnerability scanning, Infrastructure-as-Code validation, and policy enforcement.
Assess and secure AI/ML systems, Generative AI applications, and LLM integrations through governance, access controls, data protection, prompt security, and AI threat modeling.
Perform vulnerability and network security assessments, configuration reviews, compliance validation, and risk assessments; track remediation across enterprise and cloud environments.
Support security monitoring, logging, threat detection, incident response, and audit evidence collection using SIEM, EDR/XDR, CNAPP, DSPM, vulnerability management, and related platforms.
Collaborate with cloud, infrastructure, application development, enterprise architecture, IAM, network, compliance, and business teams to integrate security into system design and operational processes.
Identify, assess, prioritize, and communicate cybersecurity risks and develop mitigation strategies.
Develop and maintain security policies, standards, governance documentation, compliance reporting, and security best practices.
Monitor emerging cybersecurity threats, AI security risks, industry trends, and regulatory changes to continuously enhance the organization’s security posture.
Provide technical mentorship and cross-functional guidance while promoting cybersecurity awareness, operational excellence, and secure technology adoption.