Senior Cybersecurity Analyst

DEFTEC Corporation•Chesapeake, VA

2d•Onsite

About The Position

We are seeking a Senior Cybersecurity Analyst to work on-site in Norfolk, VA, supporting the NATO Communications and Information Agency (NCIA). You will be the day-to-day point person for endpoint security, firewall and network monitoring, and vulnerability scanning across Agency systems. The work is a mix of proactive defense-hardening configurations, running assessments, enforcing compliance-and reactive response when security events come in. You will also support accreditation activities and help shape how security policies are implemented on the ground. This role suits someone who is comfortable working independently across multiple security domains and wants to stay close to the technical work rather than managing from a distance. Occasional travel to other NATO and national facilities is expected.

Requirements

Secondary educational qualification (associate degree or equivalent) with a minimum of 4 years of post-related experience.
At least 4 years of practical experience implementing and maintaining cybersecurity systems within a large organization.
Working experience administrating and monitoring cybersecurity software, including endpoint protection and firewall management.
Good understanding of cybersecurity systems with the ability to work independently to solve problems.
Working experience troubleshooting technical issues and providing technical support to end users.
A thorough knowledge of English, both written and spoken.

Nice To Haves

Security professional certification such as CEH, GIAC, ISC2 (SSCP/CISSP), CompTIA Security+, or other relevant certification.
Experience with vulnerability assessment and scanning tools (e.g., Nessus, Tenable, OpenVAS).
Familiarity with SIEM platforms and log analysis.
Experience working in multinational NATO or coalition environments.

Responsibilities

Manage endpoint security tools, firewall configurations, and network monitoring solutions on a daily basis-you are the first line of defense for these systems.
Run vulnerability scans using automated and semi-automated tools, document findings, and coordinate remediation efforts.
Investigate suspected security breaches and cyber events, supporting containment and response as incidents develop.
Apply and maintain security measures aligned with organizational policy and local risk assessments, adjusting configurations as the threat landscape evolves.
Review technical solution architectures for security risks, flagging concerns and recommending countermeasures before implementation.
Support accreditation activities by performing technical assessments against information assurance policies and making routine accreditation decisions within your scope.
Conduct risk assessments and maintain risk treatment plans, keeping records that support and justify decisions.
Manage access controls, maintain security checklists and authorization tables, and coordinate user access across systems.
Perform periodic system backups and produce monitoring reports that give leadership visibility into security posture.
Execute and review IT security policies across your area of responsibility, tracking implementation and generating status reports for senior management.
Run routine operational procedures, including automation scripts, and test the effectiveness of new or revised security tools and procedures.