Sr. Analyst, Cybersecurity

TMRW Sports • Orlando, FL

3d

About The Position

The Sr. Analyst, Cybersecurity is an experienced, hands-on security professional who helps protect TMRW Sports' people, technology, data, and live-event operations. Reporting to the Director, Cyber Security, this role strengthens day-to-day security operations by anticipating, monitoring, and investigating threats, leading incident response activities, reducing vulnerabilities, and improving the security and resilience of TMRW Sports’ cloud, endpoint, identity, and third-party environments. The Sr. Analyst will serve as a trusted partner across the business to translate risk into practical action, mature security processes, and support secure innovation in a fast-moving sports, media, and entertainment organization.

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent relevant professional experience
• 5+ years of progressive cybersecurity experience, including substantial hands-on responsibility in security operations, incident response, threat detection, vulnerability management, or cloud security
• Understanding of how IT and security can enable business operations
• Demonstrated experience investigating complex security events and coordinating incidents from initial triage through containment, recovery, and lessons learned
• Working knowledge of common attacker techniques and defensive frameworks, including MITRE ATT&CK, identity-based attacks, phishing, malware, lateral movement, persistence, and data exfiltration
• Hands-on experience with SIEM, EDR/XDR, email security, vulnerability scanning, identity and access management, and cloud-native security tooling
• Practical knowledge of cloud environments and AI security
• Ability to analyze logs and technical evidence from multiple sources, recognize patterns, document conclusions, and make risk-based recommendations
• Strong written and verbal communication skills, including the ability to explain technical risk and response decisions to technical teams, business stakeholders, and leadership
• Sound judgment, discretion, attention to detail, intellectual curiosity, and the ability to manage competing priorities in a high-tempo environment

Nice To Haves

• One or more relevant certifications, such as CISSP, GIAC, Security+, CySA+, SC-200, AZ-500, AWS Certified Security - Specialty, or equivalent practical credentials
• Experience in sports, media, entertainment, broadcast, live-event, venue, or other high-availability operational environments
• Familiarity with security and privacy frameworks or requirements such as NIST CSF, NIST 800-61, CIS Controls, ISO 27001, SOC 2, PCI DSS, and applicable privacy obligations
• Strong analytical, investigative, and problem-solving skills with the ability to assess complex security risks
• Excellent verbal and written communication skills with the ability to translate technical concepts for diverse audiences
• A proactive mindset with strong attention to detail and a passion for continuous improvement
• The ability to work independently while effectively managing multiple priorities and projects
• Experience collaborating across teams to drive security initiatives and strengthen organizational resilience
• Deep knowledge of cybersecurity principles, threat landscapes, and enterprise security technologies
• The ability to take ownership, document your work, follow through on commitments, and look for opportunities to automate, simplify, and strengthen security operations
• Curiosity and a continuous-learning mindset to evolving technologies, attacker behaviors, and the unique operational needs of sports and live entertainment

Responsibilities

• Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
• Lead and actively participate in incident response activities, including evidence collection, scope analysis, stakeholder communications, root-cause identification, recovery validation, and post-incident improvement actions
• Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
• Lead vulnerability management activities, including asset and exposure review, risk-based prioritization, remediation coordination, exception tracking, and verification of corrective actions
• Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization
• Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization’s advanced security posture
• Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members
• Support cybersecurity planning for live events, venue security, and special events by identifying cyber dependencies, operational risks, monitoring needs, and incident escalation paths
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks
• Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed
• Participate in after-hours incident response as needed

Benefits

• Equity ownership opportunities to allow employees to share in the company’s growth
• Unlimited discretionary time off along with 15 paid holidays per year (including the week of Independence Day)
• Comprehensive health insurance options, including a 100% contribution Employee coverage option
• Additional employee and family insurance coverage options with company contribution, including dental and vision
• FSA, HSA and DCHSA opportunities including contribution matches
• Retirement options including traditional 401(k) and Roth IRA plans

What This Job Offers

• Job Type: Full-time
• Career Level: Senior