IT Cybersecurity Analyst

Job not on LinkedIn

🔥 2 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Chromalloy

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 1951

🚀 Aerospace

⚡ Energy

🎖️ Defense

Aerospace • Energy • Defense

Chromalloy is a global provider of advanced repairs and FAA-approved PMA (parts manufacturer approval) gas-path components for gas turbine engines. With about 75 years of history, the company specializes in engineered repair solutions, aftermarket PMA parts, and maintenance services for aerospace, energy, and military gas-turbine applications—delivering durability, cost savings, and sustainability improvements by increasing part yield on overhauls.

📋 Description

• Monitor, triage, and investigate security alerts using SIEM and EDR tooling (ReliaQuest GreyMatter MDR, CrowdStrike Falcon, Microsoft Defender, Palo Alto); validate severity and scope and document findings. • Serve as an internal escalation point for the 24/7 MDR provider; lead containment and remediation (isolate endpoints, disable accounts, block indicators, reset credentials) and track actions to closure. • Execute and continuously improve incident response processes and maintain playbooks/runbooks for common scenarios (phishing, malware, account compromise, ransomware), aligned to CYBER-002/CYBER-003. • Operate and tune the FY26 security platform portfolio as assigned: SailPoint IGA (identity lifecycle, access reviews), Delinea PAM (and CyberArk evaluation), Titus and DSPM (data classification/posture), AI governance tooling (Securiti.AI, Harmonic), Palo Alto IoT/OT security, and the GRC platform. • Own and run the security awareness program: phishing simulation campaigns, weekly user training, and monthly security culture communications; engage end users during investigations with clear, empathetic guidance. • Coordinate and support the annual tabletop exercise, penetration test, and purple team engagement – including scoping, facilitation, and tracking all findings through remediation to closure with audit-ready evidence. • Support governance and assurance: control evidence collection, policy/standard reviews, and third-party/vendor risk activities aligned to NIST 800-171, CMMC, DFARS 252.204-7012, ISO 27001, and CIS Controls. • Create and tune detection content (queries, correlation rules, indicators) to improve signal quality and reduce false positives; maintain threat-intelligence awareness and translate it into actionable detections and hardening. • Perform vulnerability management activities and basic malware triage and forensic collection as needed.

🎯 Requirements

• BS in Computer Science, Engineering, Information Technology, or equivalent experience. • 3–5 years in a cybersecurity / SOC / IT security operations role with hands-on incident triage, investigation, and coordinated response. • Working knowledge of security frameworks and how they translate into operational controls: NIST 800-171/800-53, CMMC, DFARS, ISO 27001/27002, CIS Controls. • Experience with common security tooling preferred: SIEM, EDR (CrowdStrike preferred), email security, vulnerability scanning, and identity/PAM platforms (SailPoint, Delinea/CyberArk); SOAR a plus. • U.S. person status required for ITAR/CUI access (see Location & Eligibility). • Security+ required; CySA+, GCIH, GCIA, CEH, or SSCP preferred. • Strong written and verbal communication; able to explain risk and response to end users and stakeholders, produce incident documentation, and present post-incident findings. • Ability to participate in a shared after-hours and weekend on-call rotation. • Able to travel as needed, sometimes up to 30%.