Strategic Growth Partners provides both operations and strategic support to commercial organizations. Our client is a leading global professional services firm dedicated to helping organizations tackle their most complex business issues, maximize stakeholder value, and deliver sustainable change.
Their Corporate Performance Improvement practice is looking for a Senior Cyber Security Analyst to support cyber security assessments, risk remediation, and security program transformation for clients navigating complex threat and regulatory environments, including federal and defense environments. This role requires someone who has hands-on experience investigating, analyzing, and remediating security issues at scale — not just monitoring existing environments. This role supports the cyber and identity workstream leads.
Workplace Type: 60% travel. Hybrid.
Employment Type: Full-Time
Clearance: Active Secret Clearance required; TS/SCI eligibility strongly preferred.
Compensation: Hourly rate is DOE.
Experience Should Include:
- Security assessment support, including governance, risk, and compliance (GRC) frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, SOC 2, and the DoD Risk Management Framework (RMF), including authorization (ATO) packages.
- Threat detection and incident response, including hands-on experience with SIEM/SOAR platforms, log analysis, and incident triage.
- Vulnerability management and penetration testing support, including scanning, findings analysis, remediation tracking, and DISA STIG compliance.
- Identity and access management (IAM), Zero Trust architecture, and privileged access management (PAM) concepts, including the DoD Zero Trust Strategy and Reference Architecture.
- Cloud security posture across AWS, Azure, and/or GCP, including container and workload protection basics, plus DoD cloud impact levels (IL2 to IL6).
- Regulatory and compliance exposure, including direct experience with DoD frameworks such as RMF, DISA STIGs, and the DoDI 8500 series. This experience is a strong advantage and preferred for this role; HIPAA, PCI DSS, GLBA, or GDPR experience can substitute.
- AI-driven security tooling, including baseline competency with AI-assisted threat detection and analysis tools. Candidates should articulate how AI accelerates security analysis and investigations.
- Vendor and third-party risk review, including security questionnaires and control validation.
