Cryptographic Agility Surveillance Analyst

Jobtailor; Massachusetts; On-site; USD 70,000 - 110,000; Full time

Job summary

Jobtailor is seeking a cybersecurity professional in Massachusetts to monitor cryptographic threats and regulatory changes, analyze cryptographic assets, and communicate findings to technical and non-technical stakeholders.

You will track encryption technologies, PKI, TLS, and PQC developments, conduct investigations, and support risk remediation with engineering teams. Strong research, writing, and presentation skills are essential for governance and audits.

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 1-3 years in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or related field.
• Foundational understanding of cybersecurity, encryption, authentication, and data protection concepts.
• Knowledge of TLS, PKI, certificates, hashing, and encryption.

Responsibilities

• Monitor sources for cryptographic threats, vulnerabilities, and standards changes.
• Track developments in encryption algorithms, protocols, PQC, key management, and cryptographic libraries.
• Research and summarize cryptographic intelligence for technical and non-technical stakeholders.
• Assist in identifying cryptographic risks impacting apps, infra, or controls.
• Support intelligence reports, dashboards, metrics, and presentations for security teams.
• Maintain inventories and documentation for cryptographic risk monitoring.
• Collaborate with engineering to understand implementations and remediation planning.
• Contribute to evidence gathering for governance, audit, and regulatory requirements.

Skills

Cryptography

Encryption

Authentication

Data Protection

TLS

PKI

Hashing

Scripting

Programming

Technical Investigations

Communication

Collaboration

Research

Analytical Thinking

Presentation Skills

Education

Bachelor's degree in Cybersecurity/Computer Science/Information Security or related field

Tools

Python

PowerShell

Java

JavaScript

C#

SQL

Job description

• Monitor industry, regulatory, vendor, and academic sources for emerging cryptographic threats, vulnerabilities, standards changes, and technology developments
• Track developments related to encryption algorithms, cryptographic protocols, post-quantum cryptography (PQC), key management, digital certificates, and cryptographic libraries
• Research and summarize cryptographic intelligence from multiple sources and communicate findings to technical and non-technical stakeholders
• Assist in the identification and assessment of cryptographic risks that may impact applications, infrastructure, or security controls
• Support the creation of intelligence reports, risk summaries, dashboards, metrics, and presentations for security and technology teams
• Maintain inventories, datasets, and documentation used to support cryptographic risk monitoring and analysis activities
• Participate in periodic reviews of external advisories, standards publications, and vendor security announcements
• Support investigations into newly identified cryptographic weaknesses and help document potential business impacts
• Collaborate with engineering and architecture teams to understand cryptographic implementations and support remediation planning efforts
• Contribute to evidence gathering and reporting activities that support internal governance, audit, and regulatory requirements
• Assist in maintaining processes, playbooks, and operating procedures that support the Cryptographic Agility Surveillance Program
• Collaborate with other Cyber Threat Intelligence teams to establish consistent and mature threat intelligence processes and tooling
• Ability to apply the Admiralty System to establish and manage source reliability and information credibility to enhance automated processing of expansive, continuously collected intelligence
• Continuously build knowledge of cryptographic concepts, cybersecurity trends, and emerging technologies

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Security, Engineering, Mathematics, or a related field, or equivalent practical experience
• One to three years of experience in cybersecurity, technology risk, security operations, IT audit, threat intelligence, vulnerability management, or a related field
• Foundational understanding of cybersecurity principles, encryption, authentication, and data protection concepts
• Basic knowledge of common cryptographic technologies, including TLS, PKI, certificates, hashing, and encryption
• Exposure to scripting or programming languages such as Python, PowerShell, Java, JavaScript, C#, or SQL
• Experience conducting research, data analysis, or technical investigations through academic, internship, or professional experience
• Knowledge of emerging topics such as post-quantum cryptography, cryptographic asset management, software supply chain security, or cryptographic inventory management

Core Competencies

Demonstrates expertise in cryptographic principles, risk assessment, and threat intelligence, with a strong foundation in cybersecurity practices and emerging technologies. Capable of conducting research and analysis to support cryptographic risk monitoring and remediation efforts.

Highest-signal resume keywords

• Cryptographic Risk Assessment
• Post-Quantum Cryptography
• Encryption Technologies
• Data Analysis
• Cybersecurity Principles

ATS Optimization Keywords

Hard Skills

• Cryptography
• Encryption
• Authentication
• Data Protection
• TLS
• PKI
• Hashing
• Scripting
• Programming
• Technical Investigations

Soft Skills

• Communication
• Collaboration
• Research
• Analytical Thinking
• Presentation Skills

Industry Keywords

• Cybersecurity
• Threat Intelligence
• Vulnerability Management
• Security Operations
• IT Audit

Tools & Technologies

• Python
• PowerShell
• Java
• JavaScript
• C#
• SQL