Cyber Security Analyst II — M365 Defender & Policy Lead

Smiths Detection; Edgewood (MD); On-site; USD 98,000 - 147,000; Full time

Benefits offered by this job

Medical, dental & vision insurance

401(k) with company match

Paid time off

Job summary

Smiths Detection in Edgewood, MD is seeking a Cyber Security Analyst II to join a small, high-impact security team supporting a DIB environment. This senior technical practitioner will own the Microsoft security stack and craft policies to sustain CMMC Level 2 under NIST SP 800-171.

You will mentor a junior analyst, drive vulnerability management and incident response, and collaborate with HR, IT, and Facility Security on joiner/mover/leaver processes, access reviews, and audits.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field or equivalent experience.
• 3–5 years of hands-on cybersecurity experience, with 2+ in Microsoft 365 / Entra ID / Intune / Defender.
• Experience authoring security policies and procedures and knowledge of NIST SP 800-171 Rev. 2 / CMMC Level 2.

Responsibilities

• Microsoft Security Operations: administer and tune Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID, Intune, and Purview.
• Policy and Procedure Authorship: write and map controls to 171 Rev. 2 and CMMC Level 2.
• Cross-Functional Process Ownership: coordinate joiner/mover/leaver, access reviews, privileged access management.
• Vulnerability and Patch Management: conduct vulnerability cycles and report remediation.
• Incident Response: act as tier-2 responder and drive post-incident reviews.
• Evidence and Audit Support: maintain SSP and POA&M, prepare for audits.

Skills

Microsoft Defender

Entra ID

Intune

Purview

NIST SP 800-171

CMMC Level 2

SIEM

Vulnerability management

Incident response

Policy authoring

Education

Bachelor’s degree in Cybersecurity / Information Systems / CS

Tools

Nessus

Sentinel

Splunk

Google Chronicle

Job description

Smiths Detection in Edgewood, MD is seeking a Cyber Security Analyst II to join a small, high-impact security team supporting a DIB environment. This senior technical practitioner will own the Microsoft security stack and craft policies to sustain CMMC Level 2 under NIST SP 800-171.

You will mentor a junior analyst, drive vulnerability management and incident response, and collaborate with HR, IT, and Facility Security on joiner/mover/leaver processes, access reviews, and audits.