Defender for Cloud Engineer

Openkyber; Alaska; On-site; USD 125,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

HSA

FSA

401(k)

Life insurance

Disability insurance

Paid time off

Job summary

OpenKyber in the United States seeks a Senior Information Security Analyst to join a regulated cybersecurity team. You will advise on risk, governance, and compliance, and help strengthen security posture across applications, infrastructure, cloud, and business processes.

The role emphasizes risk assessments, security architecture reviews, and governance initiatives, with collaboration across IT, Legal, Compliance, and Audit to manage cybersecurity risk.

Qualifications

• CISSP, CISM, CRISC, or CISA preferred.
• 6-9 years of experience in Information Security, IT Risk Management, or Security Engineering.
• Hands-on experience with Microsoft Purview and Microsoft Defender.
• Experience conducting risk assessments, security reviews, and control evaluations.
• Knowledge of NIST CSF, FFIEC, PCI DSS, ISO 27001, COBIT, or similar frameworks.
• Experience with SIEM and GRC platforms (Archer, ServiceNow IRM, RiskConnect, etc.)

Responsibilities

• Lead and execute enterprise-wide risk assessments across applications, infrastructure, cloud services, and business processes.
• Evaluate and challenge the effectiveness of security controls and recommend risk-based improvements.
• Serve as a subject matter expert on cybersecurity frameworks, standards, and regulatory requirements.
• Conduct security and architecture reviews for new applications, technologies, and third-party solutions.
• Support the adoption, optimization, and governance of Microsoft Purview and Defender capabilities.
• Analyze security events, threat intelligence, and risk indicators to identify emerging security concerns.
• Assist with incident response, vulnerability management, and remediation tracking activities.
• Support the development and enhancement of security policies, standards, procedures, and governance processes.
• Collaborate with IT, Legal, Compliance, Audit, and business teams to assess and manage cybersecurity risk.
• Contribute to ongoing improvements within GRC programs and supporting platforms.
• Research emerging threats, technologies, and industry trends to proactively address security gaps.

Skills

Security frameworks

SIEM & GRC tools

Microsoft Purview

Microsoft Defender

Risk assessment

Regulatory compliance

Information security

Stakeholder collaboration

Tools

Archer

ServiceNow IRM

RiskConnect

Job description

RESPONSIBILITIES:

Kforce's client in Woburn, MA is seeking a Senior Information Security Analyst to join a growing cybersecurity and risk management team within a highly regulated environment. This individual will serve as a trusted advisor on information security risk, governance, and compliance initiatives while helping strengthen the organization's overall security posture. The ideal candidate will combine strong technical security knowledge with risk management expertise and the ability to influence stakeholders across the organization. This role will support enterprise risk assessments, security architecture reviews, governance initiatives, and the continued evolution of security technologies and processes.

Key Responsibilities:

• Lead and execute enterprise-wide risk assessments across applications, infrastructure, cloud services, and business processes
• Evaluate and challenge the effectiveness of security controls and recommend risk-based improvements
• Serve as a subject matter expert on cybersecurity frameworks, standards, and regulatory requirements
• Conduct security and architecture reviews for new applications, technologies, and third-party solutions
• Support the adoption, optimization, and governance of Microsoft Purview and Microsoft Defender capabilities
• Analyze security events, threat intelligence, and risk indicators to identify emerging security concerns
• Assist with incident response, vulnerability management, and remediation tracking activities
• Support the development and enhancement of security policies, standards, procedures, and governance processes
• Collaborate with IT, Legal, Compliance, Audit, and business teams to assess and manage cybersecurity risk
• Contribute to ongoing improvements within Governance, Risk, and Compliance (GRC) programs and supporting platforms
• Research emerging threats, technologies, and industry trends to proactively identify and address security gaps

REQUIREMENTS:

• CISSP, CISM, CRISC, or CISA preferred
• 6-9 years of experience in Information Security, IT Risk Management, or Security Engineering
• Hands-on experience with Microsoft Purview and Microsoft Defender
• Experience conducting risk assessments, security reviews, and control evaluations
• Knowledge of NIST CSF, FFIEC, PCI DSS, ISO 27001, COBIT, or similar frameworks
• Experience with SIEM and GRC platforms (Archer, ServiceNow IRM, RiskConnect, etc.)

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Note: Pay is not considered compensation until it is earned, vested and determinable. The amount and availability of any compensation remains in OpenKyber's sole discretion until paid and may be modified in its discretion consistent with the law. This job is not eligible for bonuses, incentives or commissions.

OpenKyber is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.