Lead Cyber Security Analyst

Staples; Framingham (MA); On-site; USD 130,000 - 170,000; Full time

Benefits offered by this job

Inclusive BRGs

Flexible PTO

Holiday schedule + floating holiday

Discounts and Company Match 401(k)

Wellness programs

Job summary

Staples is seeking a Lead Cyber Security Analyst in Framingham, MA to protect enterprise systems and data. You’ll lead complex threat analysis, develop security controls, and mentor junior staff to strengthen our security posture.

You will drive incident response, risk assessments, and governance across IT and business units, aligning with regulatory requirements while partnering with colleagues to implement best practices.

Qualifications

• 5+ years of cybersecurity experience with a proven track record.
• Experience with cybersecurity frameworks and security standards.
• Hands-on with SIEM, firewalls, proxies, DLP, SOAR, and EDR tools.
• Experience conducting vulnerability assessments and incident response.
• Strong understanding of risk management, data protection, and security compliance requirements.

Responsibilities

• Monitor, investigate, and respond to complex cybersecurity threats across enterprise environments.
• Develop, implement, and maintain cybersecurity policies, procedures, and controls.
• Perform security assessments, audits, and vulnerability testing to identify risks and remediation strategies.
• Review and investigate security alerts, logs, and violation reports; coordinate incident response.
• Ensure compliance with data security and privacy regulations and standards.
• Partner with IT and business teams to implement security best practices.
• Research emerging threats and recommend innovative security solutions.
• Provide guidance and mentorship to junior staff.
• Collaborate with internal stakeholders and external partners on security initiatives.

Skills

Cybersecurity expertise

Threat hunting

Vulnerability assessment

Risk assessment

Incident response

Security governance

Communication skills

Education

Bachelor's degree in IT/Cybersecurity

Master's degree in Cybersecurity

Certifications (CISSP/CISM/CEH/CompTIA Security+)

Tools

SIEM

Firewalls

Proxies

DLP

SOAR

EDR

Job description

Staples is business to business. You’re what binds us together. Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer‑centric, results‑oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer‑centric technology services. At Staples, technology and security are critical to delivering exceptional experiences for our customers and associates. As a Lead Cyber Security Analyst, you will play a key role in protecting enterprise systems, data, and digital assets from evolving cyber threats. This is an opportunity to join a collaborative team where your expertise will directly influence the security posture of a leading organization while helping drive innovation, risk mitigation, and business resilience. The Lead Cyber Security Analyst anticipates, identifies, and analyzes complex cybersecurity threats, including malware, denial‑of-service attacks, vulnerabilities, and other emerging risks. This role is responsible for developing and implementing security controls, supporting incident response efforts, conducting risk and vulnerability assessments, and recommending proactive security improvements. The analyst serves as a trusted cybersecurity resource across the organization, mentors less experienced team members, and helps strengthen Staples' overall security strategy.

What You’ll Be Doing:

• Monitor, investigate, and respond to complex cybersecurity threats, incidents, and vulnerabilities across enterprise environments.
• Develop, implement, and maintain cybersecurity policies, procedures, and controls designed to protect organisational data and systems.
• Perform security assessments, audits, and vulnerability testing to identify risks and recommend remediation strategies.
• Review and investigate security alerts, logs, and violation reports while coordinating appropriate incident response activities.
• Help ensure compliance with applicable data security and privacy regulations and standards.
• Partner with IT, infrastructure, and business teams to implement security best practices that align with organisational objectives.
• Research emerging cybersecurity threats, trends, and technologies and recommend innovative solutions to address future risks.
• Provide guidance and mentorship to junior cybersecurity team members.
• Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed.

What You Bring To The Table:

• Strong analytical, investigative, and problem‑solving skills with the ability to assess complex security risks.
• Excellent verbal and written communication skills with the ability to translate technical concepts for diverse audiences.
• A proactive mindset with strong attention to detail and a passion for continuous improvement.
• Ability to work independently while effectively managing multiple priorities and projects.
• Experience collaborating across teams to drive security initiatives and strengthen organisational resilience.
• Deep knowledge of cybersecurity principles, threat landscapes, and enterprise security technologies.

What’s Needed- Basic Qualifications:

• 5+ years of experience in cybersecurity with a demonstrated track record of success.
• Experience working with cybersecurity frameworks and industry security standards.
• Hands‑on experience with security technologies such as SIEM platforms, firewalls, proxies, DLP (data loss prevention), SOAR (security orchestration, automation, and response), and EDR (endpoint, detection, and response) security tools.
• Experience conducting vulnerability assessments, security investigations, and incident response activities.
• Strong understanding of risk management, data protection, and security compliance requirements.

What’s Needed - Preferred Qualifications:

• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, a related field, or equivalent experience.
• Industry‑recognised cybersecurity certifications such as CISSP, CISM, CEH, CompTIA Security+, CNDSP, or equivalent.
• Master’s degree in Cybersecurity or a related discipline.
• 7+ years of specialised cybersecurity experience.
• Experience leading security initiatives or serving as a technical mentor within a cybersecurity team.
• Expertise in proactively identifying, analysing, and mitigating emerging cyber threats in enterprise environments, including experience with threat hunting, evaluating evolving threat landscapes, and assessing threat actor TTPs (tactics, techniques, and procedures) to reduce organisational risk.

We Offer:

• Inclusive culture with associate‑led Business Resource Groups
• Flexible PTO (22 days) and Holiday Schedule (7 observed paid holidays + 1 floating holiday)
• Online and Retail Discounts, Company Match 401(k), Physical and Mental Health Wellness programmes, and more!

Salary range represents the expected compensation for this role at the time of posting. The specific base pay may be influenced by a variety of factors to include the candidate's experience, skill set, education, geography, business considerations, and internal equity. In addition to base pay, this role may be eligible for bonuses, or other forms of variable compensation.