Senior Cyber Security Analyst - Microsoft Defender & NIST

Smiths Group; Edgewood (MD); On-site; USD 98,000 - 147,000; Full time

Job summary

Smiths Detection is seeking a Cyber Security Analyst II to own the Microsoft security stack within a Defense Industrial Base environment. You will author policies, mature the program, and mentor a junior analyst, working closely with the Information & Cyber Security Manager.

Responsibilities include Defender/Entra ID administration, vulnerability management, incident response, and audit support, with a focus on NIST SP 800-171 Rev. 2 and CMMC Level 2 compliance.

Qualifications

• Bachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field OR equivalent combination of certifications and hands‑on experience.
• 3–5 years of hands‑on cybersecurity experience, including 2+ years with Microsoft 365 Entra ID Intune Defender in production.
• Experience authoring security policies and procedures.
• Working knowledge of NIST SP 800-171 Rev. 2 and/or CMMC Level 2; understands control mapping, procedure development, and evidence production.

Responsibilities

• Microsoft Security Operations: administer and tune Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID, Intune, and Purview.
• Policy and Procedure Authorship: draft and maintain policies and runbooks mapped to NIST 800-171 Rev. 2 and CMMC Level 2.
• Cross‑Functional Process Ownership: collaborate with HR, IT, and Facility Security on joiner/mover/leaver, access reviews, PAM, onboarding/offboarding.
• Vulnerability and Patch Management: run vulnerability management cycles and report remediation.
• Incident Response: act as tier‑2 responder for Defender/Entra alerts and lead post‑incident reviews.
• Evidence and Audit Support: collect evidence for audits and maintain SSP/POA&M.
• Security Awareness and Training: execute phishing simulations and training for elevated-risk roles.
• Mentoring: guide Cyber Security Analyst I and serve as escalation point.
• Other duties: as assigned.

Skills

Cybersecurity

Policy drafting

Incident response

SIEM experience

Education

Bachelor’s degree or equivalent in Cybersecurity/Info Sec/CS

Tools

Microsoft Defender

Entra ID

Intune

Purview

Nessus

Job description

Smiths Detection is seeking a Cyber Security Analyst II to own the Microsoft security stack within a Defense Industrial Base environment. You will author policies, mature the program, and mentor a junior analyst, working closely with the Information & Cyber Security Manager.

Responsibilities include Defender/Entra ID administration, vulnerability management, incident response, and audit support, with a focus on NIST SP 800-171 Rev. 2 and CMMC Level 2 compliance.