Senior Cybersecurity Analyst

Cybersecurity Jobs; Billings (MT); Hybrid; USD 70,000 - 100,000; Full time

Job summary

Arktos Inc. is seeking a Senior Cybersecurity Analyst to safeguard complex IT infrastructure through risk-based security planning, vulnerability management, and incident response.

The role blends on-prem and cloud security across Windows, Linux, and cloud platforms, with a hybrid Billings, MT-based setup allowing remote participation for qualified candidates. The ideal candidate will translate security requirements into practical controls, monitor threats, perform log analysis, and coordinate

Qualifications

• Experience evaluating security requirements and translating them into controls.
• Familiarity with NIST frameworks and cloud/on-prem security practices.
• Understanding of PCI DSS or other regulatory standards is a plus.

Responsibilities

• Develop, implement, and maintain system security plans aligned with industry standards.
• Perform vulnerability assessments across LAN/WAN, AWS, and GCP.
• Monitor security alerts using SIEM and analyze logs for threat detection.
• Lead incident response coordination and disaster recovery planning.
• Collaborate with network engineering to improve security architecture.

Skills

Security planning

Vulnerability management

Incident response

Threat intelligence

Log analysis

Network security

Scripting

SOC experience

MITRE ATT&CK

Education

Bachelor’s degree in Information Security or related field

Tools

Splunk

SolarWinds

Cisco ASA

VPNs

LDAP/Active Directory

VMware vSphere

Job description

Arktos Inc. is hiring a Senior Cybersecurity Analyst to help protect complex IT infrastructure through security planning, vulnerability management, incident response, and continuous network and security monitoring. This hybrid remote role is based in Billings, MT, with remote participation possible for candidates who have the right expertise.

The position focuses on translating security requirements into practical controls across on-prem networks and cloud environments, using monitoring and analysis to identify suspicious activity and improve detection and response over time.

Responsibilities

• Develop, implement, and maintain comprehensive system security plans aligned with industry standards, including NIST frameworks.
• Perform vulnerability assessments and threat research across network infrastructure, including LAN, WAN, and cloud environments such as AWS and Google Cloud Platform.
• Monitor security alerts using SIEM platforms such as Splunk or SolarWinds, analyze logs for threat detection and response, and identify suspicious activity through log analysis.
• Manage network security devices including Cisco ASA firewalls, IDS/IPS systems, VPNs, and Cisco ISE for identity and access management.
• Carry out system hardening across operating systems such as Windows, Linux (including Debian and CentOS), macOS, and openSUSE, ensuring compliance with standards including FIPS and FedRAMP.
• Lead incident response coordination, including incident management activities, disaster recovery plans, and incident recovery procedures across diverse IT environments.
• Collaborate with network engineering teams to improve network architecture using routing protocols like OSPF and BGP, IPsec VPNs, load balancing solutions, and high availability configurations.
• Conduct threat intelligence research, stay current on attack frameworks, and use tools such as Fiddler or scripting (including PowerShell) for threat detection and mitigation.
• Support vulnerability management by running vulnerability assessment tools, implementing system security hardening strategies, and maintaining compliance with PCI DSS and other regulatory standards.

Requirements

• Extensive experience performing cybersecurity analysis in complex environments involving LAN/WAN networks, AWS, Google Cloud Platform, and virtualization platforms such as VMware vSphere.
• Strong knowledge of computer networking concepts, including TCP/IP, routing protocols such as EIGRP and OSPF, and network installation and management tools including SolarWinds or PRTG.
• Deep expertise in security analysis with SIEM platforms like Splunk, log analysis, and IDS capabilities, including threat detection and response methodologies.
• Hands‑on system administration experience across multiple operating systems, including Windows Server, Linux distributions (Debian, CentOS), UNIX variants such as Solaris, and macOS.
• Familiarity with encryption standards and PKI implementations, plus experience implementing identity and access management solutions such as LDAP or Active Directory.
• Background in vulnerability research and assessment, including comfort with automation using Bash or Python.
• Experience in cyber forensics research and threat hunting.
• Experience working with or in a SOC.
• Experience mapping detection and incidents to MITRE ATT&CK.
• Knowledge of IT governance frameworks such as COBIT or ITIL, plus cloud architecture principles including IaaS and PaaS, and experience working within Agile and/or SDLC processes.

Technologies

• NIST, NIST CSF
• AWS, Google Cloud Platform, IaaS, PaaS
• SIEM, Splunk, SolarWinds
• Cisco ASA, IDS/IPS, VPNs, Cisco ISE, IPsec VPNs
• Windows, Linux, Debian, CentOS, macOS, openSUSE
• FIPS, FedRAMP
• OSPF, BGP, EIGRP, TCP/IP
• Fiddler, PowerShell, Python, Bash
• PCI DSS, VMware vSphere
• PKI, LDAP, Active Directory
• MITRE ATT&CK, COBIT, ITIL, Agile, SDLC
• Kali, Ubuntu

Education & Certifications

• Bachelor’s degree in Information Security, Computer Science, or related field (or equivalent experience)

Why Join Us

• Work on real-world security incidents and meaningful security challenges.
• Influence improvements to detection and response capabilities.
• Gain exposure to both defensive and offensive security disciplines.
• Join a small, highly skilled, growing team focused on high-trust client relationships.

Location: Billings, MT (hybrid). Salary: USD 70,000 - 100,000 per year.