Senior Cybersecurity Analyst

Cybersecurity Jobs; Scottsdale (AZ); On-site; USD 116,000 - 165,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

401(k) and Roth Plans

PSPRS

ASRS

HRA

Paid leave

Job summary

Salt River Pima-Maricopa Indian Community in Scottsdale, AZ seeks a Senior Cybersecurity Analyst to strengthen the security program. You will implement security processes, guide risk assessments, and develop cloud security standards across enterprise and cloud environments.

You will mentor security staff, coordinate audits and incident response, and help ensure IT standards are applied organization-wide. This is an onsite role reporting to the Cyber Security Manager.

Qualifications

• Bachelor’s degree in Information Security or related discipline.
• 7+ years direct cyber security experience in lieu of degree.
• 5 years in IT/cyber security with hands-on work in network security, security monitoring, cloud security monitoring, or vulnerability management.
• Direct experience with Microsoft 365 Cloud security.
• Experience assessing and mitigating AI-related cybersecurity and data protection risks.
• Direct experience with the Elastic log management platform.
• Direct experience supporting cyber security incident response.
• Direct experience with secure remote access technologies.

Responsibilities

• Own the implementation and ongoing maintenance of security processes and technology improvements in support of the Cyber security Strategic Plan.
• Partner with IT teams to conduct risk assessments and to audit security systems.
• Develop and maintain security architecture design for cloud and on-prem technologies.
• Mentor security team staff and support career progression.
• Provide senior leadership for the Security Team and ensure IT standards are enforced.
• Establish and enforce best-in-class security standards and practices across planning, implementation, and incident response.
• Audit network and security infrastructure, including firewalls, routers, and systems.

Skills

Risk assessments

Security architecture

Cloud security

Incident response

Vulnerability management

AI security

Elastic stack

Microsoft 365 security

Remote access security

Security audits

Education

Bachelor’s degree in Information Security or related discipline

7+ years direct cyber security experience in lieu of degree

Tools

Elastic Stack

Microsoft 365 Defender

Purview/Compliance

Azure

Defender for Cloud

Microsoft Entra ID

Job description

The Salt River Pima-Maricopa Indian Community is seeking a Senior Cybersecurity Analyst to support and strengthen the organization’s security program in Scottsdale, Arizona. Working under the general supervision of the Cyber Security Manager, you will help implement and maintain security processes and technology improvements aligned to the organization’s Cyber security Strategic Plan.

This onsite role focuses on risk assessment, security system administration and auditing, security architecture development, and ongoing improvements across enterprise and cloud environments. You will also provide guidance to security team members and support investigations, audits, and incident response activities as needed.

Key Responsibilities

• Own the implementation and ongoing maintenance of security processes and technology improvements in support of the Cyber security Strategic Plan.
• Partner with IT teams and divisions to conduct risk assessments and to administer and audit security systems.
• Develop, implement, and maintain security architecture design, while supporting technologies and processes that enable continuous security improvements.
• Mentor security team staff to build technical skills and customer service skills needed to work independently and support career progression.
• Ensure cross-functional training so primary and secondary support personnel are prepared to support division services.
• Assist with routine supervision by prioritizing and coordinating workflow and providing training and assistance as needed.
• Help establish criteria for employee performance evaluations based on division and department goals and objectives.
• Provide senior leadership for the Security Team and work with other IT divisions to establish and enforce IT standards.
• Evaluate and recommend best-in-class security standards, processes, and practices.
• Contribute security best practices and technical expertise across security planning, implementation, and incident response activities.
• Proactively audit and review network and security infrastructure, including monitoring LAN/WAN, security firewalls, routers, and systems to maintain security standards.
• Help ensure scheduled maintenance, patching, and performance monitoring are managed and tracked.
• Provide operational reporting that communicates the SRPMIC security posture.
• Provide technical input to troubleshoot security issues.
• Build and maintain cloud security standards, controls, and processes to support confidentiality, integrity, and availability of cloud-hosted systems and data.
• Perform cloud security assessments of infrastructure, services, architectures, and configurations to identify and mitigate risks.
• Provide SME support for cloud migrations, implementations, and related technology initiatives.
• Monitor cloud environments for threats, vulnerabilities, misconfigurations, and anomalous activity, coordinating remediation efforts.
• Partner with IT and business stakeholders to implement controls for identity and access management, logging and monitoring, encryption, network security, and data protection.
• Provide reporting and metrics regarding the security posture and risk of cloud environments.
• Provide cybersecurity SME leadership for secure adoption, implementation, and use of artificial intelligence technologies, including developing security standards, policies, and guidelines for responsible use.
• Perform security and risk assessments of AI solutions, applications, platforms, and third-party AI services, identifying risks such as data exposure, unauthorized access, insecure integrations, prompt injection, data poisoning, model misuse, and third-party risks.
• Evaluate AI vendors and services to ensure security, privacy, data protection, and contractual requirements are addressed.
• Monitor emerging AI security threats, vulnerabilities, regulatory requirements, and industry best practices, recommending appropriate security controls.
• Support security projects and initiatives, including security tool integrations, tool evaluations, and process improvements; participate in audit reviews and support penetration activities with coordination of mitigation and remediation efforts.
• Respond to security breaches or personnel investigation requests, including accurate data capture, chain of custody, and reporting.
• Maintain confidentiality and integrity of systems, data, and security processes, and perform other duties assigned by the Cyber Security Manager or other IT leadership.

Minimum Qualifications

• Bachelor’s degree from an accredited college or university in Information Security, Cyber Security, or a related discipline.
• May accept a combination of 7 years direct cyber security experience and industry certifications in lieu of degree.
• Five (5) years of direct experience in an IT/Cyber security role, including hands-on work implementing network security, security monitoring, cloud security monitoring, or vulnerability management.
• Direct experience supporting Microsoft 365 Cloud security.
• Direct experience assessing, evaluating, or supporting secure implementation and use of artificial intelligence technologies, including identification and mitigation of AI-related cybersecurity and data protection risks.
• Direct experience with the Elastic log management platform.
• Direct experience supporting cyber security incident response.
• Direct experience managing and/or mitigating software and system vulnerabilities.
• Direct experience conducting security audits, including access control and system configuration.
• Direct experience conducting security assessment on third-party integrations.
• Direct experience with secure remote access technologies.
• Required certification: one of CompTIA Security+, SSCP®, or CISSP.

Technologies

• Elastic Stack (Elastic log management platform)
• Microsoft 365 Cloud security suites, including 365 Defender and Purview/Compliance
• Azure and Defender for Cloud
• Microsoft Entra ID
• LAN/WAN, network security firewalls, and routers
• AI solutions and third-party AI services

Compensation

USD 115,954 - 165,236 per year.

Benefits

• Medical, Dental, Vision
• Life Insurance
• 401(k) and Roth Plans (SRPMIC contributes 5% to pre-tax 401(k) and matches up to 3%)
• Public Safety Personnel Retirement System (PSPRS)
• Arizona State Retirement System (ASRS)
• Health Reimbursement Arrangement (HRA)
• Annual & Sick Leave
• 15 paid holidays each year (including two discretionary holidays and one day of birthday leave)
• Short-Term Disability, Long-Term Disability
• Employee Assistance Program (EAP) through SupportLinc
• WellPath Wellness Program
• Flexible Spending Accounts (FSA) administered by HealthEquity
• Health Savings Account (HSA) for HDHP enrollees
• Supplemental Life & AD&D Insurance
• Public Service Loan Forgiveness (PSLF) eligibility

Special Requirements and Eligibility Notes

• May require work beyond normal hours, including nights, weekends, and holidays.
• May require completion of a Salt River Police Department (SRPD) background investigation and polygraph examination.
• May require receiving and maintaining Salt River Pima-Maricopa Indian Community, Community Regulatory License, and State Certification (ADOG). Pre-employment drug test and extensive fingerprint and background check apply.
• Employees providing services to a campus with children are subject to “Community Code of Ordinances,” Chapter 11 “Minors,” Article X, including random drug testing and completion of a background check every five (5) years.
• Prior to hire, applicants will be subject to drug and alcohol testing and must pass a pre-employment background/fingerprint check.
• SRPMIC is an equal opportunity/affirmative action employer; preference may be given to qualified Community Member Veteran, Community Member, Spouse of Community Member, qualified Native American, and then other qualified candidates, with documentation requirements by the position closing date.
• Plan details and eligibility requirements for benefits are provided upon hire and are subject to change.