Sr. Analyst, Cybersecurity

TMRW Sports; Orlando (FL); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Equity ownership

Unlimited time off

Health insurance

Dental & vision

401(k) plan

Job summary

TMRW Sports in Orlando, FL is seeking a Sr. Analyst, Cybersecurity to protect people, technology, data, and live-event operations.

Reporting to the Director, Cyber Security, this role strengthens day-to-day security by monitoring, incident response, vulnerability management, and cloud/identity security across environments. You will translate risk into practical actions, mature security processes, and support secure innovation in a fast-moving sports, media, and entertainment organization.

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or related field or equivalent experience.
• 5+ years of progressive cybersecurity experience including hands-on security operations, incident response, threat detection, vulnerability management, or cloud security.
• Understanding of how IT and security enable business operations.
• Experience investigating complex security events and coordinating incidents end-to-end.
• Knowledge of attacker techniques and defensive frameworks (MITRE ATT&CK, etc.).
• Hands-on with SIEM, EDR/XDR, email security, vulnerability scanning, IAM, and cloud-native security tooling.
• Knowledge of cloud environments and AI security.
• Ability to analyze logs from multiple sources and make risk-based recommendations.
• Strong written and verbal communication, ability to explain risk to diverse audiences.

Responsibilities

• Lead incident response activities, including evidence collection, scope analysis, stakeholder communications, root-cause identification, recovery validation, and post-incident improvements.
• Drive threat intelligence initiatives, hunting strategies, and implementation of solutions to enhance security posture.
• Oversee vulnerability management activities: asset reviews, risk prioritization, remediation coordination, and verification of actions.
• Mature GRC initiatives and ensure compliance with regulations, standards, and best practices.
• Develop and deliver cybersecurity training and awareness programs, mentoring junior team members.
• Support cybersecurity planning for live events, venue security, and incident escalation paths.
• Develop and maintain IT security documentation, including runbooks and playbooks.

Skills

Incident response

Threat intelligence

GRC

Cloud security

SIEM

EDR/XDR

IAM

Vulnerability management

Threat hunting

Security leadership

Education

Bachelor’s degree in cybersecurity or related field

Tools

SIEM

EDR/XDR

Email security

Vulnerability scanning

Identity and access management

Cloud-native security tooling

Job description

Job Type

Full-time

Description

The Sr. Analyst, Cybersecurity is an experienced, hands-on security professional who helps protect TMRW Sports' people, technology, data, and live-event operations. Reporting to the Director, Cyber Security, this role strengthens day-to-day security operations by anticipating, monitoring, and investigating threats, leading incident response activities, reducing vulnerabilities, and improving the security and resilience of TMRW Sports’ cloud, endpoint, identity, and third-party environments. The Sr. Analyst will serve as a trusted partner across the business to translate risk into practical action, mature security processes, and support secure innovation in a fast-moving sports, media, and entertainment organization.

Responsibilities

• Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations
• Lead and actively participate in incident response activities, including evidence collection, scope analysis, stakeholder communications, root-cause identification, recovery validation, and post-incident improvement actions
• Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture
• Lead vulnerability management activities, including asset and exposure review, risk-based prioritization, remediation coordination, exception tracking, and verification of corrective actions
• Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization
• Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization’s advanced security posture
• Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members
• Support cybersecurity planning for live events, venue security, and special events by identifying cyber dependencies, operational risks, monitoring needs, and incident escalation paths
• Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks
• Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed
• Participate in after-hours incident response as needed

Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent relevant professional experience
• 5+ years of progressive cybersecurity experience, including substantial hands-on responsibility in security operations, incident response, threat detection, vulnerability management, or cloud security
• Understanding of how IT and security can enable business operations
• Demonstrated experience investigating complex security events and coordinating incidents from initial triage through containment, recovery, and lessons learned
• Working knowledge of common attacker techniques and defensive frameworks, including MITRE ATT&CK, identity-based attacks, phishing, malware, lateral movement, persistence, and data exfiltration
• Hands-on experience with SIEM, EDR/XDR, email security, vulnerability scanning, identity and access management, and cloud-native security tooling
• Practical knowledge of cloud environments and AI security
• Ability to analyze logs and technical evidence from multiple sources, recognize patterns, document conclusions, and make risk-based recommendations
• Strong written and verbal communication skills, including the ability to explain technical risk and response decisions to technical teams, business stakeholders, and leadership
• Sound judgment, discretion, attention to detail, intellectual curiosity, and the ability to manage competing priorities in a high-tempo environment

Preferred

• One or more relevant certifications, such as CISSP, GIAC, Security+, CySA+, SC-200, AZ-500, AWS Certified Security - Specialty, or equivalent practical credentials
• Experience in sports, media, entertainment, broadcast, live-event, venue, or other high-availability operational environments
• Familiarity with security and privacy frameworks or requirements such as NIST CSF, NIST 800-61, CIS Controls, ISO 27001, SOC 2, PCI DSS, and applicable privacy obligations

You’ll Be Successful If You Possess

• Strong analytical, investigative, and problem-solving skills with the ability to assess complex security risks
• Excellent verbal and written communication skills with the ability to translate technical concepts for diverse audiences
• A proactive mindset with strong attention to detail and a passion for continuous improvement
• The ability to work independently while effectively managing multiple priorities and projects
• Experience collaborating across teams to drive security initiatives and strengthen organizational resilience
• Deep knowledge of cybersecurity principles, threat landscapes, and enterprise security technologies
• The ability to take ownership, document your work, follow through on commitments, and look for opportunities to automate, simplify, and strengthen security operations
• Curiosity and a continuous-learning mindset to evolving technologies, attacker behaviors, and the unique operational needs of sports and live entertainment

Benefits

• Equity ownership opportunities to allow employees to share in the company’s growth
• Unlimited discretionary time off along with 15 paid holidays per year (including the week of Independence Day)
• Comprehensive health insurance options, including a 100% contribution Employee coverage option
• Additional employee and family insurance coverage options with company contribution, including dental and vision
• FSA, HSA and DCHSA opportunities including contribution matches
• Retirement options including traditional 401(k) and Roth IRA plans
• Benefits are subject to change at the company’s discretion.

TMRW Sports is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, color, ancestry, religion, sex, age, national origin, sexual orientation, gender identity, disability, genetic information, veteran status, or any other factor protected by applicable law. This applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, transfer, leave of absence, compensation, benefits, and training.

TMRW Sports expressly prohibits discrimination and harassment of any kind based on race, color, ancestry, religion, sex, age, national origin, sexual orientation, gender identity, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws.

No matter what background you bring with you, if you are committed to excellence and good at what you do, we welcome you to apply to join us and encourage you to come as you are.

About TMRW Sports: (pronounced “tomorrow sports”)

TMRW Sports is focused on building modern approaches in sports, media, and entertainment. By creating new leagues for a new age, TMRW Sports, in partnership with established leagues like the NFL, PGA TOUR and LPGA, is forging pathways and experiences for new generations of fans. TMRW Sports’ first project, TGL presented by SoFi, is a primetime team golf league in partnership with the PGA TOUR reaching 152 territories worldwide and described as a “high-energy arena spectacle” by Vanity Fair, “pure entertainment” by GQ, and “golf’s boldest new venture” by Fast Company. Launching this fall, WTGL will feature teams of the world’s best women golfers in partnership with the LPGA. TMRW Sports is also developing men’s and women’s professional flag football leagues in partnership with the National Football League and 32 Equity, the NFL’s collective investment vehicle. Founded by Tiger Woods, Rory McIlroy, and sports executive Mike McCarley, TMRW Sports is supported by an influential and diverse investor group of athletes, celebrities and business leaders from the worlds of sports, media, technology and finance. For more, visit TMRWSportsGroup.com.