Cyber Security Analyst

Job ID: 18306 Benefits OfferingRailWorks is committed to helping our employees live better lives. We offer comprehensive benefits packages to eligible employees, including competitive pay, medical, dental and vision coverage, 401(k) with company match, and additional performance incentives. Pay Range: $145000 - $155000 / year As a Senior Cyber Security Engineer, you will: Monitor, analyze, and respond to security incidents. Perform root cause analysis and coordinate remediation efforts. Conduct regular vulnerability assessments and penetration tests. Collaborate with IT teams to prioritize and implement fixes. Oversee daily security operations, manage alerts, and coordinate with incident response teams to mitigate threats. Develop and enforce security policies. Ensure compliance with industry standards and regulations (e.g., NIST, ISO 27001). Lead risk assessments and security audits. Recommend improvements to enhance security posture. Develop and deliver cybersecurity training programs. Foster a culture of security awareness. Evaluate and manage the security of third-party vendors. Ensure they meet security requirements. Design, implement, and maintain secure system architectures. Manage security technologies like firewalls and IDS/IPS. Define and implement guidelines to reduce the attack surface of critical systems. Ensure secure configurations. Design and implement network security measures, including segmentation and encryption. Architect and manage secure cloud environments. Implement cloud security controls such as IAM and encryption. Lead incident response efforts, conduct post-incident analysis, and update response plans. Stay updated on cybersecurity threats. Recommend and implement new security measures to enhance defenses.Educational Background: A bachelor’s degree in computer science, Cyber Security, Information Technology, or a closely related field. Relevant experience may substitute for the degree requirement.Certifications: Possession of industry-recognized certifications such as Security +, Cysa+ , GMON, GSEC, CISSP, CISM, CEH, GIAC, CCSP, or similar are required.Technical Expertise: Proficiency in tools and technologies used in cyber security operations such as EDR, XDR, SIEM, SOAR, etc. Strong understanding of network security, firewalls, IDS/IPS, endpoint protection, and encryption technologies. Experience with cloud security, particularly in environments like AWS, Azure, or Google Cloud. Familiarity with security frameworks and compliance requirements (e.g., NIST, ISO 27001, GDPR, CMMC). Experience with security architecture and system design principles. Skilled in network monitoring and packet analysis tools. Comprehensive knowledge of malware analysis, threat modeling, and vulnerability management. Soft Skills: Exceptional analytical and problem-solving capabilities. Rigorous attention to detail with the ability to work under pressure. Excellent communication skills, capable of effectively articulating security and risk-related concepts to technical and non-technical stakeholders.Experience: At least 1-2 years of experience in IT security or a closely related field. This job description is not intended to represent a complete, comprehensive list of all duties and responsibilities that may be required in this position.  There may be unplanned activities and other duties as assigned. RailWorks is North America’s leading track and transit system experts for over 100 years and with 45 offices across the U.S. and Canada. We take on challenging projects every day and our success rely on a collaborative and open-minded work environment that encourages teamwork, positivity, and ingenuity. We are committed to creating a culture of trust, respect, and acceptance. RailWorks also offers opportunities to grow your career, develop your skills and pursue success. RailWorks is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment with RailWorks without regard to an individual’s sex, race, religion, creed, color, national origin, sexual orientation, gender identity, marital status, age, disability, veteran status or other legally protected characteristics.