Security Analyst II

Position Title:

Department:

Corporate Area:

Status:

Manager Title:

Position Overview:

Key responsibilities will include, but are not limited to:

• Monitor information systems and assets to detect anomalous activity and understand its potential impact, maintaining and testing detection processes to keep them effective

• Lead incident response - analyzing, containing, and resolving incidents while coordinating with internal teams and external partners such as MSSPs, CSIRTs, and vendors

• Execute and maintain response and recovery procedures to restore systems and assets affected by cybersecurity incidents

• Continuously improve detection, response, and recovery by incorporating lessons learned from post-incident reviews

• Understanding the use of Artificial Intelligence (AI) and how to securely deploy, monitor, and test.

• Ability to streamline workflows using AI for security operations

• Supporting the secure adoption and governance of enterprise AI tools, including monitoring for shadow AI, data exposure, and misuse in line with the organization's AI governance program

• Operating the vulnerability management lifecycle across cloud and on-premises assets, including authenticated scanning, risk-based prioritization, and driving remediation to closure with system and application owners

• Tracking remediation against service-level targets and reporting on vulnerability posture, exceptions, and residual risk to stakeholders and leadership

• Building out and maintaining automation scripts and workflows using Microsoft Power Automate (a core PBS platform) and additional scripting such as PowerShell and Python, along with SOAR playbooks, to reduce manual effort and accelerate detection and response

• Additional activities as necessary to support the overall cybersecurity and PBS mission

Requirements for success:

Experience requirement:

• Minimum of 3 years' experience working as a systems engineer or administrator

• Minimum of 4 years' experience working as a security analyst

• Minimum of 5 years' cybersecurity experience

Education and/or certification requirement:

• GCIH, GCIA, GMON, GCED, or equivalent GIAC defense focused certifications desired

• Certifications by EC-Council, ISC2, Cisco, Microsoft, Fortinet, CompTIA, Offensive Security, etc. to be considered based on relevance to defensive cybersecurity operations

• Bachelor's Degree in a related field such as cybersecurity, information technology, or computer science; equivalent combination of education and experience may be considered

Skills and abilities:

• Ability to participate as a technical lead on all projects requiring cybersecurity expertise and consultation

• Ability to lead a Cybersecurity Incident Response Team (CIRT), Computer Security Incident Response Team (CSIRT) and Managed Security Services Partners (MSSPs) in the execution of daily incident response activities

• Ability to deploy, integrate, configure, and maintain systems which comprise the overall cybersecurity technology stack

• Ability to build and maintain security automation and integrations using scripting (PowerShell, Python) and low-code platforms such as Microsoft Power Automate

• Ability to communicate complex cybersecurity concepts in a clear and concise manner for laypersons unfamiliar with cybersecurity and/or IT concepts

• Desire and ability to help drive organizational adoption and buy-in of cybersecurity policies and standards across the PBS ecosystem

• Eagerness to develop, grow, and maintain strong inter-team relationships across the business to aid in the accomplishment of the PBS mission

Preferred qualifications:

• Expert knowledge in the following technologies and concepts: DFIR, IAM, PAM, DLP, NGFW, EDR, SIEM, IDS/IPS

• Strong foundational knowledge in IT technologies and concepts not limited to email security technologies, application security, cloud security (IaaS & PaaS, etc.), MITRE ATT&CK, SIEM, SOAR, CASB, MSSPs, DNS, Linux, Windows

• Fundamental knowledge of NIST, MDM, OWASP, PowerShell/Python/JavaScript, MacOS, malware analysis, LOLBAS, vulnerability management, WAF, CIS Benchmarks

• Hands-on experience with vulnerability management and cloud security posture tooling (e.g., authenticated vulnerability scanners, CSPM, WAF)

• Experience automating security operations through SOAR, scripting, and low-code workflow platforms (e.g., Microsoft Power Automate)

The base pay range for this position at the beginning of employment is expected to be between $155,000 and $165,000/year. The actual base pay offered may vary depending on multiple individualized factors, including but not limited to job-related knowledge, skills, and experience. The total compensation package for this position will also include other elements for eligible employees, including: (i) eligibility for discretionary bonuses; (ii) various insurance options, including medical, dental, vision, hearing, life, accidental death and dismemberment, short-term and long-term disability, and business travel accident insurance; (iii) identity protection program; (iv) employee assistance program; (v) financial and retirement savings benefits including the PBS Retirement Plan 403(b); (vi) paid time off (17 days per year), paid sick time benefits (12 days per year), paid parental leave (60 days / 12 weeks ), and paid holidays (12 days per year). Details of these benefit plans will be provided upon request. The application window for this position is expected to close on 7/31/2026.

If hired, the employee will be in an "at-will position," and the Company reserves the right to modify the base hourly rate/salary (as well as any other discretionary payment or compensation program) at any time, including for reasons related to individual performance, Company or individual department/team performance, and market factors.

PBS is an Equal Opportunity Employer in accordance with the EEOC and the Commonwealth of Virginia.