Job description

The Cyber Security Analyst I is a growth-track role for someone early in their cybersecurity career who wants to work in a real DIB environment, learn CMMC and NIST 800-171 from the inside, and gain hands-on experience with the full Microsoft security stack. The analyst works alongside a senior analyst and the Information & Cyber Security Manager, supporting day-to-day security operations, evidence collection, user lifecycle management, and program documentation. Responsibilities Essential functions — job duties to include but are not limited to; other duties as assigned. Job duties to include but are not limited to; • Security Operations Support: Triage Defender alerts, monitor phishing simulation results, review Entra ID sign-in risk events, and escalate anomalies to the senior analyst. • Vulnerability Tracking: Pull weekly vulnerability reports from Defender and Nessus, update the tracker, and follow up with remediation owners on overdue items. • Documentation and Evidence: Keep evidence folders current for NIST 800-171 and CMMC controls. Update procedures, screenshots, and checklists as systems change. • Policy Support: Assist the senior analyst in drafting and updating policies and procedures; own version control, review cycle, and distribution. • Training and Awareness: Support the monthly phishing simulation program, track completion of annual security training, and follow up with incomplete users. • Tickets and Access Requests: Own the security-ticket queue for access requests, exceptions, and general security questions from the business. • Program Development: Shadow the senior analyst and manager on incident response, audits, and policy work; work toward CMMC RP / Security+ / SC-200 within the first year. • Other Duties: Other duties as assigned. Education Requirements Required Education and Experience: Bachelor’s degree in Cybersecurity, Information Systems, IT, or related field OR equivalent combination of certifications, internship experience, and demonstrable hands-on skills. Years of Experience: • 0–2 years of professional experience. Internships, lab work, home-lab projects, IT help-desk time, and military IT experience are all considered. Additional Qualifications: • Familiarity with the Microsoft 365 admin center and eagerness to go deeper. • Clear writing skills — ability to take a verbal explanation and produce a procedure a coworker can follow. Preferred Education and Experience: • CompTIA Security+ or A+/Network+ on the path to Security+. • Coursework, certifications, or lab work in NIST 800-171, CMMC, or the Risk Management Framework. • Any Microsoft fundamentals certification (SC-900, MS-900, AZ-900). • Exposure to ticketing systems (ServiceNow, Jira) or documentation platforms (SharePoint, Confluence). • Basic PowerShell or KQL — willingness to learn is more important than current proficiency. Technical Knowledge, Skills and Abilities: • Microsoft 365 admin center • Defender for Endpoint • Entra ID • vulnerability tracking • Documentation and evidence management • Ticketing systems. We offer… Join us and we’ll help build your career, with excellent training and opportunities for career growth across the business, both locally and globally. You’ll experience an inclusive environment, with strong leadership and a focus on safety and wellbeing. You’ll also have the flexibility to choose from a wide range of benefits to suit your lifestyle, offering you and your family support from a health and wellbeing, financial and lifestyle perspective. Join us and work for a world-leader, with the benefits and training to reward your dedication and skills. Be part of a team where we are making the world a safer place. The total compensation for this position ranges from $76,463 - $114,694/yr (Salary to be determined by the education, experience, knowledge, skills, & abilities of the applicant and the alignment with the internal team & market data). This role offers a competitive Business Profit Plan. This position includes a competitive benefits package. The comprehensive benefits package includes medical, dental & vision insurance; 401(k) with company match; paid time off; and other benefits. For details, please visit the Rewards & Benefits tab on our main careers page at Careers | Smiths Detection . All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability. Equal Employment Opportunity Posters If you’d like to view a copy of the company’s affirmative action plan or policy statement, please email hr-1@smiths-detection.com . If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail stat@smiths.com or call toll-free 877-703-1029 . This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response. Smiths Detection, Inc. participates in the Electronic Employment Verification Program. All qualified applicants will receive equal consideration for employment based solely on their skills, experience, and ability to perform the job. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other characteristic protected by applicable law. We value professionalism, integrity, and respect in our workplace, and we strive to maintain an environment where every employee can contribute effectively to our mission. At no time during the hiring process will Smiths Detection, nor any of our recruitment partners ever request payment to enable participation – including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website.

Requirements

Must-haves

Essential functions — job duties to include but are not limited to; other duties as assigned.
Job duties to include but are not limited to;
Security Operations Support: Triage Defender alerts, monitor phishing simulation results, review Entra ID sign-in risk events, and escalate anomalies to the senior analyst.
Vulnerability Tracking: Pull weekly vulnerability reports from Defender and Nessus, update the tracker, and follow up with remediation owners on overdue items.
Documentation and Evidence: Keep evidence folders current for NIST 800-171 and CMMC controls. Update procedures, screenshots, and checklists as systems change.
Policy Support: Assist the senior analyst in drafting and updating policies and procedures; own version control, review cycle, and distribution.
Training and Awareness: Support the monthly phishing simulation program, track completion of annual security training, and follow up with incomplete users.
Tickets and Access Requests: Own the security-ticket queue for access requests, exceptions, and general security questions from the business.
Program Development: Shadow the senior analyst and manager on incident response, audits, and policy work; work toward CMMC RP / Security+ / SC-200 within the first year.
Other Duties: Other duties as assigned.
Education Requirements
Bachelor’s degree in Cybersecurity, Information Systems, IT, or related field OR equivalent combination of certifications, internship experience, and demonstrable hands-on skills.
0–2 years of professional experience. Internships, lab work, home-lab projects, IT help-desk time, and military IT experience are all considered.
Familiarity with the Microsoft 365 admin center and eagerness to go deeper.
Clear writing skills — ability to take a verbal explanation and produce a procedure a coworker can follow.
CompTIA Security+ or A+/Network+ on the path to Security+.
Coursework, certifications, or lab work in NIST 800-171, CMMC, or the Risk Management Framework.
Any Microsoft fundamentals certification (SC-900, MS-900, AZ-900).
Exposure to ticketing systems (ServiceNow, Jira) or documentation platforms (SharePoint, Confluence).
Basic PowerShell or KQL — willingness to learn is more important than current proficiency.
Microsoft 365 admin center
Defender for Endpoint
vulnerability tracking
Documentation and evidence management

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

gojira

Platform: smartrecruiters
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Paid Time Off