Cybersecurity Staff Analyst – Human Risk

This is a fully remote position, open to applicants in Georgia.

📋 Description

• Oversee the Training and Awareness Team by providing daily direction, prioritization, and technical leadership.

• Serve as a strategic collaborator to the Cybersecurity Manager and assist in translating strategy into prioritized initiatives.

• Spearhead the transformation of Human Risk Management, the adoption of platform roadmaps, and the rollout of capabilities.

• Act as the interim manager in the absence of the Manager.

• Gather, assess, and monitor cyber threat intelligence from various sources.

• Examine threat actor behaviors and social engineering tactics, techniques, and procedures (TTPs), including spear-phishing, pretexting, MFA fatigue, vishing, AI-driven impersonation, and deepfakes.

• Present recurring briefings on the threat landscape.

• Own the application of threat intelligence and convert it into simulation themes, awareness materials, and training suggestions.

• Identify high-risk groups through simulations, malicious emails, DLP, and insider-risk signals.

• Construct data-driven cases for adaptive learning, real-time triggers, and deepfake/vishing capabilities.

• Manage the daily relationship with the simulation platform's managed service provider and vendor.

• Create realistic, threat-informed social engineering simulations.

• Suggest content for broad, targeted, seasonal, and high-risk-period awareness initiatives.

• Collaborate with SOC, CTI, Incident Response, Threat Detection, DLP, Communications, and other stakeholder teams.

• Provide threat-informed briefings, trend metrics, risk insights, and key performance indicators (KPIs) to cybersecurity leadership.

• Enhance team processes, tools, handoffs, and documentation.

• Advise the Training team on emerging threats and the evolution of compliance and role-based training content.

• Informally mentor Analyst I/II and Senior Analyst team members.

⛳️ Requirements

• Must be at least eighteen years of age.

• Must have the legal right to work in the United States.

• Bachelor’s degree or equivalent in a field relevant to the position.

• A minimum of 8 years of professional experience.

• Extensive expertise in cyber threat intelligence.

• Experience in analyzing threat actor behavior and social engineering TTPs aligned with MITRE ATT&CK.

• Familiarity with OSINT, internal sources, vendor intelligence, commercial, and technical intelligence sources.

• Experience in security awareness, human risk management, simulations, and awareness initiatives.

• Knowledge of DLP, insider-risk signals, and indicators of policy violations.

• Preferred: At least 2 years of prior leadership experience.

• Capable of leading, mentoring, and providing technical guidance without formal people-management authority.

• Must possess the ability to work independently and demonstrate sound judgment in ambiguous situations.

🏝️ Benefits

• Remote/Virtual work arrangement.

• No travel required.