> Markdown version of [/jobs/ext/2170937-cyber-security-analyst-ii](https://www.wearedevelopers.com/jobs/ext/2170937-cyber-security-analyst-ii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Security Analyst II

- **Company:** Smiths Detection Inc.
- **Location:** United States
- **Experience:** Expert
- **Salary:** $98,311.0 - $147,468.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Cloud Computing, Cyber Security, Information Systems, Data Security, Identity and Access Management, Microsoft Security Essentials, Microsoft Office, Performance Tuning, Phishing, Security Information and Event Management, Simulation Software, Software Vulnerability Management, Information Security Management System, Control Language, Microsoft InTune, Azure Security Center, Information Technology, Patch Management, Nessus, Splunk, Plan of Action and Milestones
- **Published:** August 21, 2026
- **Apply:** https://www.dice.com/job-detail/ef7cdcac-7d06-4a21-93c6-7b7f62b917af

## About the Role

* Bachelor's degree in Cybersecurity, Information Systems, Computer Science, or related field OR equivalent combination of certifications and hands-on experience.

Preferred Education and Experience:

Years of Experience:

 * 3-5 years of hands-on Cyber security experience, at least 2 of which include direct administration of Microsoft 365 / Entra ID / Intune / Defender in a production environment.
 * Demonstrable experience authoring security policies and procedures.
 * Working knowledge of NIST SP 800-171 Rev. 2 and/or CMMC Level 2; understands control mapping, procedure development, and evidence production.

Additional Qualifications:

 * U.S. Citizenship required.
 * Strong written communication - will produce documents read by executives, auditors, and government customers.
 * Prior experience in a DIB / defense contractor / cleared facility environment.
 * Experience with Microsoft GCC C High tenants.
 * Experience with a SIEM (Sentinel, Splunk, Google SecOps/Chronicle, or similar) including log source onboarding and rule tuning.
 * Familiarity with DFARS , ITAR, and the SPRS scoring process.
 * Microsoft certifications: SC-200, SC-300, SC-400, MS-500, AZ-500.
 * CMMC Registered Practitioner (RP) or Certified CMMC Professional (CCP).

Technical Knowledge, Skills and Abilities:

 * Microsoft Defender suite (Endpoint, Office 365, Cloud Apps)
 * Entra ID
 * Intune
 * Purview
 * NIST SP 800-171 Rev. 2
 * CMMC Level 2
 * vulnerability management tools (Nessus or equivalent)
 * SIEM platforms, incident response

## Description

The Cyber Security Analyst II is the senior technical practitioner on a small, high-impact security team supporting a Defense Industrial Base (DIB) environment handling controlled data. This role is the hands-on owner of our Microsoft security stack and the primary author of the policies, procedures, and evidence artifacts required to sustain our CMMC Level 2 posture under NIST SP 800-171. The analyst works directly with the Information & Cyber Security Manager to mature the program, own cross-functional processes, and mentor a junior analyst., Essential functions - job duties to include but are not limited to; other duties as assigned.

 * Microsoft Security Operations: Shared ownership of day-to-day administration and tuning of Microsoft Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID (Conditional Access, PIM, Identity Protection), Intune (compliance policies, configuration profiles, update rings, app protection), and Purview (DLP, Insider Risk, Information Protection).
 * Policy and Procedure Authorship: Draft, maintain, and operationalize written policies and procedures mapped to NIST SP 800-171 Rev. 2 and CMMC Level 2 practices. Translate control language into runbooks, checklists, and evidence artifacts that an assessor can verify.
 * Cross-Functional Process Ownership: Partner with HR, IT, and Facility Security to develop and improve the end-to-end joiner/mover/leaver process, quarterly access reviews, privileged access management, and onboarding/offboarding of authorized users.
 * Vulnerability and Patch Management: Run the recurring vulnerability management cycle (Defender Vulnerability Management, Nessus, or equivalent): triage, prioritize, track SLAs, and report on remediation against a defined framework.
 * Incident Response: Act as tier-2 responder for Defender and Entra alerts; investigate, contain, and document incidents; lead post-incident reviews; maintain and exercise the incident response plan.
 * Evidence and Audit Support: Collect and maintain evidence for internal self-assessments and customer audits. Maintain the System Security Plan (SSP) and POA&M alongside the Security Manager.
 * Security Awareness and Training: Execute and measure the monthly phishing simulation program and deliver targeted training for elevated-risk roles.
 * Mentoring: Provide technical direction and review for the Cyber Security Analyst I and serve as the escalation point for their work.
 * Other Duties: Other duties as assigned., If you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail or call toll-free . This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response. Smiths Detection participates in the Electronic Employment Verification Program.

All qualified applicants will receive equal consideration for employment based solely on their skills, experience, and ability to perform the job. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other characteristic protected by applicable law.

We value professionalism, integrity, and respect in our workplace, and we strive to maintain an environment where every employee can contribute effectively to our mission.

At no time during the hiring process will Smiths Detection, nor any of our recruitment partners ever request payment to enable participation - including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career's website.

All qualified applicants will receive equal consideration for employment based solely on their skills, experience, and ability to perform the job. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other characteristic protected by applicable law.

We value professionalism, integrity, and respect in our workplace, and we strive to maintain an environment where every employee can contribute effectively to our mission.

At no time during the hiring process will Smiths Detection, nor any of our recruitment partners ever request payment to enable participation - including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career's website.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)