Senior Cybersecurity Analyst

At Tlingit Haida Tribal Business Corporation (THTBC), your work goes beyond the job description—it becomes part of a purpose-driven legacy. Our continuous commitment to growth directly contributes to the strength, resilience, and future of the communities we serve. Every milestone we achieve helps fund programs, expand services, and create lasting value for the Tribe, making each success a shared one. For more than 35 years THTBC and its subsidiaries have delivered mission-critical services to federal clients globally. From logistics and information technology to cybersecurity and facilities operations, we are united by a single purpose: to generate meaningful economic opportunity and sustainable growth for the Tlingit & Haida Tribes of Alaska. Together We Grow – One Mission, One Team – With a Commitment to Serve Job Title: Senior Cybersecurity AnalystWork Location: Remote or hybrid remote if near CO/VA officesLabor Category: ExemptClearance Level: SecretTravel: Up to 20%Pay Rate: $91,000 - $124,000About the Role This role works collaboratively with IT leadership, systems administrators, business units, compliance personnel, vendors, auditors, and other stakeholders, the Senior Cybersecurity Analyst will help establish and maintain a risk-based, defense-in-depth cybersecurity program that supports organizational operations, contractual obligations, regulatory requirements, and the protection of critical information assets. The position requires a combination of strong technical cybersecurity expertise, analytical and investigative capabilities, regulatory and compliance knowledge, documentation skills, and the ability to communicate cybersecurity risk effectively to both technical and non-technical audiences.What You'll Be Doing Monitor, investigate, and respond to cybersecurity alerts, incidents, vulnerabilities, and threats across enterprise, endpoint, cloud, network, and application environments. Support compliance with NIST SP 800-171, CMMC, and applicable federal/DoD cybersecurity requirements, including protection of CUI and FCI. Implement, assess, document, and continuously monitor cybersecurity controls and maintain SSPs, POA&Ms, policies, procedures, and compliance evidence. Conduct cybersecurity risk assessments, vulnerability assessments, and security reviews; prioritize findings and coordinate remediation efforts. Support internal and external audits, CMMC assessments, customer reviews, and other cybersecurity compliance activities. Analyze security logs, alerts, and threat intelligence using tools such as SIEM, EDR, Microsoft 365, Azure, Entra ID, firewalls, and endpoint security platforms. Participate in incident response activities, including investigation, containment, remediation, recovery, documentation, and post-incident reviews. Assess and improve security configurations, system hardening, patch management, endpoint protection, network security, cloud security, and data protection controls. Support identity and access management, including MFA, Conditional Access, privileged access, least privilege, RBAC, and periodic access reviews. Evaluate security posture across Microsoft 365, GCC High, Azure, Entra ID, Active Directory, and other enterprise platforms. Support third-party/vendor risk management, technology security reviews, change management, and cybersecurity assessments for new systems and services. Develop cybersecurity metrics, dashboards, risk registers, vulnerability reports, and compliance reporting for leadership. Develop and maintain cybersecurity policies, standards, procedures, incident response plans, and security documentation. Support security awareness programs, phishing simulations, cybersecurity training, and organization-wide security initiatives. Provide cybersecurity guidance to employees, IT teams, leadership, vendors, auditors, and assessors. Stay current on emerging threats, vulnerabilities, regulations, cybersecurity frameworks, and industry best practices. Serve as a senior cybersecurity resource and escalation point for complex security, risk, compliance, and incident response matters; mentor junior team members as appropriate. Participate in after-hours incident response or emergency cybersecurity support as required. Perform other cybersecurity, information assurance, risk management, and compliance duties as assigned. What We're Looking For Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field; equivalent education, certifications, training, and experience may be considered. 7+ years of cybersecurity, information security, information assurance, risk management, or related IT security experience, including 3+ years in a senior-level cybersecurity role within a complex enterprise environment. Strong knowledge of NIST SP 800-171, CMMC, and federal/DoD contractor cybersecurity requirements, including protection of CUI and FCI. Experience with SSPs, POA&Ms, security controls, compliance evidence,