Senior Cybersecurity Analyst

West Star Aviation is a growing maintenance repair organization committed to customer service excellence and employee development. The Senior Cybersecurity Analyst leads the day-to-day execution of the enterprise cybersecurity program, including governance, risk management, detection and incident response, protective controls, awareness, third-party risk, and executive reporting.

Responsibilities:

• Maintain a risk-based security roadmap, control inventory, security standards, and risk register; assess gaps against a recognized framework such as NIST Cybersecurity Framework 2.0 and track owners, deadlines, and accepted exceptions
• Draft, maintain, and operationalize security policies and procedures covering access, endpoint and network protection, data handling, acceptable use, third-party access, incident response, and secure technology changes
• Coordinate security assessments, penetration tests, audit evidence, and remediation plans; work with Legal, Quality, Finance, and business leaders on applicable customer, contractual, privacy
• Oversee security alert triage and investigation across endpoint, email, identity, network, cloud, and application signals; use internal tools and managed detection partners to validate threats and drive timely containment
• Own and exercise incident response playbooks for ransomware, phishing, business email compromise, account compromise, data exposure, and vendor/payment fraud; lead technical coordination, evidence preservation, escalation, and post-incident corrective actions
• Define monitoring requirements, logging coverage, escalation thresholds, and service expectations for security providers; review performance and close gaps in detection and response
• Lead vulnerability management, including scanning coverage, risk-based prioritization, assignment to system owners, verification of remediation, and documented treatment of exceptions
• Partner with infrastructure and application teams to strengthen identity and access controls, multifactor authentication, privileged access, endpoint configuration, patching, network segmentation, and secure remote access
• Review the security of critical SaaS and cloud services, integrations, customer-facing platforms, and AI-enabled capabilities before deployment or material change; recommend proportionate controls and document residual risk
• Partner with operations and data teams on backup security, restoration testing, disaster recovery, data protection, and cyber resilience at company sites
• Create and launch an enterprise security awareness program using Mimecast Awareness Training or a comparable platform, including platform configuration, employee enrollment, a recurring content calendar, new-hire training, and role-based modules
• Design phishing simulations and short, timely campaigns that address real company risks, including business email compromise, vendor bank-change fraud, suspicious links and attachments, password and MFA practices, data handling, and approved AI use
• Establish an easy way for employees to report suspicious messages and security concerns; coordinate prompt feedback, targeted follow-up training, and positive reinforcement with HR and business leaders
• Measure completion, reporting behavior, simulation results, repeat-risk patterns, and program improvement; present trends and recommended actions to Technology and business leadership without relying on completion rates alone
• Perform security due diligence for new and renewing technology vendors, review evidence and contractual security commitments, track remediation, and coordinate decisions on material third-party risk
• Provide concise reporting on material incidents, control coverage, vulnerabilities, open risks, partner performance, and awareness outcomes; translate technical findings into business impact, priorities, and decisions
• Advise project teams on security requirements and design reviews, mentor technology colleagues on secure practices, and participate in urgent incident response and occasional site visits as business needs require
• Attend work every day as scheduled
• Notify supervisor in advance of shift starting if unable to work
• Must have reliable transportation to get to work each and every day
• Follow all company and safety rules during performance of duties
• Maintain customer oriented work habits
• Lift and carry up to 10 lbs
• Routine walking, bending, stooping and sitting
• Sit at a desk and/or computer for extended intervals
• Routine or repetitive physical motion with arms and hands
• Work with others in a professional manner
• Understanding and implementation of regulations and guidelines
• Prioritize workload and work under pressure
• Coordinate multiple projects and duties
• Work under minimal supervision
• Work with other Managers coordinating projects in a cooperative manner
• Computer operating with Windows, Microsoft Word, Excel, Outlook and Powerpoint
• Fax machine, copier, cameras, multi-line telephone system etc

Requirements:

• A bachelor's degree in cybersecurity, information technology, computer science, or a related field, or equivalent directly relevant professional experience, technical training, military experience, or certifications
• At least eight years of progressive experience in cybersecurity or a combination of infrastructure and cybersecurity roles, with substantial recent responsibility for enterprise security controls and incident response
• Demonstrated ability to run a broad security workstream independently, prioritize risk, coordinate remediation across teams, and hold managed security providers accountable
• Hands-on experience investigating endpoint, email, identity, and network threats and working with EDR, email security, SIEM or MDR, vulnerability management, and access control technologies
• Working knowledge of Microsoft 365 or similar enterprise platforms, cloud and SaaS security, network fundamentals, authentication, data protection, and backup or recovery controls
• Experience writing practical policies, assessing technology or vendor risk, leading incident exercises, and communicating with both technical teams and executives
• self-motivated and able to perform in a fast paced environment
• able to maintain confidentiality at all times
• excellent organizational skills
• CISSP, CISM, GIAC, or comparable certification; certification is valued but is not a substitute for demonstrated execution
• Experience with Mimecast awareness or email security, SentinelOne, Microsoft Entra ID, and security operations or managed detection services; equivalent platforms are welcome
• Experience in a multi-site organization and with customer or contractual security obligations, application and integration reviews, or operational technology environments
• A valid driver's license approved for airline travel and/or a valid passport is ideal, but not mandatory