{"id":3892188,"url":"https://alion.io/job/brg-cybersecurity-analyst","title":"Cybersecurity Analyst","company":{"id":1803497,"name":"BRG","domain":"thinkbrg.com","url":"https://alion.io/company/thinkbrg","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":12,"ghost_share":0,"stale_share":0.833,"repost_share":0,"time_to_fill_p50_days":42,"computed_at":"2026-11-07T05:47:08Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Washington, United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":90000,"max":120000,"currency":"USD","period":"year","gross":null,"usd_annual":120000},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"NIST CSF","optional":false},{"name":"Service Desk","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-11-06T21:52:45Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-07T03:12:30Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We Do Consulting Differently\nJob Summary\nThe Cybersecurity Analyst supports BRG’s daily security operations across cloud, identity, email, data, and endpoint environments. The analyst monitors and investigates security events, supports security platform and policy administration, coordinates remediation, and contributes to security baselines and control improvements. The analyst works closely with Cybersecurity, Infrastructure, Network, Service Desk, Risk and Compliance, and external security partners to protect BRG resources and support a Zero Trust approach. This position does not own or administer corporate firewalls.\nKey Contacts and Working Relationships\nPartner with IT Leadership and technical teams to ensure new technologies, configurations, and changes align with BRG security standards and roadmaps.\nWork with Infrastructure, Network, Service Desk, Expert Solutions, and Corporate Information Services teams to investigate issues and apply security controls across cloud and on-premises environments.\nCoordinate with Risk and Compliance on incident response, audit evidence, security awareness, and control validation.\nWork with BRG’s managed security and technology vendors to investigate alerts, track remediation, and improve platform effectiveness.\nMajor Responsibilities / Job Functions\nMonitor, triage, investigate, document, and coordinate response to security alerts, incidents, tickets, and suspicious activity across Microsoft and third-party security platforms.\nWork with BRG’s managed security provider to investigate alerts, validate activity, track remediation, and improve alert quality and operational workflows.\nAdminister and support Microsoft security capabilities across Azure, Microsoft Entra ID, Active Directory, Microsoft Defender, Defender for Cloud, Sentinel, and Microsoft Purview within approved role and change-control boundaries.\nReview Azure security recommendations, policies, and configuration findings; help test, document, and implement Azure Policy initiatives, security baselines, and control exceptions.\nSupport identity security operations, including Conditional Access, privileged access and PIM reviews, role lifecycle activities, stale-account cleanup, authentication controls, service accounts, guest access, and privileged-group monitoring.\nSupport Proofpoint email security, phishing-reporting workflows, Threat Response capabilities, account-takeover protections, security-awareness integrations, and email-policy tuning.\nUse Tenable Cloud Security and related vulnerability-management capabilities to review cloud exposure, attack paths, asset coverage, security findings, and remediation status.\nSupport Netskope cloud-app and traffic-steering policies, including application discovery, policy testing, AI-application controls, exception handling, and validation of user impact.\nAssess security risks associated with generative AI and other AI-enabled services; support AI application inventory, usage monitoring, access controls, policy testing, and governance reviews.\nInvestigate email, identity, endpoint, cloud, and application activity using available logs and evidence; escalate confirmed or potentially significant events through the incident-response process.\nTrack vulnerabilities and security recommendations, identify the appropriate technical owner, validate remediation evidence, document accepted risks or exceptions, and report status to stakeholders.\nCreate and maintain operating procedures, configuration records, support documentation, security metrics, dashboards, and evidence needed for audits and control reviews.\nParticipate in change reviews and validate that cybersecurity-owned changes include appropriate testing, implementation, rollback, communication, and post-change evidence.\nEvaluate security tools and features, perform structured testing, document findings, and recommend practical improvements to security controls and operations.\nParticipate in periodic risk assessments, tabletop exercises, incident-response activities, cross-training, and an on-call or escalation rotation as required.\nKnowledge, Skills and Behaviors\n3+ years of experience in cybersecurity operations, cloud security, identity security, security engineering, or a closely related role.\nWorking knowledge of Microsoft Azure security, Microsoft Entra ID, Active Directory, Azure Policy, Conditional Access, PIM, Defender, Defender for Cloud, Sentinel, and Purview.\nExperience interpreting and applying security baselines such as Microsoft security baselines and CIS Benchmarks, including testing, exception documentation, and remediation tracking.\nHands-on familiarity with email security and phishing-response workflows; Proofpoint experience is strongly preferred.\nExperience with cloud security posture management or CNAPP capabilities; Tenable Cloud Security experience is preferred.\nExperience with secure web gateway, cloud access security broker, or SaaS application-control platforms; Netskope policy and traffic-steering experience is preferred.\nGeneral knowledge of AI security risks, including sensitive-data exposure, unapproved AI services, prompt and response monitoring limitations, application categorization, access control, and governance.\nUnderstanding of common identity and authentication concepts, including MFA, passwordless authentication, OAuth, SAML, Kerberos, privileged access, and least privilege.\nAbility to analyze alerts and logs, distinguish expected administration from suspicious activity, develop a defensible timeline, and clearly document conclusions and follow-up actions.\nExperience working with a SOC, MDR provider, or other outsourced monitoring partner.\nFamiliarity with Windows, macOS, cloud platforms, enterprise SaaS, and hybrid identity environments.\nKnowledge of common security and compliance frameworks such as NIST CSF, CIS Controls, SOC 2, ISO 27001/27002, HIPAA, or HITRUST.\nStrong written and verbal communication skills, including the ability to explain risk, evidence, and recommended actions to both technical and non-technical audiences.\nOrganized, curious, and able to manage multiple investigations and workstreams while maintaining accurate records and following change-management requirements.\nPreferred Qualifications \nExperience supporting security operations in a Microsoft-centric enterprise environment.\nExperience creating KQL queries, workbooks, metrics, or dashboards for security monitoring and reporting.\nExperience testing security controls in pilot groups before broader rollout and documenting expected impact, exceptions, and rollback considerations.\nRelevant security certifications such as Microsoft Certified: Security Operations Analyst Associate (SC-200), CompTIA Security+, CompTIA CySA+, GIAC certifications, or comparable credentials are preferred. Equivalent hands-on security operations experience will also be considered.\nSalary Range: $90,000-$120,000\nCandidate must be able to submit verification of his/her legal right to work in the U.S., without company sponsorship.\nAbout BRG\nBRG combines world-leading academic credentials with world-tested business expertise and purpose-built emerging technologies. Our culture centers on agility and connectivity which sets us apart and gets you ahead.\nAt BRG, our professionals include specialist consultants, industry experts, renowned academics, and leading-edge data scientists. Together, they bring a diversity of real-world experience, data, and human and artificial intelligence, to economics, disputes, and investigations; corporate finance; and performance improvement services that address the most complex challenges facing organizations across the globe.\nOur unique structure nurtures the interdisciplinary relationships that give us the edge, laying the groundwork for more informed insights and more original, incisive thinking. When paired with our global reach and resources, our diverse perspectives and technical capabilities make us uniquely capable to address our clients’ challenges. We get results because we know how to apply our thinking to your world.\nAt BRG, we don’t just show you what’s possible. We’re built to help you make it happen.\nBRG is proud to be an Equal Opportunity Employer. Our hiring practices provide equal opportunity for employment without regard to race, religion, color, sex, gender, national origin, age, United States military veteran status, ancestry, sexual orientation, marital status, family structure, medical condition including genetic characteristics or information, veteran status, or mental or physical disability so long as the essential functions of the job can be performed with or without reasonable accommodation, or any other protected category under federal, state, or local law.","description_format":"text","description_chars":8750,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Cloud Security","Financial Advisory, Valuation & Restructuring"],"lifecycle":[{"event":"open","at":"2026-11-06T21:52:45Z"}],"visa":[],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:2","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-07T05:47:08Z"},"pay":{"stated_usd_annual":120000,"is_top_pay":false},"html_url":"https://alion.io/job/brg-cybersecurity-analyst","json_url":"https://alion.io/job/brg-cybersecurity-analyst.json","meta":{"generated_at":"2026-11-07T08:12:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4383,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1803497},"rest":"https://alion.io/mcp/rest/get_company?id=1803497"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fbrg-cybersecurity-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fbrg-cybersecurity-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fbrg-cybersecurity-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/brg-cybersecurity-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fbrg-cybersecurity-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3892188}},{"tool":"search_jobs","arguments":{"company":"thinkbrg.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3892188},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}