{"id":71217,"url":"https://alion.io/job/smiths-group-cyber-security-analyst-ii","title":"Cyber Security Analyst II","company":{"id":5486,"name":"Smiths Group","domain":"smiths.com","url":"https://alion.io/company/smiths-group-plc","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":{"grade":"B","score":75,"open_postings":87,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":26,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Edgewood, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":98311,"max":147468,"currency":"USD","period":"year","gross":null,"usd_annual":147468},"salary_estimate":null,"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"Google SecOps","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Nessus","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-08-19T13:48:15Z","employer_posted_date":"2026-08-19","last_verified_at":"2026-10-18T07:04:49Z","board_verified":true,"closed_at":null,"days_open":59,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":59},"description":"Every minute of every day, Smiths Detection’s threat detection and security screening technology helps to protect people and infrastructure, making the world a safer place.\nSmiths Detection is a global leader in the development, manufacture and management of security and detection solutions designed to make the world a safer place. Our technology provides threat detection and screening solutions for customers in our key markets: aviation, ports and borders, defense, and urban security.\nOur expertise spans 21 global offices, seven manufacturing sites and five R&D centers, with a global network of 3,500 dedicated colleagues contributing towards over 40 years at the frontline of advances in safety and security.\nThis results in careers built on variety and the opportunity to work on a range of state-of-the-art solutions, where you can develop your knowledge and experience every day.\n Job Objective\nThe Cyber Security Analyst II is the senior technical practitioner on a small, high-impact security team supporting a Defense Industrial Base (DIB) environment handling controlled data. This role is the hands-on owner of our Microsoft security stack and the primary author of the policies, procedures, and evidence artifacts required to sustain our CMMC Level 2 posture under NIST SP 800-171. The analyst works directly with the Information & Cyber Security Manager to mature the program, own cross-functional processes, and mentor a junior analyst.\nResponsibilities\nEssential functions - job duties to include but are not limited to; other duties as assigned.\n Microsoft Security Operations: Shared ownership of day-to-day administration and tuning of Microsoft Defender for Endpoint, Defender for Office 365, Defender for Cloud Apps, Entra ID (Conditional Access, PIM, Identity Protection), Intune (compliance policies, configuration profiles, update rings, app protection), and Purview (DLP, Insider Risk, Information Protection).\nPolicy and Procedure Authorship: Draft, maintain, and operationalize written policies and procedures mapped to NIST SP 800-171 Rev. 2 and CMMC Level 2 practices. Translate control language into runbooks, checklists, and evidence artifacts that an assessor can verify.\nCross-Functional Process Ownership: Partner with HR, IT, and Facility Security to develop and improve the end-to-end joiner/mover/leaver process, quarterly access reviews, privileged access management, and onboarding/offboarding of authorized users.\n Vulnerability and Patch Management: Run the recurring vulnerability management cycle (Defender Vulnerability Management, Nessus, or equivalent): triage, prioritize, track SLAs, and report on remediation against a defined framework.\nIncident Response: Act as tier-2 responder for Defender and Entra alerts; investigate, contain, and document incidents; lead post-incident reviews; maintain and exercise the incident response plan.\n Evidence and Audit Support: Collect and maintain evidence for internal self-assessments and customer audits. Maintain the System Security Plan (SSP) and POA&M alongside the Security Manager.\nSecurity Awareness and Training: Execute and measure the monthly phishing simulation program and deliver targeted training for elevated-risk roles.\nMentoring: Provide technical direction and review for the Cyber Security Analyst I and serve as the escalation point for their work.\nOther Duties: Other duties as assigned.\nEducation Requirements\nRequired Education and Experience:\nBachelor’s degree in Cybersecurity, Information Systems, Computer Science, or related field OR equivalent combination of certifications and hands-on experience.\nPreferred Education and Experience:\nYears of Experience:\n3-5 years of hands-on Cyber security experience, at least 2 of which include direct administration of Microsoft 365 / Entra ID / Intune / Defender in a production environment.\nDemonstrable experience authoring security policies and procedures.\nWorking knowledge of NIST SP 800-171 Rev. 2 and/or CMMC Level 2; understands control mapping, procedure development, and evidence production.\nAdditional Qualifications:\nU.S. Citizenship required.\nStrong written communication - will produce documents read by executives, auditors, and government customers.\nPrior experience in a DIB / defense contractor / cleared facility environment.\nExperience with Microsoft GCC or GCC High tenants.\nExperience with a SIEM (Sentinel, Splunk, Google SecOps/Chronicle, or similar) including log source onboarding and rule tuning.\nFamiliarity with DFARS 252.204-7012, ITAR, and the SPRS scoring process.\nMicrosoft certifications: SC-200, SC-300, SC-400, MS-500, AZ-500.\nCMMC Registered Practitioner (RP) or Certified CMMC Professional (CCP).\nTechnical Knowledge, Skills and Abilities:\nMicrosoft Defender suite (Endpoint, Office 365, Cloud Apps)\nEntra ID\nIntune\nPurview\nNIST SP 800-171 Rev. 2\nCMMC Level 2\nvulnerability management tools (Nessus or equivalent)\nSIEM platforms, incident response\nWe offer…\nJoin us and we’ll help build your career, with excellent training and opportunities for career growth across the business, both locally and globally. You’ll experience an inclusive environment, with strong leadership and a focus on safety and wellbeing. You’ll also have the flexibility to choose from a wide range of benefits to suit your lifestyle, offering you and your family support from a health and wellbeing, financial and lifestyle perspective.\nJoin us and work for a world-leader, with the benefits and training to reward your dedication and skills. Be part of a team where we are making the world a safer place.\nThe total compensation for this position ranges from $98,311 - $147,468/yr (Salary to be determined by the education, experience, knowledge, skills, & abilities of the applicant and the alignment with the internal team & market data). This role offers a competitive Business Profit Plan. This position includes a competitive benefits package. The comprehensive benefits package includes medical, dental & vision insurance; 401(k) with company match; paid time off; and other benefits. For details, please visit the Rewards & Benefits tab on our main careers page at Careers | Smiths Detection.\nAll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, protected veteran status, disability, or any other legally protected characteristic.\nIf you have a disability and you believe you need a reasonable accommodation in order to search for a job opening or to submit an online application, please e-mail  or call toll-free 877-703-1029. This email and phone number is created exclusively to assist disabled job seekers whose disability prevents them from being able to apply online. Only messages left for this purpose will be returned. Messages left for other purposes, such as following up on an application or technical issues not related to a disability, will not receive a response. Smiths Detection participates in the Electronic Employment Verification Program.\nAll qualified applicants will receive equal consideration for employment based solely on their skills, experience, and ability to perform the job. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other characteristic protected by applicable law.\nWe value professionalism, integrity, and respect in our workplace, and we strive to maintain an environment where every employee can contribute effectively to our mission.\nAt no time during the hiring process will Smiths Detection, nor any of our recruitment partners ever request payment to enable participation - including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website.\nAll qualified applicants will receive equal consideration for employment based solely on their skills, experience, and ability to perform the job. We do not discriminate on the basis of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, age, or any other characteristic protected by applicable law.\nWe value professionalism, integrity, and respect in our workplace, and we strive to maintain an environment where every employee can contribute effectively to our mission.\nAt no time during the hiring process will Smiths Detection, nor any of our recruitment partners ever request payment to enable participation - including, but not limited to, interviews or testing. Avoid fraudulent requests by applying jobs directly through our career’s website.","description_format":"text","description_chars":8640,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Mechanical Components & Fasteners","Information Security","Passive Components & Connectors"],"lifecycle":[{"event":"open","at":"2026-08-19T13:48:15Z"}],"visa":[],"liveness":{"score":11,"band":"cold","label":"Long shot","p_open":1,"p_active":0.376,"p_room":0.28,"age_days":58,"expected_fill_days":26,"reasons":["conf:0","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":147468,"is_top_pay":true},"html_url":"https://alion.io/job/smiths-group-cyber-security-analyst-ii","json_url":"https://alion.io/job/smiths-group-cyber-security-analyst-ii.json","meta":{"generated_at":"2026-10-18T10:11:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15179,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5486},"rest":"https://alion.io/mcp/rest/get_company?id=5486"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsmiths-group-cyber-security-analyst-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsmiths-group-cyber-security-analyst-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsmiths-group-cyber-security-analyst-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/smiths-group-cyber-security-analyst-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsmiths-group-cyber-security-analyst-ii"}]}