Senior Cybersecurity Analyst

The Salt River Pima-Maricopa Indian Community is seeking a Senior Cybersecurity Analyst to support and strengthen the organization’s security program in Scottsdale, Arizona. Working under the general supervision of the Cyber Security Manager, you will help implement and maintain security processes and technology improvements aligned to the organization’s Cyber security Strategic Plan.

This onsite role focuses on risk assessment, security system administration and auditing, security architecture development, and ongoing improvements across enterprise and cloud environments. You will also provide guidance to security team members and support investigations, audits, and incident response activities as needed.

Key Responsibilities

• Own the implementation and ongoing maintenance of security processes and technology improvements in support of the Cyber security Strategic Plan.
• Partner with IT teams and divisions to conduct risk assessments and to administer and audit security systems.
• Develop, implement, and maintain security architecture design, while supporting technologies and processes that enable continuous security improvements.
• Mentor security team staff to build technical skills and customer service skills needed to work independently and support career progression.
• Ensure cross-functional training so primary and secondary support personnel are prepared to support division services.
• Assist with routine supervision by prioritizing and coordinating workflow and providing training and assistance as needed.
• Help establish criteria for employee performance evaluations based on division and department goals and objectives.
• Provide senior leadership for the Security Team and work with other IT divisions to establish and enforce IT standards.
• Evaluate and recommend best-in-class security standards, processes, and practices.
• Contribute security best practices and technical expertise across security planning, implementation, and incident response activities.
• Proactively audit and review network and security infrastructure, including monitoring LAN/WAN, security firewalls, routers, and systems to maintain security standards.
• Help ensure scheduled maintenance, patching, and performance monitoring are managed and tracked.
• Provide operational reporting that communicates the SRPMIC security posture.
• Provide technical input to troubleshoot security issues.
• Build and maintain cloud security standards, controls, and processes to support confidentiality, integrity, and availability of cloud-hosted systems and data.
• Perform cloud security assessments of infrastructure, services, architectures, and configurations to identify and mitigate risks.
• Provide SME support for cloud migrations, implementations, and related technology initiatives.
• Monitor cloud environments for threats, vulnerabilities, misconfigurations, and anomalous activity, coordinating remediation efforts.
• Partner with IT and business stakeholders to implement controls for identity and access management, logging and monitoring, encryption, network security, and data protection.
• Provide reporting and metrics regarding the security posture and risk of cloud environments.
• Provide cybersecurity SME leadership for secure adoption, implementation, and use of artificial intelligence technologies, including developing security standards, policies, and guidelines for responsible use.
• Perform security and risk assessments of AI solutions, applications, platforms, and third-party AI services, identifying risks such as data exposure, unauthorized access, insecure integrations, prompt injection, data poisoning, model misuse, and third-party risks.
• Evaluate AI vendors and services to ensure security, privacy, data protection, and contractual requirements are addressed.
• Monitor emerging AI security threats, vulnerabilities, regulatory requirements, and industry best practices, recommending appropriate security controls.
• Support security projects and initiatives, including security tool integrations, tool evaluations, and process improvements; participate in audit reviews and support penetration activities with coordination of mitigation and remediation efforts.
• Respond to security breaches or personnel investigation requests, including accurate data capture, chain of custody, and reporting.
• Maintain confidentiality and integrity of systems, data, and security processes, and perform other duties assigned by the Cyber Security Manager or other IT leadership.

Minimum Qualifications

• Bachelor’s degree from an accredited college or university in Information Security, Cyber Security, or a related discipline.
• May accept a combination of 7 years direct cyber security experience and industry certifications in lieu of degree.
• Five (5) years of direct experience in an IT/Cyber security role, including hands-on work implementing network security, security monitoring, cloud security monitoring, or vulnerability management.
• Direct experience supporting Microsoft 365 Cloud security.
• Direct experience assessing, evaluating, or supporting secure implementation and use of artificial intelligence technologies, including identification and mitigation of AI-related cybersecurity and data protection risks.
• Direct experience with the Elastic log management platform.
• Direct experience supporting cyber security incident response.
• Direct experience managing and/or mitigating software and system vulnerabilities.
• Direct experience conducting security audits, including access control and system configuration.
• Direct experience conducting security assessment on third-party integrations.
• Direct experience with secure remote access technologies.
• Required certification: one of CompTIA Security+, SSCP®, or CISSP.

Technologies

• Elastic Stack (Elastic log management platform)
• Microsoft 365 Cloud security suites, including 365 Defender and Purview/Compliance
• Azure and Defender for Cloud
• Microsoft Entra ID
• LAN/WAN, network security firewalls, and routers
• AI solutions and third-party AI services

Compensation

USD 115,954 - 165,236 per year.

Benefits

• Medical, Dental, Vision
• Life Insurance
• 401(k) and Roth Plans (SRPMIC contributes 5% to pre-tax 401(k) and matches up to 3%)
• Public Safety Personnel Retirement System (PSPRS)
• Arizona State Retirement System (ASRS)
• Health Reimbursement Arrangement (HRA)
• Annual & Sick Leave
• 15 paid holidays each year (including two discretionary holidays and one day of birthday leave)
• Short-Term Disability, Long-Term Disability
• Employee Assistance Program (EAP) through SupportLinc
• WellPath Wellness Program
• Flexible Spending Accounts (FSA) administered by HealthEquity
• Health Savings Account (HSA) for HDHP enrollees
• Supplemental Life & AD&D Insurance
• Public Service Loan Forgiveness (PSLF) eligibility

Special Requirements and Eligibility Notes

• May require work beyond normal hours, including nights, weekends, and holidays.
• May require completion of a Salt River Police Department (SRPD) background investigation and polygraph examination.
• May require receiving and maintaining Salt River Pima-Maricopa Indian Community, Community Regulatory License, and State Certification (ADOG). Pre-employment drug test and extensive fingerprint and background check apply.
• Employees providing services to a campus with children are subject to “Community Code of Ordinances,” Chapter 11 “Minors,” Article X, including random drug testing and completion of a background check every five (5) years.
• Prior to hire, applicants will be subject to drug and alcohol testing and must pass a pre-employment background/fingerprint check.
• SRPMIC is an equal opportunity/affirmative action employer; preference may be given to qualified Community Member Veteran, Community Member, Spouse of Community Member, qualified Native American, and then other qualified candidates, with documentation requirements by the position closing date.
• Plan details and eligibility requirements for benefits are provided upon hire and are subject to change.