Cyber Security Analyst
Job Description
Position Summary:
\n
The Social Engineering Analyst is a junior-level cybersecurity role responsible for executing and coordinating established phishing, smishing, and customized social engineering exercises. Working within documented processes, the analyst will configure, launch, monitor, and report on assigned campaigns. The role requires strong attention to detail, analytical ability, communication skills, and consistent execution of recurring cybersecurity activities.
\n
\n
Key Responsibilities:
\n
- \n
- Execute monthly Enterprise phishing, quarterly Privileged User phishing, and quarterly Enterprise smishing campaigns.
- Support customized social engineering campaigns requested by business units.
- Configure campaign scenarios, templates, targeting, schedules, and supporting materials using established processes.
- Coordinate timelines, stakeholder inputs, targeting requirements, approvals, quality assurance, launch activities, and results reporting.
- Perform pre-launch quality assurance; monitor active campaigns; troubleshoot or escalate issues as appropriate.
- Compile and validate campaign results; analyze outcomes, trends, and anomalies requiring additional review.
- Support recurring KRI/KPI and management reporting and maintain historical campaign metrics.
- Maintain procedures, records, and supporting documentation.
- Coordinate with Communications and Training partners on social engineering and awareness content.
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
Preferred Qualifications:
\n
- \n
- Bachelor's degree in cybersecurity, information technology, computer science, information systems, or a related discipline preferred; relevant professional experience may be considered in lieu of a degree.
- Cybersecurity experience with an interest in social engineering, security awareness, or related defensive cybersecurity disciplines.
- Direct experience supporting or executing social engineering exercises, particularly phishing or smishing simulations, strongly preferred.
- Security+, CySA+, or a comparable cybersecurity certification preferred, but not required.
- Experience following established processes and executing recurring operational activities.
- Experience compiling, validating, or analyzing cybersecurity or operational data; familiarity with KPI/KRI or management reporting is beneficial.
- No experience with a specific social engineering platform or technology is required.
\n
\n
\n
\n
\n
\n
\n