Near Shore Cyber

Title: Help Desk - Security Analyst Location: Winchester, Virginia Job Description: Employment: Full-time, W-2 employee of our Winchester, Virginia-based client Location: Winchester, VA. On-site at the CPA firm (160 Exeter Drive) 2–3 days per week — closer to 3. Remote the remainder. Reports to: The security team of our Winchester, Virginia-based client; coordinates day-to-day with the CPA firm's IT and security leadership Compensation: Base salary $62,000–$67,000, commensurate with experience About the engagement We are recruiting on behalf of our Winchester, Virginia-based client for a hybrid Help Desk + Security Analyst role embedded inside their anchor CPA firm engagement. Time splits roughly 50/50: half supplementing the CPA firm's internal help desk, half working as a security analyst inside the security program our client manages on the firm's behalf. The hire is our client's hands-on presence in the CPA firm's office. This is a strong seat for someone who wants to grow into deeper security work without giving up the IT generalist skills that keep them sharp and useful. Responsibilities Help Desk (~50%) - Tier 1 / Tier 2 end-user support: workstations, accounts, productivity software, common application issues - Microsoft 365 administration (Exchange Online, Teams, SharePoint, Entra ID basics) - Hardware support, imaging, and provisioning alongside the CPA firm's IT team - Ticket queue ownership and triage Security (~50%) - Vulnerability management: scan operations, finding triage, remediation tracking with IT and end users - Phishing simulation campaigns: planning, deployment, reporting, follow-up training - Security ticket triage and investigation (EDR alerts, email security, identity) - Incident response support under the senior leadership of our Winchester, Virginia-based client - Routine hygiene: access reviews, configuration checks, hardening tasks Required Experience - 2–4+ years across IT support / help desk / junior SOC or security analyst work (any combination) - Strong Microsoft 365, Azure, and Windows endpoint fundamentals - Familiarity with vulnerability scanning workflows — not an expert, but knows what a CVSS score is and how to drive a fix - Solid customer service instincts: patient, professional, willing to help - Lives within reliable commuting distance of Winchester, VA, and can be on-site 2–3 days per week Preferred Experience - Security+, Network+, or equivalent certifications - Experience with EDR platforms (Microsoft Defender, SentinelOne) - Prior exposure to phishing simulation tools (KnowBe4, etc.) - Curiosity about offensive security — there is real room to grow toward pentest and red-team adjacent work over time Compensation - Base salary $62,000–$67,000, commensurate with experience - Full benefits: medical, dental, vision, and 401(k) with employer match - Paid time off and supported professional development

Role Description We are recruiting a dedicated fractional CISO for our Winchester, Virginia-based client, who delivers the security program for a regional CPA firm of about 350 people. This is not a portfolio role. All hours go to the single CPA firm engagement, and the hire owns the firm's information security program end-to-end. The CPA firm's internal IT team handles day-to-day operations. Our Winchester, Virginia-based client owns security on the firm's behalf, and the hire is the senior face of that program. The CPA firm values continuity and a close advisory relationship with their CISO, so this role suits someone who wants to go deep with one organization rather than rotate across many. - Own the CPA firm's information security strategy, roadmap, governance, and executive reporting - Maintain and mature the firm's GLBA / FTC Safeguards Rule and HIPAA compliance posture - Serve as the executive-level security voice to the CIO, CTIO, managing partners, and audit/risk committee - Lead policy development, risk assessment, third-party risk, and incident response governance - Provide principal-level technical advisory on architecture, tooling, and cloud security decisions — security and adjacent technology - Partner with the delivery teams of our Winchester, Virginia-based client on tactical execution (pentest scoping, VM strategy, security tooling rollouts) - Brief the CPA firm's leadership quarterly and on-demand for major events Qualifications - 7+ years in information security leadership, including 3+ in a CISO, vCISO, or Director of Security capacity - Direct experience supporting CPA firms or comparable professional services environments - Working command of GLBA / FTC Safeguards Rule and HIPAA — applied, not just templated - Strong technical foundation: substantive engagement on cloud (Microsoft / Azure preferred), endpoint security, network security, and identity - Executive presence — able to sit across from a managing partner and earn their trust quickly - Willing and able to act as a principal technology advisor on decisions that extend beyond strict security scope Preferred Experience - Active CISSP, CISM, or CCISO - Prior in-house experience inside a public accounting firm's IT or risk organization - Familiarity with SOC 2 and PCI in adjacent contexts Compensation - $100–$125/hour, 1099 contractor - Approximately 20 hours per month, with rare months extending toward 40