• Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System • Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture • Be prepared to respond nimbly and effectively to possible cyber incidents • Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood • Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities • Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors • Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems

• Analyze, maintain, and manage GoodLife security systems to ensure secure production and development environments • Escalate or respond to incidents as required • Involved in audit and compliance processes, and provide reporting for compliance and investigation • Maintain accurate security systems hardware and software inventories • Maintain and update security systems • Review and action on security system reports • Investigate and respond to security system alerts • Run manual scan jobs as required (Asset, Virus, Vulnerability, etc.) • Perform and maintain backups of security system configurations • Create and respond to Helpdesk security tickets as assigned • Assist with security project work as required • Work and collaborate with various vendors and GoodLife partners • Collaborate with T&I operations to implement and deploy new security systems • Involved in the process of selecting security systems • Keep up to date with the latest security trends and news • Daily, Weekly, Monthly review of various reports and scan jobs • Create and maintain security operational documentation

• Synthesize large volumes of complex, multi-source intelligence into concise, executive-level briefings, ensuring senior leaders can quickly understand key risks, implications, and recommended actions • Conduct advanced open-source intelligence (OSINT) investigations • Monitor, analyze, and track evolving threat trends • Develop and maintain intelligence metrics, KPIs, and performance measures, ensuring intelligence activities are measurable, actionable, and aligned to business objectives • Rapidly translate vague or incomplete intelligence requirements into high-confidence, sourced analytic findings • Assess reputational, geopolitical, and socio-political threats and evaluate how they may materialize and impact the organization and broader industry • Analyze the origin, motivation, intent, and evolution of threat actors and narratives within regional geopolitical and cultural contexts • Utilize intelligence platforms such as LifeRaft Navigator, Recorded Future, and other OSINT and threat intelligence tools to support investigations, monitoring, and analysis • Support time-sensitive intelligence requirements during fast-moving geopolitical events or emerging situations • Collaborate closely with other analysts to advance investigations, validate findings, and integrate insights across intelligence efforts • Participate in analytic reviews and lessons-learned sessions to continuously refine sourcing strategies, methodologies, and tradecraft

Role Description As part of the Enterprise Printing Initiative, we are seeking an experienced Senior Security Analyst to support the development, implementation, and sustainment of enterprise printer security standards across a large federal environment. This role will work closely with program leadership, engineering teams, infrastructure stakeholders, and compliance personnel to help ensure enterprise printing services remain aligned with agency security policies, regulatory requirements, and federal cybersecurity standards. The ideal candidate will bring strong knowledge of security principles, compliance frameworks, risk management practices, and operational security governance within complex enterprise environments. This individual will support the establishment and maintenance of printer security baselines, contribute to governance and ATO activities, and help identify and mitigate risks associated with enterprise print infrastructure and related technologies. Responsibilities - Support the development, implementation, and maintenance of enterprise printer security baselines aligned with agency policies, NIST standards, and DISA STIG requirements. - Coordinate with cross-functional engineering, networking, infrastructure, and cybersecurity teams to validate ports, protocols, services, and secure deployment configurations. - Collaborate with compliance, governance, and audit teams to support adherence to regulatory and security requirements. - Assist with governance, risk, and compliance documentation supporting Authorization to Operate (ATO) and related security initiatives. - Identify security risks, vulnerabilities, and operational gaps within enterprise printing and endpoint-related environments and coordinate remediation efforts with technical teams. - Support security reviews, vulnerability assessments, system hardening activities, and compliance validation efforts. - Analyze technical and operational information to develop clear, concise narrative summaries, reports, risk documentation, and graphical presentations for leadership and stakeholders. - Participate in security working sessions, operational meetings, implementation planning activities, and enterprise modernization initiatives. - Assist with the development and maintenance of security policies, procedures, standards, and operational documentation related to enterprise print services. - Provide guidance and support to junior security personnel and implementation teams as needed. Supervisory Responsibilities - May provide technical guidance, oversight, and coordination support to project resources supporting enterprise security and compliance activities. Qualifications - Masters’s degree in Cybersecurity, Information Technology, Information Systems, Computer Science, or a related technical discipline. An additional 10 years of relevant experience may be substituted for the degree requirement. - Minimum of five (5) years of relevant experience supporting enterprise cybersecurity, security compliance, risk management, or security operations activities. - Strong understanding of security principles, concepts, policies, standards, and regulatory frameworks. - Experience supporting compliance initiatives aligned with NIST, DISA STIGs, federal security standards, and governance requirements. - Experience identifying security risks and coordinating remediation activities with technical and operational teams. - Familiarity with security hardening, vulnerability management, system auditing, and compliance validation processes. - Ability to develop clear, concise reports, security documentation, risk assessments, and executive-level summaries. - Strong communication, organizational, and cross-functional collaboration skills. - Experience supporting enterprise environments with complex operational and security requirements. Preferred Qualifications - Experience supporting enterprise print infrastructure, endpoint security, or device management initiatives. - Familiarity with Zero Trust concepts, PKI integration, secure print architectures, and identity-integrated technologies. - Experience supporting Authorization to Operate (ATO) documentation and governance processes. - Knowledge of enterprise networking concepts, secure deployment standards, and infrastructure security principles. - Experience working within federal government or highly regulated enterprise environments. Clearance Requirement - US Citizen or Green card holder - Willing and able to obtain and maintain Public Trust Clearance - Must meet updated ID requirements: ID requirements - If you do not currently meet the ID requirements outlined, you must be willing and able to update your current forms of ID in a timely manner to complete the suitability process successfully. Benefits - Competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. - Education reimbursement for certifications, degrees, or professional development. - Flexibility for professional growth and networking opportunities. - Commitment to incorporating fun into every day with activities such as happy hours, holiday events, fitness & wellness events, and annual celebrations. - Support for community engagement through charity galas/events.