Cybersecurity Analyst

Proven to Perform.
From the edges of space to the bottoms of ocean, our materials are proven to perform -- and so is our team. We're hiring high performers as proven as our products. Join us.

ATI is currently hiring a Cybersecurity Analyst within our Enterprise Services Digital Technology team and will report to our Director, Cybersecurity Governance, Risk, and Compliance. This is an onsite position, 5 days per week, in our Dallas, TX office.

In the dynamic and critical field of Aerospace and Defense manufacturing, the role of a Cybersecurity Analyst is pivotal to safeguarding mission-critical assets, processes, systems, and infrastructures from a myriad of cyber threats. This role demands a forward-thinking, proactive individual who blends knowledge of cybersecurity practices with exceptional analytical skills to anticipate, mitigate, and respond to cybersecurity challenges.

A successful Cybersecurity Analyst is knowledgeable with a variety of cybersecurity concepts, practices, and procedures and relies on their personal experience and judgement to plan, drive initiatives and accomplish cybersecurity goals. In this role, you will also show your interpersonal skills to work collaboratively with cross-functional teams and employees at all levels of the organization.

The candidate will be handling day-to-day operations of the governance, risk, and compliance program. This will include responsibilities for maintaining security policies and procedures, coordinating monthly education and awareness activities, acting as the primary coordinator for internal and external cybersecurity assessments, reviewing and conducting critical cybersecurity control checks, as well as other cybersecurity GRC tasks to ensure ATI's compliance to the CMMC standard.

Key Responsibilities:

• Assist with maintenance and annual updates of policies, exceptions, and other governance documents, as necessary
• Help to foster a culture of cybersecurity mindfulness across all levels of the organization by leading the education and awareness function of the team to include mock phishing and cybersecurity updates to all employees
• Work with internal stakeholders across the business to help identify, assess, report, and track cybersecurity risks
• Maintain a strong understanding of the CMMC security requirements and assist with ensuring ATI's compliance
• Participate in risk-based vulnerability management program
• Assist the team with improving and maturing security metrics and reporting capabilities
• Research and investigate new and emerging vulnerabilities
• Act as the primary coordinator for internal and external cybersecurity audits, as well as customer security questionnaires
• Help to build and maintain an all-encompassing view of cybersecurity risks across the company

Basic Qualifications:

• At least three (3) years of experience as an information security engineer or analyst, network security architect, information systems auditor, information systems analyst, or similar cybersecurity occupation
• Previous experience running or participating in a cybersecurity education and awareness program
• Understanding of CMMC requirements and the NIST 800-171 security controls. Knowledge in NIST 800-53 or other controls will be transferable.
• General understanding of cybersecurity technologies and controls with the ability to bridge the gap between regulatory and technical concepts
• Familiarity with drafting corporate policies, procedures, and handbooks
• High School Diploma or GED required

Preferred Qualifications:

• Bachelor's degree in Cybersecurity, Information Systems, Computer Science, Mathematics, Engineering, or related discipline
• Industry standard certifications in cybersecurity (e.g. CRISC, CISA, CISSP, etc.) are strongly desired
• Hands-on experience with auditing against NIST controls
• Experience with scripting languages a plus
• Experience working in a manufacturing or industrial business environment

Skills:

• Demonstrated ability to manage priorities and projects
• Strong interpersonal, organizational and customer service skills
• Excellent documentation skills, with experience as a writer or technical editor a plus
• Ability to assume responsibility as a subject matter expert for cybersecurity risk
• Working knowledge of network interoperability, cybersecurity, and survivability issues, including cybersecurity best practices and standards
• Ability to solve complex problems, reasoning, and problem-solving skills

*It is ATI's policy to not provide immigration sponsorship for any of the company's positions.

ATI and its subsidiary companies will provide equal employment opportunities to all applicants without regard to applicant's race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, veteran status, disability status, or any other status protected be federal or state law. The company will provide reasonable accommodations to allow an applicant to participate in the hiring process if so requested.