Leader CyberSecurity Analyst

We are seeking an experienced cybersecurity leader with a passion for application security, vulnerability management, secure software development practices, and technology modernization. As a Leader Cyber Security Analyst, you will lead a team responsible for strengthening the security posture of applications supporting the Nevada Market. You will provide strategic direction, drive vulnerability remediation programs, partner with engineering and business leaders, and establish security best practices across a complex application ecosystem.

In this role, you will oversee the identification, prioritization, and remediation of security vulnerabilities while balancing business needs, regulatory requirements, and operational risk. You will leverage AI-enabled security and engineering tools to improve team efficiency, accelerate analysis, and enhance decision-making, while ensuring appropriate governance and quality controls are maintained.

You will have the opportunity to work across multiple technologies, business domains, and engineering teams, influencing enterprise security practices that directly protect customer data, critical business operations, and organizational reputation.

Required:

• Undergraduate degree or equivalent experience.
• 8+ years of experience in software engineering, application security, cybersecurity, or related technology disciplines.
• 5+ years of experience leading technical teams, cybersecurity programs, or vulnerability management initiatives.
• 5+ years of experience supporting secure software development practices and SDLC processes, preferably in .Net , C#, Angular , MS SQL , Azure PAAS etc.
• 3+ years of experience managing application security programs, vulnerability remediation efforts, or security governance activities.
• Experience with application security testing tools including SAST, DAST, SCA, penetration testing, and vulnerability management platforms.
• Strong understanding of secure coding principles, OWASP Top 10 risks, secure architecture, authentication, authorization, encryption, and secrets management.
• Experience working with modern development platforms, cloud technologies(Azure preferred), CI/CD pipelines, and DevOps practices.
• Experience leveraging AI-assisted tools for cybersecurity analysis, software development, productivity, or risk management.
• Ability to interpret security risks and communicate technical concepts effectively to both technical and non-technical audiences.
• Strong analytical, problem-solving, organizational, and decision-making skills.
• Excellent verbal, written, and executive communication skills.
• Proven ability to influence cross-functional teams and drive security initiatives in a matrixed environment.

Preferred Qualifications:

• Experience supporting healthcare, insurance, or highly regulated industries.
• Security certifications such as CISSP, CISM, CCSP, CSSLP, Security+, or equivalent.
• Experience with Azure cloud security, DevSecOps, and enterprise vulnerability management programs.
• Experience leading geographically distributed teams and managing large-scale remediation initiatives.
• Familiarity with enterprise security frameworks including NIST CSF, ISO 27001, and HITRUST.

Desired:

Lead, mentor, and develop a team of cybersecurity analysts and security-focused engineers responsible for identifying and remediating application security vulnerabilities.

• Establish team priorities, objectives, and performance expectations aligned with organizational security goals and business priorities.
• Drive vulnerability management programs across application portfolios, ensuring timely remediation of findings identified through SAST, DAST, SCA, penetration testing, and security assessments.
• Partner with engineering leaders, architects, and product teams to incorporate security best practices throughout the software development lifecycle.
• Oversee prioritization of security findings based on risk, exploitability, business impact, and remediation service level targets.
• Provide leadership and guidance in the analysis of complex security vulnerabilities, root cause identification, and remediation planning.
• Develop and maintain governance processes, metrics, dashboards, and executive reporting for security remediation activities, risk exposure, and compliance requirements.
• Collaborate with Information Security, Risk Management, Compliance, Audit, and business stakeholders to address security concerns and support regulatory requirements.
• Drive modernization initiatives, including upgrades of vulnerable frameworks, libraries, platforms, and end-of-life technologies.
• Promote secure coding practices and ensure alignment with enterprise security standards, policies, and industry frameworks such as OWASP, NIST, and secure SDLC principles.
• Champion the adoption of AI-assisted security and development tools to improve productivity, security analysis, and remediation effectiveness.
• Review security trends, emerging threats, and vulnerability patterns to proactively reduce organizational risk.
• Lead incident response coordination and remediation activities related to application security findings when required.
• Facilitate risk reviews and support informed decisions regarding remediation, mitigation, compensating controls, or risk acceptance.
• Partner with project and portfolio leadership to estimate security remediation efforts and align resources accordingly.
• Drive continuous improvement initiatives to improve remediation velocity, reduce recurring vulnerabilities, and strengthen overall application security posture.
• Represent the cybersecurity function in leadership discussions and provide strategic recommendations to senior management.
• Foster a culture of accountability, collaboration, innovation, and security-first thinking across teams.
• Manage multiple priorities and ensure delivery of security initiatives within established timelines and organizational objectives.