Senior Cybersecurity Analyst – Threat and Vulnerability Management
Join us and make a difference in global investor protection.
Who We Are
The Public Company Accounting Oversight Board (PCAOB), a nonprofit organization established by Congress, oversees the audits of public companies and SEC-registered brokers and dealers to protect investors and to further the public interest in the preparation of independent, accurate, and informative audit reports.
Our investor protection mission is focused on modernizing audit standards, enhancing audit inspections, and strengthening enforcement of PCAOB rules and standards and other related laws and rules. People are at the heart of our mission at the PCAOB. As we carry out that mission, we strive to uphold the highest standards in audit quality with investors’ families, savings, and futures in mind.
We are hiring mission-driven professionals interested in a career with purpose, competitive benefit offerings, and work-life flexibility. If you are interested in working with a group of talented professionals to protect investors and drive audit quality and innovation while adhering to the highest standards of ethical and professional conduct, join us.
What We Offer
At the PCAOB, we offer a highly competitive compensation and benefits package with a focus on the health and financial well-being of our valued team members. Some of the features of our comprehensive Total Rewards package include:
-
Compensation – We support transparency, equity, and fairness in our compensation programs and provide a reasonable estimate of the salary range, based on data-driven market analysis, for each job posting. While it is not typical for an individual to be hired at or near the top of the range, a reasonable estimate of the salary ranges are as follows: Tampa, FL: $114,200 - $166,400
per year. Atlanta, GA; Fort Lauderdale, FL; and Charlotte, NC: $119,900 - $174,800 per year. Chicago, IL; and Philadelphia, PA: $125,600 - $183,200 per year. Ashburn, VA; Washington, DC (Headquarters); and Boston, MA: $131,300 - $191,300
per year. New York, NY: $142,800 - $208,00 per year.
-
Hybrid work option – Staff will be assigned to one of our offices or locations, including: Washington, DC (Headquarters); Ashburn, VA; Fort Lauderdale, FL; Tampa, FL; Atlanta, GA; Chicago, IL; Boston, MA; New York, NY; Charlotte, NC; and Philadelphia, PA. Staff can choose to live and work from anywhere within the United States but will be required to commute to their assigned office or location for occasional intentional gatherings or meetings at the frequency required by their supervisor. Travel to an assigned office or location for commuting purposes will not be considered reimbursable business travel, unless otherwise required by state law. Business travel is reimbursable in an amount not exceeding the cost to travel from the assigned office or location, unless otherwise required by state law.
-
Generous paid time off – Up to 6 weeks annually, in addition to 12 federal holidays, 2 floating holidays, and a year-end break December 26-31, 2025
-
Highly competitive 401(k) match and savings options – Immediate vesting and contributions matched dollar for dollar, up to 7 percent of eligible compensation. Roth in-plan conversion available.
-
Comprehensive and competitive health benefit offerings – Medical, dental, and vision plans
-
Supportive paid family leave benefits – Up to 16 weeks paid parental leave and up to 16 weeks paid caregiver leave
-
Life insurance benefits – Basic life and AD&D insurance provided; supplemental insurance also available
-
Education benefits – PCAOB staff qualify for the Public Service Loan Forgiveness (PSLF) program. We also offer student loan repayment assistance, staff college tuition assistance, and college coach program support.
-
Well-being and family resources – Mental health and well-being resources, paid volunteer time, emergency child/adult dependent back-up care services, family-forming assistance, discounted gym memberships, employee assistance program (EAP), health advocate program, and more
-
Commuter benefits – Tax-free employer subsidy and pretax employee deductions
Position Summary
The PCAOB has a full-time, regular position for a Senior Cybersecurity Analyst - Threat and Vulnerability Management in the Office of Technology (OT). The Senior Cybersecurity Analyst - Threat and Vulnerability management will lead our Threat and Vulnerability Management program. The ideal candidate will play a pivotal role in identifying, assessing, and mitigating threats and vulnerabilities to ensure the security and resilience of the PCAOB IT infrastructure.
Responsibilities
-
Act as a technical leader on threat and vulnerability management.
-
Perform risk-based vulnerability assessments across systems, applications, and networks (on-prem and in the cloud).
-
Review and analyze vulnerability data to identify trends and patterns.
-
Advise and assist treatment/remediation teams in prioritizing vulnerability fixes and developing treatment plans.
-
Develop, implement, and maintain a vulnerability lifecycle management program.
-
Collaborate with OT and other colleagues to prioritize and remediate vulnerabilities.
-
Design and implement automated solutions for vulnerability scanning and reporting.
-
Provide technical guidance on secure system design and configurations.
-
Collaborate with the rest of the security team to enhance overall security posture.
-
Monitor and analyze threat intelligence feeds to identify potential risks.
-
Conduct threat modeling and recommend mitigations for critical business applications.
-
Proactively hunt for cyber threats and vulnerabilities within the organization’s environment.
-
Analyze security data and logs from multiple sources (MXDR, SIEM, EDR tools, etc.) to detect anomalous activity.
-
Build and improve detection mechanisms to identify malicious behavior.
-
Perform incident response tasks related to emerging threats and vulnerabilities.
-
Lead vulnerability and threat management initiatives across the PCAOB.
-
Install, configure, and maintain PCAOB security technologies.
-
Act as a liaison between security, OT, and the business to align security practices.
-
Participate in on-call rotation.
Qualifications
Education/Technical Expertise
-
Bachelor’s degree in Cybersecurity, Computer Science, or similar field.
-
Minimum of 7+ years of Cybersecurity experience with a focus on threat and vulnerability management.
-
Proficient with vulnerability scanning tools such as Rapid7 and Defender for Cloud.
-
Proficient with risk-based vulnerability assessment.
-
Experience in applying environmental facets to vulnerability scoring for prioritization.
-
Strong Knowledge of Threat Intelligence platforms and frameworks such as Recorded Future and MITRE ATT&CK.
-
Proficiency with security tools like SIEM (e.g. Sentinel, Chronicle), EDR platforms (e.g. Microsoft Defender for endpoints)
-
Experience with scripting and automation (e.g. Python, Powershell)
-
Familiarity with malware analysis, reverse engineering, and forensics.
-
Strong analytical and problem-solving skills, with ability to collaborate effectively with diverse teams.
-
A self-starter able to administer a number of open, ongoing assignments at any one time, where some assignments are routinely unstructured, requiring autonomy and independent judgment.
-
In-depth experience successfully harmonizing diverse and competing interests.
-
Ability to clearly articulate a position with sound logic, supporting empirical evidence, and impartiality.
-
Ability to effectively represent the organization to a variety of both internal and external constituencies.
-
Superior verbal and written communication skills.
-
Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future.
Preferred Qualifications
-
GCIH, GCTI, GCFA, GCIA, or other relevant certification.
-
Experience with Cloud environments and security solutions (Azure, AWS).
-
Deep understanding of secure software development practices (DevSecOps).
Equal Employment Opportunity
All PCAOB employees are entitled to equal opportunity and a professional work environment, free of discrimination and harassment. A workplace free of discrimination and harassment is fundamental to professional success and to the PCAOB's mission. The PCAOB will consider for employment all qualified applicants with criminal histories in a manner consistent with applicable law.
#LI-Hybrid
Top Skills
What We Do
The PCAOB is a nonprofit corporation established by Congress to oversee the audits of public companies in order to protect investors and further the public interest in the preparation of informative, accurate, and independent audit reports. The PCAOB also oversees the audits of brokers and dealers, including compliance reports filed pursuant to federal securities laws.
The PCAOB has four primary duties:
- Register public accounting firms that prepare audit reports for issuers, brokers, and dealers.
- Establish or adopt auditing and related attestation, quality control, ethics, and independence standards.
- Inspect registered firms' audits and quality control systems.
- Investigate and discipline registered public accounting firms and their associated persons for violations of specified laws, rules, or professional standards.
In support of our mission, we also conduct economic research and risk analysis, engage with our stakeholders and other domestic and international regulators, and manage a talented workforce and the technology and resources we need to perform our duties.
The SEC has oversight authority over the PCAOB, including the approval of the Board's rules, standards, and budget.
The PCAOB has approximately 800 staff members.[1] We maintain our headquarters in Washington, D.C., and have nine regional offices across the United States. More than 1,700 public accounting firms located in 92 jurisdictions across the globe are currently registered with us. About 560 of those registered firms audit more than 12,000 issuers that file financial statements with the SEC or otherwise play a substantial role in those audits.
[1] The data presented in this section is as of December 31, 2020.
Note: Individuals who want to submit a tip or complaint can do so at [email protected] and not through social media accounts or posts.