Cybersecurity Analyst

At BETA Technologies, we apply our intellectual curiosity, passion for aviation, and commitment to sustainability toward a shared mission of revolutionizing electric aviation. Regardless of the position one holds, each team member brings their talent and desire to positively impact the environment and lives of others in a refreshing, vibrant, and inclusive culture.

The Cybersecurity Incident Analyst is the lifeblood of BETA's Information Security Operations program: pursuing findings from our Security Operations Center (SOC), tracking remediation, identifying opportunities for improvement to BETA's Information Security posture, and maximizing BETA's readiness to address information security incidents by resourcing, training, exercising, and continuously improving our incident response (IR) capabilities.

How you will contribute to revolutionizing electric aviation:

• Own one or more functions of BETA's Information Security Operations program, support the others
• Triage findings from BETA's SOC and other sensors, owning resolution where possible and documenting/tracking resolution by others where needed
• Document and track remediation of vulnerabilities and security-relevant misconfigurations, leading periodic reviews with operators of affected assets to guide resolution
• Respond to information security incidents throughout BETA's information environment as a member of our Incident Response Team (IRT)
• Develop, maintain, and enhance the resources supporting training- and execution of BETA's Information Security Incident Response Protocol (IRP)
• Train and exercise the IRP with Team Members who will staff the IRT
• Collaborate closely with other Digital Infrastructure staff to maximize alignment between security- and operational incident response
• Contribute reporting to inform periodic (monthly, annual, etc.) enterprise security posture reviews
• Support audits throughout BETA's information environment by producing required artifacts
• Cross-train with other BETA's Cybersecurity Analysts and understand their workflows sufficiently to provide coverage in the event of their absence

Minimum Qualifications:

• Strong understanding of information security/cybersecurity first principles
• Professional experience in an information security/cybersecurity role: continuous monitoring or incident response
• Strong teamwork orientation
• Aptitude for organizing information for others to access
• Aptitude for training others
• Excellent written and verbal communication
• Strong sense of initiative

Above and Beyond Qualifications:

• Demonstrated ability to interpret security information for non-practitioners
• Experience developing- and delivering training in a professional setting, both in-person and online
• Experience with risk-based vulnerability management
• Experience with malware analysis and response
• Experience securing IoT/ICS assets
• Experience leading information security/cybersecurity incident response
• Experience developing incident response plans or emergency management plans
• Enthusiasm for training responders through exercises
• Experience collecting data in support of reporting via web services APIs
• Academic degree in information security/cybersecurity, SANS GIAC certification (DFIR track, Cyber Defense track) or equivalent, NIMS Incident Command System certification or similar

Physical Demands and Work Environment:

• This role consists primarily of computer work and presentations to small groups in an office environment

$80,000 - $100,000 a year The wage listed here reflects our best faith estimate for this role. We pay competitively and base compensation on a variety of factors including skills, experience, industry background, and the evolving needs of the role. We remain committed to fair and equitable pay and we're happy to discuss during the interview process.

Build electric airplanes with us

We encourage all driven candidates to apply, even if they do not meet every listed qualification.

We are an equal opportunity employer. Employment decisions are based on merit, competence and qualifications and will not be influenced in any manner on race, color, religion, age, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, disability, veteran or military status, genetic information, pregnancy, or any other protected characteristic under federal, state, or local law. BETA complies with all applicable federal, state and local non-discrimination laws and does not tolerate discrimination of any kind in our workplace.

Employment offers are contingent upon the successful completion of a background check. BETA Technologies participates in E-Verify.

---