Social Engineering Analyst

The final salary or hourly wage, as applicable, paid to each candidate/applicant for this position is ultimately dependent on a variety of factors, including, but not limited to, the candidate’s/applicant’s qualifications, skills, and level of experience as well as the geographical location of the position.

Applicants must be legally authorized to work in the United States. Sponsorship not available.

Our client is seeking Social Engineering Analyst in Vienna, VA.

ROLE DESCRIPTION

The Social Engineering Analyst is a junior-level cybersecurity role responsible for executing and coordinating established phishing, smishing, and customized social engineering exercises. Working within documented processes, the analyst will configure, launch, monitor, and report on assigned campaigns. The role requires strong attention to detail, analytical ability, communication skills, and consistent execution of recurring cybersecurity activities.

• Execute monthly Enterprise phishing, quarterly Privileged User phishing, and quarterly Enterprise smishing campaigns.
• Support customized social engineering campaigns requested by business units.
• Configure campaign scenarios, templates, targeting, schedules, and supporting materials using established processes.
• Coordinate timelines, stakeholder inputs, targeting requirements, approvals, quality assurance, launch activities, and results reporting.
• Perform pre-launch quality assurance; monitor active campaigns; troubleshoot or escalate issues as appropriate.
• Compile and validate campaign results; analyze outcomes, trends, and anomalies requiring additional review.
• Support recurring KRI/KPI and management reporting and maintain historical campaign metrics.
• Maintain procedures, records, and supporting documentation.
• Coordinate with Communications and Training partners on social engineering and awareness content.

SKILLS & REQUIREMENTS

• Bachelor's degree in cybersecurity, information technology, computer science, information systems, or a related discipline preferred; relevant professional experience may be considered in lieu of a degree.
• Cybersecurity experience with an interest in social engineering, security awareness, or related defensive cybersecurity disciplines.
• Direct experience supporting or executing social engineering exercises, particularly phishing or smishing simulations, strongly preferred.
• Security+, CySA+, or a comparable cybersecurity certification preferred, but not required.
• Experience following established processes and executing recurring operational activities.
• Experience compiling, validating, or analyzing cybersecurity or operational data; familiarity with KPI/KRI or management reporting is beneficial.
• No experience with a specific social engineering platform or technology is required.
• Strong attention to detail, quality, and consistent process execution.
• Effective organizational, analytical, and problem-solving skills, including management of multiple campaign activities and deadlines.
• Clear written and verbal communication and the ability to collaborate with cybersecurity teams, business stakeholders, and Communications and Training partners.
• Sound judgment when handling cybersecurity-related information and escalating operational issues.
• 5-10 years exp
• Phishing / smishing simulation experience
• Experience building, launching, monitoring, and reporting on security awareness campaigns
• Search for experience with tools such as Microsoft Attack Simulation Training, Proofpoint Security Awareness, KnowBe4, Cofense PhishMe, Hoxhunt, or Fortra/Terranova (examples to broaden sourcing, not required by the JD)
• Cybersecurity data analysis/reporting: campaign metrics, click/report rates, trends, KPI/KRI reporting
• Strong QA / attention to detail around templates, user targeting, scheduling, and campaign setup
• Experience coordinating multiple recurring campaigns and working with Security Awareness / Human Risk Management teams
• Security+ or CySA+ preferred, not required
• Junior-level cybersecurity profile. They do not need penetration testing/red-team expertise or experience with a specific phishing platform.
• Main thing: prioritize candidates who have actually run phishing/security awareness campaigns, not just general cybersecurity analysts

Benefits/Other Compensation

Medical, Dental, Life Insurance, 401K.

Why Hays?

You will be working with a professional recruiter who has intimate knowledge of the industry and market trends. Your Hays recruiter will lead you through a thorough screening process in order to understand your skills, experience, needs, and drivers. You will also get support on resume writing, interview tips, and career planning, so when there’s a position you really want, you’re fully prepared to get it.

Nervous about an upcoming interview? Unsure how to write a new resume?

Visit the Hays Career Advice section to learn top tips to help you stand out from the crowd when job hunting.

Hays is committed to building a thriving culture of diversity that embraces people with different backgrounds, perspectives, and experiences. We believe that the more inclusive we are, the better we serve our candidates, clients, and employees. We are an equal employment opportunity employer, and we comply with all applicable laws prohibiting discrimination based on race, color, creed, sex (including pregnancy, sexual orientation, or gender identity), age, national origin or ancestry, physical or mental disability, veteran status, marital status, genetic information, HIV-positive status, as well as any other characteristic protected by federal, state, or local law. One of Hays’ guiding principles is ‘do the right thing’. We also believe that actions speak louder than words. In that regard, we train our staff on ensuring inclusivity throughout the entire recruitment process and counsel our clients on these principles. If you have any questions about Hays or any of our processes, please contact us.

In accordance with applicable federal, state, and local law protecting qualified individuals with known disabilities, Hays will attempt to reasonably accommodate those individuals unless doing so would create an undue hardship on the company. Any qualified applicant or consultant with a disability who requires an accommodation in order to perform the essential functions of the job should call or text 813.336.5570.

Drug testing may be required; please contact a recruiter for more information.

#1187353 - Kellee Jacobsen