Sr. Analyst, Cybersecurity TMRW Sports Inc Orlando, FL Job Details Full-time 1 hour ago Benefits Health savings account Paid holidays Health insurance Dental insurance 401(k) Flexible spending account Vision insurance 401(k) matching Qualifications Incident investigation techniques for hazard identification Endpoint Security Vulnerability scanning implementation Tooling Triage Public Cloud Endpoint Detection and Response (EDR) Security data analysis Task prioritization Incident management operations support Security threat response protocols Log analysis tools Vulnerability management Cybersecurity investigations Identity and access management (IAM) solutions Incident response implementation Vuls Evidence collection Identity & access management IT security monitoring

Full Job Description Description:

The Sr. Analyst, Cybersecurity is an experienced, hands-on security professional who helps protect TMRW Sports' people, technology, data, and live-event operations. Reporting to the Director, Cyber Security, this role strengthens day-to-day security operations by anticipating, monitoring, and investigating threats, leading incident response activities, reducing vulnerabilities, and improving the security and resilience of TMRW Sports' cloud, endpoint, identity, and third-party environments. The Sr. Analyst will serve as a trusted partner across the business to translate risk into practical action, mature security processes, and support secure innovation in a fast-moving sports, media, and entertainment organization.

Responsibilities:

Demonstrate advanced analytical skills across diverse cybersecurity domains, leading the identification and resolution of complex cybersecurity issues in areas such as Incident Response, Threat Intelligence, Governance, Risk, and Compliance (GRC), Privacy, Vulnerability Management, and Engineering Operations Lead and actively participate in incident response activities, including evidence collection, scope analysis, stakeholder communications, root-cause identification, recovery validation, and post-incident improvement actions Drive advanced threat intelligence initiatives, including the development of threat hunting strategies, proactive identification of emerging threats, and the implementation of innovative solutions to enhance the organization's security posture Lead vulnerability management activities, including asset and exposure review, risk-based prioritization, remediation coordination, exception tracking, and verification of corrective actions Take a leadership role in maturing GRC initiatives, ensuring comprehensive understanding, and proactively shaping cybersecurity regulations, standards, and best practices within the organization Drive the continual improvement of cybersecurity practices and resilience, staying at the forefront of industry trends and emerging technologies to shape and enhance the organization's advanced security posture Lead the development and execution of comprehensive cybersecurity training and awareness initiatives, tailoring programs to different audiences and providing mentorship to junior team members Support cybersecurity planning for live events, venue security, and special events by identifying cyber dependencies, operational risks, monitoring needs, and incident escalation paths Develop and maintain IT security documentation, including incident response playbooks, procedures, and technical runbooks Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed Participate in after-hours incident response as needed

Requirements:

Bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field, or equivalent relevant professional experience 5+ years of progressive cybersecurity experience, including substantial hands-on responsibility in security operations, incident response, threat detection, vulnerability management, or cloud security Understanding of how IT and security can enable business operations Demonstrated experience investigating complex security events and coordinating incidents from initial triage through containment, recovery, and lessons learned Working knowledge of common attacker techniques and defensive frameworks, including MITRE ATT&CK, identity-based attacks, phishing, malware, lateral movement, persistence, and data exfiltration Hands-on experience with SIEM, EDR/XDR, email security, vulnerability scanning, identity and access management, and cloud-native security tooling Practical knowledge of cloud environments and AI security Ability to analyze logs and technical evidence from multiple sources, recognize patterns, document conclusions, and make risk-based recommendations Strong written and verbal communication skills, including the ability to explain technical risk and response decisions to technical teams, business stakeholders, and leadership Sound judgment, discretion, attention to detail, intellectual curiosity, and the ability to manage competing priorities in a high-tempo environment

Preferred:

One or more relevant certifications, such as CISSP, GIAC, Security+, CySA+, SC-200, AZ-500, AWS Certified Security - Specialty, or equivalent practical credentials Experience in sports, media, entertainment, broadcast, live-event, venue, or other high-availability operational environments Familiarity with security and privacy frameworks or requirements such as

NIST CSF, NIST 800-61, CIS

Controls, ISO 27001, SOC 2, PCI DSS, and applicable privacy obligations You'll be successful if you possess: Strong analytical, investigative, and problem-solving skills with the ability to assess complex security risks Excellent verbal and written communication skills with the ability to translate technical concepts for diverse audiences A proactive mindset with strong attention to detail and a passion for continuous improvement The ability to work independently while effectively managing multiple priorities and projects Experience collaborating across teams to drive security initiatives and strengthen organizational resilience Deep knowledge of cybersecurity principles, threat landscapes, and enterprise security technologies The ability to take ownership, document your work, follow through on commitments, and look for opportunities to automate, simplify, and strengthen security operations Curiosity and a continuous-learning mindset to evolving technologies, attacker behaviors, and the unique operational needs of sports and live entertainment

Benefits:

Equity ownership opportunities to allow employees to share in the company's growth Unlimited discretionary time off along with 15 paid holidays per year (including the week of Independence Day) Comprehensive health insurance options, including a 100% contribution Employee coverage option Additional employee and family insurance coverage options with company contribution, including dental and vision FSA, HSA and DCHSA opportunities including contribution matches Retirement options including traditional 401(k) and Roth IRA plans Benefits are subject to change at the company's discretion. TMRW Sports is proud to be an equal opportunity employer. We are committed to providing equal employment opportunities to all employees and applicants without regard to race, color, ancestry, religion, sex, age, national origin, sexual orientation, gender identity, disability, genetic information, veteran status, or any other factor protected by applicable law. This applies to all employment practices within our organization, including hiring, recruiting, promotion, termination, layoff, recall, transfer, leave of absence, compensation, benefits, and training. TMRW Sports expressly prohibits discrimination and harassment of any kind based on race, color, ancestry, religion, sex, age, national origin, sexual orientation, gender identity, disability, genetic information, pregnancy, or any other protected characteristic as outlined by federal, state, or local laws. No matter what background you bring with you, if you are committed to excellence and good at what you do, we welcome you to apply to join us and encourage you to come as you are.

About TMRW Sports:

(pronounced "tomorrow sports") TMRW Sports is focused on building modern approaches in sports, media, and entertainment. By creating new leagues for a new age, TMRW Sports, in partnership with established leagues like the

NFL, PGA

TOUR and LPGA, is forging pathways and experiences for new generations of fans. TMRW Sports' first project, TGL presented by SoFi, is a primetime team golf league in partnership with the

PGA TOUR

reaching 152 territories worldwide and described as a "high-energy arena spectacle" by Vanity Fair, "pure entertainment" by GQ, and "golf's boldest new venture" by Fast Company. Launching this fall, WTGL will feature teams of the world's best women golfers in partnership with the

LPGA. TMRW

Sports is also developing men's and women's professional flag football leagues in partnership with the National Football League and 32 Equity, the NFL's collective investment vehicle. Founded by Tiger Woods, Rory McIlroy, and sports executive Mike McCarley, TMRW Sports is supported by an influential and diverse investor group of athletes, celebrities and business leaders from the worlds of sports, media, technology and finance. For more, visit TMRWSportsGroup.com.