Cybersecurity Risk Analyst Jobs in Massachusetts

Staples is business to business. You're what binds us together.

Our digital solutions team is more than a traditional IT organization. We are a team of passionate, collaborative, agile, inventive, customer-centric, results-oriented problem solvers. We are intellectually curious, love advancements in technology and seek to adapt technologies to drive Staples forward. We anticipate the needs of our customers and business partners and deliver reliable, customer-centric technology services.

At Staples, technology and security are critical to delivering exceptional experiences for our customers and associates. As a Lead Cyber Security Analyst, you will play a key role in protecting enterprise systems, data, and digital assets from evolving cyber threats. This is an opportunity to join a collaborative team where your expertise will directly influence the security posture of a leading organization while helping drive innovation, risk mitigation, and business resilience.

The Lead Cyber Security Analyst anticipates, identifies, and analyzes complex cybersecurity threats, including malware, denial-of-service attacks, vulnerabilities, and other emerging risks. This role is responsible for developing and implementing security controls, supporting incident response efforts, conducting risk and vulnerability assessments, and recommending proactive security improvements. The analyst serves as a trusted cybersecurity resource across the organization, mentors less experienced team members, and helps strengthen Staples' overall security strategy.

What You'll Be Doing:

• Monitor, investigate, and respond to complex cybersecurity threats, incidents, and vulnerabilities across enterprise environments.
• Develop, implement, and maintain cybersecurity policies, procedures, and controls designed to protect organizational data and systems.
• Perform security assessments, audits, and vulnerability testing to identify risks and recommend remediation strategies.
• Review and investigate security alerts, logs, and violation reports while coordinating appropriate incident response activities.
• Help ensure compliance with applicable data security and privacy regulations and standards.
• Partner with IT, infrastructure, and business teams to implement security best practices that align with organizational objectives.
• Research emerging cybersecurity threats, trends, and technologies and recommend innovative solutions to address future risks.
• Provide guidance and mentorship to junior cybersecurity team members.
• Act as a cybersecurity subject matter expert and collaborate with internal stakeholders and external partners when needed.

What You Bring To The Table:

• Strong analytical, investigative, and problem-solving skills with the ability to assess complex security risks.
• Excellent verbal and written communication skills with the ability to translate technical concepts for diverse audiences.
• A proactive mindset with strong attention to detail and a passion for continuous improvement.
• Ability to work independently while effectively managing multiple priorities and projects.
• Experience collaborating across teams to drive security initiatives and strengthen organizational resilience.
• Deep knowledge of cybersecurity principles, threat landscapes, and enterprise security technologies.

What's Needed- Basic Qualifications:

• 5+ years of experience in cybersecurity with a demonstrated track record of success.
• Experience working with cybersecurity frameworks and industry security standards.
• Hands-on experience with security technologies such as SIEM platforms, firewalls, proxies, DLP (data loss prevention), SOAR (security orchestration, automation, and response), and EDR (endpoint, detection, and response) security tools.
• Experience conducting vulnerability assessments, security investigations, and incident response activities.
• Strong understanding of risk management, data protection, and security compliance requirements.

What's Needed - Preferred Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, a related field, or equivalent experience.
• Industry-recognized cybersecurity certifications such as CISSP, CISM, CEH, CompTIA Security+, CNDSP, or equivalent.
• Master's degree in Cybersecurity or a related discipline.
• 7+ years of specialized cybersecurity experience.
• Experience leading security initiatives or serving as a technical mentor within a cybersecurity team.
• Expertise in proactively identifying, analyzing, and mitigating emerging cyber threats in enterprise environments, including experience with threat hunting, evaluating evolving threat landscapes, and assessing threat actor TTPs (tactics, techniques, and procedures) to reduce organizational risk.

We Offer:

• Inclusive culture with associate-led Business Resource Groups
• Flexible PTO (22 days) and Holiday Schedule (7 observed paid holidays + 1 floating holiday)
• Online and Retail Discounts, Company Match 401(k), Physical and Mental Health Wellness programs, and more!

The salary rangerepresentsthe expected compensation for this role at the time of posting. The specificbasepay may be influenced by a variety of factors to include the candidate's experience, skill set, education, geography, business considerations, and internal equity.In addition to base pay, this role may be eligible for bonuses, or other forms of variable compensation.

#LI-MR1