Security Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Security Analyst supporting Sprezzatura’s secure VA.gov Platform and federal ATO lifecycle. Translating cybersecurity requirements into engineering guidance, documentation, assessments, and compliance actions.
Responsibilities:
- Support the ongoing VA.gov Platform Authority to Operate (ATO) and associated continuous monitoring activities
- Develop, maintain, and coordinate security and privacy artifacts required to support the Platform authorization boundary
- Support updates to Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), Business Impact Analyses (BIAs), system boundary diagrams, architecture diagrams, threat models, and related security documentation
- Support creation and maintenance of Memoranda of Understanding/Interconnection Security Agreements (MOU/ISAs) for system-to-system integrations
- Evaluate proposed system and architecture changes to determine potential security and ATO impacts
- Coordinate with government security stakeholders and Authorizing Official Designated Representatives (AODRs) to validate security requirements and determine when additional security review is required
- Support security assessments, audits, evidence collection, and remediation activities
- Maintain accurate documentation and evidence demonstrating implementation of applicable security controls
- Serve as a security resource for engineers, product teams, and Platform stakeholders
- Translate complex federal security requirements into clear, actionable engineering guidance
- Collaborate with government security stakeholders, engineering teams, and other security SMEs to resolve security and compliance issues
- Maintain clear and accurate security documentation, decision records, procedures, and implementation guidance
- Participate in Agile ceremonies, security planning activities, architecture reviews, and cross-team Platform initiatives
Requirements:
- U.S. Citizen or Permanent Resident (Required)
- Ability to obtain and maintain a Public Trust clearance
- Bachelor’s Degree
- 4+ years of experience in cybersecurity, information security, security engineering, security compliance, or a related technical field
- Strong understanding of federal cybersecurity requirements and risk-management principles
- Experience supporting security assessments, authorization activities, compliance reviews, or continuous monitoring
- Working knowledge of NIST security controls and federal security frameworks
- Experience assessing technical architectures, system integrations, data flows, and security risks
- Understanding of Identity and Access Management concepts including authentication, authorization, identity lifecycle, roles, least privilege, separation of duties, and access management
- Experience reviewing, tracking, and supporting remediation of security vulnerabilities
- Familiarity with cloud environments and modern software development practices
- Ability to work directly with engineers to translate security requirements into technical implementation guidance
- Strong technical documentation and requirements-definition skills
- Excellent written and verbal communication skills
- Ability to operate independently as a security subject matter expert while collaborating effectively across engineering and product teams
- Must have reliable internet service that allows for effective telecommuting
Benefits:
- Medical, Dental, and Vision
- Health Saving Account (when enrolled in eligible plan) with Company contribution
- Company paid Life, Accidental Death, Short-term & Long-term Disability
- Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
- Voluntary Medical & Dependent Care Flexible Spending Accounts
- Accrued Paid Time Off & Company Paid Holidays
- 401(k) Retirement Plan with Company match
Similar Jobs
Security Analyst II
Security Analyst II defending Netrix Global client environments and infrastructure through 24/7 SOC monitoring. Investigating incidents, improving SIEM detections, hunting threats, and automating security operations.
Information Security Analyst, Mid-Level – DevSecOps
DevSecOps analyst securing AWS environments and CI/CD pipelines for SGA’s corporate systems. Automating vulnerability remediation, secrets management, and Secure by Design practices.
Senior Security Analyst
Senior Security Analyst strengthening GRC, compliance, and cloud security. Protecting mortgage-finance systems and data at AI-native operating system company Valon.
Consultant – Global Security Analyst
Security Analyst monitoring and investigating Microsoft-centric security incidents for Austrian and international clients. Developing detections, playbooks and automations across SIEM, XDR, EDR and cloud security.
Staff Cybersecurity Analyst
Staff Cybersecurity Analyst securing D-Wave’s quantum computing systems, software, and cloud services. Leading threat detection, incident response, vulnerability management, and enterprise resilience.
AI Security Analyst
AI Security Analyst securing generative AI, LLM, and agentic systems at 8am, a business-management software company. Supporting SOC monitoring, AI governance, risk management, compliance, and incident response.
ISSO / RMF Cybersecurity Analyst
ISSO/RMF Cybersecurity Analyst guiding federal IT systems through RMF and ATO compliance. Managing security controls, vulnerabilities, continuous monitoring, and incident response for Xcelerate Solutions.
Mid-Level Information Security Analyst, MSS
Analista de Segurança da Informação monitorando SOC, SIEM, Microsoft 365 Defender e firewalls para cliente empresarial da SEK. Atuando em incidentes, investigações e melhorias de segurança.
Cybersecurity Analyst, Consultant
Cybersecurity analyst protecting CybelAngel clients through alert investigation, leak detection, and incident reporting. Supporting cybersecurity solutions and contributing to dark-web research and product improvements.
Information Security Analyst
Information Security Analyst supporting IAM access provisioning, audits, and identity lifecycle management. Resolving access issues for corporate applications and systems across the United States.
National Security Analyst
National Security Analyst supporting U.S. Navy outreach events and public affairs at GDIT. Planning Fleet Weeks, Navy Weeks, executive engagements, and media activities.
Senior Information Security Analyst
Senior Information Security Analyst strengthening Golden 1 Credit Union’s cybersecurity controls. Leading vulnerability management, threat hunting, incident response, and compliance support for a California credit union.
Workday Analyst – Security Administration, Job Architecture
Senior Workday Analyst managing Workday security and job architecture for Lennar, a leading U.S. homebuilder. Governing HR data, audits, reports, and enterprise change.
Security Analyst
Security Analyst protecting Peraton subsidiary systems through CDM security, vulnerability scanning, and FISMA controls. Managing risk assessments, audits, incident response, and security tooling.
Security Analyst – Mid-Atlantic region
Security Analyst preventing and investigating cyber incidents for GuidePoint Security, a cybersecurity solutions and services provider. Monitoring SIEM, networks, endpoints, and logs across U.S. Eastern Time operations.
Security Analyst – Part-Time
Part-time Security Analyst strengthening wi-Q’s hospitality ordering platform security and compliance. Managing ISO 27001, PCI DSS, risk, access governance, and audit readiness.
Senior Threat Intelligence Analyst
Senior threat intelligence analyst researching cyber threats for Team Cymru, an internet threat intelligence company. Analyzing malicious infrastructure, producing intelligence reports, and guiding detection and analytics tooling.
Principal Workday Analyst – Security
Principal Workday Security Analyst leading security architecture and governance for Medtronic’s global healthcare technology platform. Protecting sensitive data, controls, and access across Workday modules.
Cyber Security Analyst
Cyber Security Analyst supporting First Quality’s personal care and household products businesses. Detecting threats, investigating incidents, tuning SIEM rules, and automating SOC response workflows.
Senior Cyber Security Analyst
Senior cloud security analyst engineering controls and defenses for GDIT, a technology and professional services provider to government and defense customers. Supporting CMS security operations, compliance, and Zero Trust initiatives.