Security Analyst

• Conduct cybersecurity risk assessments for software procurement and renewals
• Enter and manage risk assessment data in OneTrust and ServiceNow
• Provide comments and documentation for Ohio Buys requisitions
• Collaborate with business units, procurement, and IT teams to clarify requirements and processes
• Support process mapping and improvement initiatives
• Track and report workload, turnaround times, and resource metrics
• Adapt quickly as processes and workflows evolve

IT Security Analyst – Supply Chain Risk

• Serve as a senior hands-on technical resource for the enterprise Vulnerability Management program
• Identify, validate, prioritize, track, remediate, and close enterprise vulnerabilities
• Administer, maintain, optimize, and support Wiz, CrowdStrike, Rapid7, Nagomi, and related platforms
• Perform vulnerability assessments across servers, workstations, network devices, cloud-hosted assets, applications, and other technology assets
• Analyze and validate findings to reduce false positives and focus remediation on legitimate cybersecurity risk
• Prioritize vulnerabilities based on severity, exploitation, internet accessibility, asset criticality, business impact, threat intelligence, exploitability, compensating controls, and exposure paths
• Coordinate with Infrastructure, Network, Cloud, Application, Identity, GRC, and other technology teams to drive remediation
• Track vulnerabilities through identification, validation, remediation, mitigation, exception, risk acceptance, and closure
• Perform technical validation after remediation
• Identify recurring vulnerabilities and systemic weaknesses and recommend improvements
• Develop and maintain procedures, standards, runbooks, dashboards, documentation, and reporting
• Support vulnerability exception and risk acceptance processes
• Perform vulnerability trend analysis and develop exposure metrics
• Support Nagomi integrations, exposure analysis, security control validation, and risk-based prioritization
• Support mergers, acquisitions, divestitures, and business integrations through discovery, assessment, onboarding, and integration activities
• Assess acquired environments for vulnerabilities, unmanaged assets, unsupported technologies, configuration weaknesses, and technical debt
• Establish vulnerability and exposure baselines for acquired environments
• Onboard acquired assets into enterprise Vulnerability Management processes and technologies
• Perform scans, technical assessments, validation, and follow-up testing during acquisition integration
• Provide remediation recommendations and validate patches, configuration changes, mitigations, and corrective actions
• Track M&A cybersecurity findings and activities through completion
• Support automation, API integrations, reporting, and workflow improvements
• Report to the Cyber Security Operations Manager and receive technical direction from cybersecurity leadership

Senior Cyber Security Analyst – Vulnerability Management

• Administer user access within IBM RACF and related enterprise security platforms
• Perform user provisioning, modification, and deprovisioning in accordance with established policies and service level expectations
• Investigate and resolve access-related issues
• Support access governance across mainframe and enterprise environments
• Manage access requests, incidents, and workflow activities through ServiceNow
• Partner with business and technology teams to fulfill and resolve access-related requests
• Support access certification campaigns, compliance initiatives, and audit activities
• Partner with internal and external auditors to provide documentation, evidence, and subject matter expertise
• Maintain and update IAM operating procedures, standards, and governance documentation
• Identify opportunities to strengthen security controls and improve operational effectiveness
• Coordinate testing and implementation activities supporting IAM integrations and Human Resources data feeds
• Support ServiceNow enhancements and IAM technology initiatives
• Collaborate with internal teams and technology partners to enhance IAM services and platforms
• Drive continuous improvement initiatives that improve security, scalability, and operational efficiency
• Support secure and compliant access management across enterprise systems and applications

Security Analyst, Identity and Access Management – IAM

• Lead and manage the complete DoD Authority to Operate (ATO) process
• Serve as the primary cybersecurity liaison between project stakeholders, Government cybersecurity officials, and the ISSO
• Develop, maintain, and manage RMF artifacts and documentation, including System Security Plans, Plans of Action & Milestones, Security Assessment Reports, and Security Control Traceability Matrices
• Direct implementation and maintenance of DoD RMF controls and security requirements
• Lead vulnerability management activities, including security scanning, risk analysis, remediation planning, and continuous monitoring
• Manage and oversee STIG implementation and compliance activities
• Coordinate cybersecurity assessments, audits, and authorization reviews
• Ensure compliance with DoD cybersecurity policies, FedRAMP requirements, and DoD Cloud Computing Security Requirements Guide standards
• Support accreditation activities for Impact Level (IL) 4 and IL5 cloud environments
• Provide cybersecurity subject matter expertise to program leadership and technical teams
• Monitor cybersecurity risks and recommend mitigation strategies to maintain system authorization status

Cybersecurity Analyst

• Report to the Manager of Security Analysis Team (SOC), with rollup to the Director of Security
• Continuously monitor networks, managed devices and identities, cloud services, business systems, and application traffic
• Analyze logs in an integrated SIEM platform and develop searches, dashboards, and alerts to improve detection and response timelines
• Perform security monitoring, digital forensics, and incident response across corporate, product, and mission environments
• Review events and alerts for indicators of compromise, indicators of attack, cyber threat intelligence, and non-compliance activities
• Review cyber threat intelligence and apply insights to secure the enterprise
• Conduct regular threat hunting
• Document procedures and technical findings, including anomalies, incidents, and concerns
• Analyze system/event logs, network traffic, and SaaS security tool data
• Perform malware analysis and digital forensics using industry-standard sandbox tools
• Monitor network, operating system, and application log traffic for security threats
• Support vulnerability management, prioritization, and remediation with IT and product owners
• Define offensive testing scope and support vulnerability remediation
• Monitor compliance with hardened baseline images against CIS Benchmarks and/or DISA STIGs
• Develop automation to improve adversary detection and reduce recurring tasks
• Complete compliance assessments and report findings to management
• Support security training and manage tabletop scenarios
• Support SOX/ITGC, CMMC 2.0 Level 2, NIST 800-171 r3, UK Cyber Essentials, and customer-specific compliance requirements
• Perform other responsibilities as assigned

Senior Security Analyst

• Support and enhance HR processes and systems for all employees
• Administer functional security for global HR applications
• Process system access requests and ensure timely, accurate provisioning and deprovisioning
• Troubleshoot and resolve system and security access issues
• Conduct quarterly security audits and user access reviews for data-security policies, procedures, and SOX requirements
• Gather and document requirements for new security access requests
• Partner with IT security on creating and testing new security roles
• Support security-role modifications and enhancements from impact assessment through implementation
• Develop and maintain security audit reports and queries
• Provide functional security support for recurring HR processes, including Performance Management, Compensation, COI, and Executive Reorgs
• Maintain security-related configuration and end-user authorizations
• Gather, analyze, and document requirements for new or enhanced applications
• Drive application releases and prioritize features to improve HR user experience
• Serve as primary HR and IT contact for application matters
• Translate business requirements into functional design documents
• Support and train end users on new application features
• Develop and maintain end-user guidelines and documentation
• Participate in system implementation projects through requirements, design, build, test, and implementation
• Recommend and support process improvements and program changes
• Support HR projects and large-scale deployments
• Manage security workstream activities throughout projects
• Perform other assigned duties

HR Ops Analyst – Security & Apps

• Provide Functional Mission Analysis-Cyber assistance to identify weapon system critical information technology architecture and supporting infrastructure
• Perform Information Security Analyst functions supporting USAF infrastructure at the base level
• Investigate network activities in cyberspace to determine essential Mission Relevant Terrain Cyber support
• Develop strategies to identify, evaluate, and minimize risks in the local cyberspace environment
• Create and implement strategies to merge and display relevant Mission Relevant Terrain Cyber information
• Identify and analyze trends to define Mission Relevant Terrain Cyber requirements and provide guidance
• Assist with FMA-C by identifying, mapping, and developing a defense plan to safeguard Mission Relevant Terrain Cyber
• Establish databases to monitor systems, revise user boundaries, and create indexing for easier searches
• Utilize classified and unclassified networks and information portals to create support and information distribution plans
• Review and recommend new or revised policies, procedures, objectives, and organizational designs
• Coordinate with local/base subject matter experts to resolve events and incidents and brief recommendations and courses of action
• Define and perform vulnerability assessments using threat analysis to scope and prioritize efforts
• Conduct research, analysis, and correlation across all-source data sets
• Coordinate with enterprise-wide cyber defense staff to validate network alerts
• Document and escalate incidents, including history, status, and potential impact
• Perform cyber defense trend analysis and reporting
• Correlate events from multiple sources to gain situational awareness and determine attack effectiveness
• Receive and analyze network alerts and determine possible causes

IT Security Analyst

• Serve as Pod Lead for RMF Steps 1 through 3
• Provide comprehensive cybersecurity support to the Department of State Directorate of Technology Enterprise Architecture Cyber Security Team
• Coordinate daily technical assignments, workload, due dates, dependencies, and backup coverage
• Guide IASS personnel on boundaries, categorization, control selection, inheritance, implementation statements, and evidence collection
• Review drafts for technical accuracy and readiness before Quality Analyses Team review
• Track TRT comments, missing artifacts, evidence requests, POA&M gaps, and quality corrections through resolution
• Coordinate with system owners, engineers, developers, and shared SMEs to resolve package dependencies
• Mentor junior and journeyman personnel
• Escalate schedule, capacity, technical, and risk issues to the RMF Lead
• Maintain authorization package readiness and primary and backup coverage for assigned systems

Information Security Analyst, SME, Pod Lead

• Direct personnel supporting the operational security and authorization posture of consular systems
• Direct continuous monitoring, ongoing authorization support, vulnerability and cloud-posture analysis, POA&M tracking, change-impact reviews, and CO1 Tenable operational coverage
• Assign continuous-monitoring work and review exception queues, authorization milestones, overdue findings, and emerging risk
• Oversee scheduled Tenable coverage, relief staffing, shift handoffs, escalation, platform health, and recovery coordination
• Correlate Tenable and Wiz findings with consular-affairs systems and authorization boundaries using approved system identifiers
• Prioritize KEVs, BOD actions, critical and high findings, remediation milestones, and evidence-backed closure
• Direct SIA/NOC reviews and updates to SSPs, diagrams, inventories, privacy artifacts, and POA&Ms
• Coordinate annual assessment support, contingency tests, audit responses, FISMA submissions, and incident-related artifact updates
• Escalate authorization-impacting conditions and coordinate return to earlier RMF activities when required
• Coordinate CO1 tool responsibilities with CO5 through approved responsibility assignments and interfaces
• Maintain reliable operational coverage, current authorization records, actionable monitoring data, timely risk escalation, and validated remediation progress

Information Security Analyst, Lead

• Conduct risk assessments for new software requests and renewals
• Document findings in OneTrust
• Ensure proper workflow integration with ServiceNow and Ohio Buys
• Perform cybersecurity risk assessments for software procurement and renewals
• Enter and manage risk assessment data in OneTrust and ServiceNow
• Provide comments and documentation for Ohio Buys requisitions
• Collaborate with business units, procurement, and IT groups to clarify requirements and process steps
• Support process mapping and improvement initiatives to reduce workflow duplication
• Track and report metrics on workload, turnaround times, and resource needs

Security Analyst jobs in United States