Security Analyst

• Serve as Pod Lead for RMF Steps 1 through 3
• Provide comprehensive cybersecurity support to the Department of State Directorate of Technology Enterprise Architecture Cyber Security Team
• Coordinate daily technical assignments, workload, due dates, dependencies, and backup coverage
• Guide IASS personnel on boundaries, categorization, control selection, inheritance, implementation statements, and evidence collection
• Review drafts for technical accuracy and readiness before Quality Analyses Team review
• Track TRT comments, missing artifacts, evidence requests, POA&M gaps, and quality corrections through resolution
• Coordinate with system owners, engineers, developers, and shared SMEs to resolve package dependencies
• Mentor junior and journeyman personnel
• Escalate schedule, capacity, technical, and risk issues to the RMF Lead
• Maintain authorization package readiness and primary and backup coverage for assigned systems

Information Security Analyst, SME, Pod Lead

• Direct personnel supporting the operational security and authorization posture of consular systems
• Direct continuous monitoring, ongoing authorization support, vulnerability and cloud-posture analysis, POA&M tracking, change-impact reviews, and CO1 Tenable operational coverage
• Assign continuous-monitoring work and review exception queues, authorization milestones, overdue findings, and emerging risk
• Oversee scheduled Tenable coverage, relief staffing, shift handoffs, escalation, platform health, and recovery coordination
• Correlate Tenable and Wiz findings with consular-affairs systems and authorization boundaries using approved system identifiers
• Prioritize KEVs, BOD actions, critical and high findings, remediation milestones, and evidence-backed closure
• Direct SIA/NOC reviews and updates to SSPs, diagrams, inventories, privacy artifacts, and POA&Ms
• Coordinate annual assessment support, contingency tests, audit responses, FISMA submissions, and incident-related artifact updates
• Escalate authorization-impacting conditions and coordinate return to earlier RMF activities when required
• Coordinate CO1 tool responsibilities with CO5 through approved responsibility assignments and interfaces
• Maintain reliable operational coverage, current authorization records, actionable monitoring data, timely risk escalation, and validated remediation progress

Information Security Analyst, Lead

• Conduct continuous monitoring and Tier II helpdesk for cloud and on-premises services across multiple classification levels
• Support establishment and management of a 7 am to 7 pm Monday-Friday Network Operations and Security Center (NOSC)
• Facilitate incident response and threat hunting activities
• Work with collocated NOC analysts to provide artifacts and analysis for troubleshooting network transport incidents
• Work with multiple work centers and assist Program Management staff with prioritization and milestone tracking for SOC Operations and Maturity governance
• Operate the SIEM platform to monitor security alerts
• Coordinate vulnerability assessments and artifact collection across servers and network devices
• Evaluate network structures and device configurations for security risks and recommend security best practices
• Gather data to identify and respond to network intrusions
• Analyze cloud and on-premises network traffic and system logs to identify malicious activities, misconfigurations, hardware problems, exploited vulnerabilities, and attack methods
• Develop processes to enhance SOC and NOC response and efficiency
• Reconstruct attacks based on network traffic and integrate Threat Intelligence
• Collaborate across multiple locations

Cyber Security Analyst II – Government

• Protect classified and proprietary information from external and internal threats
• Conduct counterintelligence and insider threat investigations
• Manage a portfolio within the Northrop Grumman Space Sector counterintelligence and insider threat program
• Develop and implement awareness campaigns across the sector in collaboration with the NGSP Counterintelligence and Insider Threat Manager
• Attend weekly working group meetings in the Quantico, Virginia area
• Travel periodically to NGSP facilities across the sector
• Establish internal and external partnerships
• Review available intelligence sources
• Conduct tailored presentations
• Perform threat and vulnerability analysis
• Develop methods to protect employees and proprietary information during CONUS and OCONUS travel
• Perform other duties as assigned

Industrial Security Analyst – Level 4

• Support security operations within a secured facility at the Net Center site in Newport News, Virginia
• Assist in administering and enforcing security requirements under 32 CFR Part 117 (NISPOM Rule) and internal security policies
• Develop, maintain, and administer security programs and procedures for classified documents and equipment
• Interpret, apply, and support implementation of federal security regulations
• Obtain rulings, interpretations, and acceptable regulatory deviations from government agencies
• Maintain regulatory manuals and establish procedures for handling, storing, recording, and granting access to restricted materials
• Manage document control, visitor control, and personnel security activities
• Provide employee guidance and immediately report and document security concerns or incidents
• Conduct security briefings, debriefings, training sessions, and annual refreshers
• Receive, control, store, transmit, package, and destroy classified materials according to government regulations
• Assist the Lead Custodian with classified-material audits and inventory compliance
• Administer DISS, NBIS, and Access/Portal Commander activities, including personnel security clearances and visit requests
• Maintain visitor control functions and verify visit authorization requests
• Investigate and report security incidents, support mitigation strategies, and assist with corrective-action documentation
• Maintain records according to security manuals and procedures

Security Analyst – Industrial Security Analyst 1

• Support the Air National Guard Decision Support System (ANGDSS) under the Air National Guard Web Tools and Cloud Support Services (AWTCSS) Contract
• Conduct information system security inspections, tests, and reviews of the RMF Information Assurance Package
• Help ensure ANG DSS maintains an Authority to Operate (ATO)
• Update artifacts and information in eMASS to validate security controls and assessments
• Develop Plan of Actions and Milestones (POAMs) for non-compliant items
• Maintain the formal information system security program, including security plans, cybersecurity policies, security control assessments, contingency plans, configuration management plans, incident response plans, risk management plans, vulnerability scanning, and vulnerability management plans
• Ensure software, hardware, and firmware comply with security configuration guidelines, including STIGs and SRGs
• Report cybersecurity events or configuration changes affecting authorization or security posture to the Authorizing Official and other affected parties
• Coordinate with the Air National Guard Readiness Center's RMF lead on eMASS-related tasks

Information Systems Security Analyst – ISSA

• Support the SIAM in executing the program’s information assurance and cybersecurity compliance strategy
• Coordinate security documentation, control implementation, ATO and cATO activities with ISOs and ISSOs
• Support FISMA compliance activities, annual self-assessments, security control assessments, and IG/OMB-driven audits
• Develop, review, and maintain SSPs, SARs, POA&Ms, and RARs
• Support RMF activities, including control selection, implementation tracking, assessment, and continuous monitoring
• Track POA&M remediation activities and ensure findings are documented, assigned, and closed on time
• Prepare materials and evidence packages for internal reviews, external audits, and compliance inspections
• Support the compliance posture of ICAM systems and track policy, procedure, and control updates
• Maintain continuous monitoring documentation and support monthly and quarterly compliance reporting
• Participate in control assessments, walkthroughs, and stakeholder interviews
• Maintain documentation repositories and audit trails for inspection readiness
• Communicate compliance status, risks, and action items to the SIAM and program leadership

Security Compliance Analyst

• Design, test, and implement secure operating systems, networks, and database products
• Conduct risk assessments and provide recommendations for application design
• Address security architectures, firewalls, electronic data traffic, and network access
• Use encryption technology
• Perform penetration and vulnerability analysis of security technologies
• Conduct information technology security research
• Prepare security reports for regulatory agencies as needed

Computer Systems Security Analyst 3

• Collaborate with contractor and DoD government system owners, system administrators, and developers to identify cyber risks
• Analyze applicable policies and develop comprehensive mitigation strategies
• Evaluate technical infrastructure and personnel dynamics to assess the full threat landscape, using insights from SMEs and engineers
• Guide clients through actionable remediation plans
• Deliver solutions through presentations, detailed white papers, and well-defined milestones
• Translate security concepts so clients can make informed decisions to secure critical DoD systems
• Act as an information security subject matter expert
• Broaden skills in DevSecOps and cloud security
• Perform technical evaluations and security control assessments in cloud-native and containerized environments
• Interface with engineering teams to align DevSecOps pipelines with cybersecurity policies
• Perform A&A and RMF and conduct risk assessments for federal government or DoD systems
• Generate artifacts, SSPs, POA&Ms, and SAPs and support continuous monitoring

Security Analyst jobs in Virginia