Security Analyst

• Plan, implement, and upgrade network and information security controls in accordance with industry standards
• Identify security needs and develop strategies to safeguard sensitive information
• Coordinate and maintain security architecture and applications, including ongoing infrastructure maintenance
• Conduct compliance monitoring, identify organizational deficiencies, and recommend or implement corrective measures
• Perform risk assessments, security evaluations, and testing of systems and equipment
• Develop, deploy, and manage firewalls and other security technologies
• Analyze system logs, configure alerts, and detect threats and anomalies
• Execute penetration testing and vulnerability assessments
• Create, implement, and track mitigation plans for identified vulnerabilities
• Monitor threats, evaluate indicators of compromise, and respond to security incidents
• Research, develop, and refine incident response tools and processes; participate in breach investigations and remediation
• Develop and deliver security awareness training for staff
• Maintain and refine Insitu’s System Security Plan to comply with NIST 800-171 standards
• Develop and update governance documentation, including policies, standards, and work instructions
• Provide security guidance to managers, directors, and executives

Information Security Analyst 3

• Support cybersecurity architecture, security engineering, and information assurance activities across federal information systems and cloud environments
• Assist with the design, implementation, assessment, and maintenance of cybersecurity solutions and security controls
• Support IT and cloud design, security, development, systems engineering, and implementation efforts throughout the system lifecycle
• Participate in federal Assessment and Authorization (A&A) and Authority to Operate (ATO) activities
• Support implementation and assessment of cybersecurity requirements in accordance with RMF and FedRAMP
• Review system architectures, technical documentation, and security requirements to identify cybersecurity risks, gaps, and improvement areas
• Assist with developing and maintaining security documentation for authorization and compliance activities
• Collaborate with system owners, engineers, developers, cybersecurity personnel, and other stakeholders to incorporate security requirements into system design and implementation
• Support security control assessments and remediation activities for vulnerabilities and compliance gaps
• Monitor and evaluate compliance with federal cybersecurity policies, processes, standards, and security requirements
• Provide cybersecurity analysis, recommendations, and technical support to project teams and government stakeholders
• Support continuous improvement initiatives to strengthen system security, compliance, and cybersecurity posture

Cybersecurity Analyst – Intermediate

• Own and mature Rover's vulnerability management program across corporate SaaS systems and AWS-hosted cloud applications
• Support day-to-day security operations, including monitoring, triage, and investigation of security alerts and incidents
• Build and refine Splunk searches, dashboards, and alerts for security monitoring and investigations
• Identify and implement AI and automation opportunities across security operations, vulnerability management, and compliance reporting
• Prepare documentation and evidence for audits and regulatory frameworks including SOX, PCI, GDPR, and CCPA
• Evaluate security plans, processes, and procedures and propose enhancements
• Develop analyses and reports on security incidents, including root cause and business impact
• Research emerging security trends and technologies
• Recommend security improvements to managers and senior leaders
• Promote security awareness and best practices across Rover

• Conduct forensic investigations on target endpoints using digital forensics tools
• Monitor, analyze, and respond to security events across the enterprise network using SIEM, NIDS, SOAR, endpoint protection, firewalls, DLP, email filtering, scanners, and PCAP tools
• Identify reportable security incidents and act as an incident handler
• Gather data and artifacts, perform analysis, write incident reports, report to management, and execute mitigating actions to contain and recover from cyber-attacks
• Monitor and respond to reports and threat intelligence from various sources
• Distribute threat advisories, vulnerability reports, and official directives to customers and leadership
• Participate in disaster recovery exercises and events
• Support operation and maintenance of security tools
• Support cyber security audits, assessments, data calls, and investigations
• Manage projects and processes independently with limited supervision
• Coach and review the work of lower-level professionals
• Mentor and train junior analysts
• Perform other assigned duties

Cyber Security Analyst III – Digital Forensics, Incident Response

• Threat model application designs and solutions and provide security risk assessments
• Provide technical expertise in software and network architecture across infrastructure, application, people, and process
• Collaborate with product managers, designers, and engineers to threat model and architect secure, resilient systems
• Identify solution trade-offs and recommend efficient designs meeting functional and security requirements
• Provide hands-on remediation guidance to development teams
• Champion internal security culture through developer training and internal CTFs
• Mentor software engineering teams in security best practices
• Help oversee the vulnerability management program
• Help engineers understand the impact of security events and vulnerabilities
• Build security tooling and automations to scale Product Security practices
• Drive security-focused architecture, patterns, and processes across engineering
• Integrate custom security tooling into engineering workflows
• Report to the Manager of Secure Design and collaborate with security teams and DigitalOcean

Security Analyst jobs in Washington

Information Security Analyst 3

Cybersecurity Analyst – Intermediate

Security Analyst

Cyber Security Analyst III – Digital Forensics, Incident Response

Senior Security Analyst