Security Analyst

• Perform information security risk analysis and risk management processes and technologies
• Provide research and operational support to teams within Information Security Management
• Work with cross-functional teams for several initiatives
• Help with reporting and metrics
• Assisting with central intake, triage requests, and tickets

Information Security Support Analyst I

• Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
• Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
• Prepare, maintain, and review cybersecurity documentation, including Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Security Authorization Packages (SAPs), ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
• Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
• Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
• Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
• Analyze program performance, provide recommendations to leadership, track key performance indicators, and support strategic planning and decision-making.
• Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
• Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
• Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.

Cybersecurity Program Analyst

• Respond and perform analysis on security alerts and incidents.
• Support technical investigations of complex or high-severity security threats or incidents.
• Coordinate information security incident response with SNHU's Information Security Incident Response Plan.
• Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents.
• Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts.
• Help perform investigations in complex or high-severity security threats or incidents.
• Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Review and help implement standard operational processes for handling common incident types.
• Demonstrate a deep source of ethics, integrity, and confidentiality.
• Can remain calm and function at the highest level during a crisis.

Information Security Analyst I

• Formalize and deliver security product tuning requests to improve detection capabilities and overall efficiency
• Develop and maintain incident response use incidents, knowledge base articles, and other relevant documentation
• Coordinate basic forensics activities as needed
• Conduct after action reviews on high impact and otherwise noteworthy incidents to identify process and human capital improvements
• Aid in onboarding and mentoring new team members
• Drive and Implement continuous improvement, open communication, and sharing of knowledge
• Assist with creation, review, and upkeep of internal documentation
• Facilitate reasonable out-of-hours communications such as company email and occasional SOC operations related phone calls to resolve escalated issues
• Actively influence team collaboration, cross-training, and documentation
• Act as a primary subject matter expert for one or more security products
• Act as initial escalation point for complicated or sensitive work
• Identify and resolve opportunities to automate repetitive tasks
• Proactively propose improvements for how to reduce risk and potential future incidents
• Maintain high-level of expertise with products in use and the ability to quickly familiarize with related technologies

Cybersecurity Analyst

• Plan, implement, upgrade, or monitor security measures for the protection of computer networks and information
• Assess system vulnerabilities for security risks and propose and implement risk mitigation strategies
• Ensure appropriate security controls are in place that will safeguard digital files and vital electronic infrastructure
• Respond to computer security breaches and viruses

Information Security Analyst III

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond.
• Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.
• Looking for a candidate currently living in the eastern time zone (EST)

Security Analyst – Mid-Atlantic region

• Own and maintain the System Security Plan (SSP) and Plan of Action & Milestones (POA&M) for all CUI-scoped systems; always keep documentation audit-ready.
• Assess all 110 NIST SP 800-171 practices for implementation and effectiveness; map existing controls (Wazuh, ThreatDown, Tenable, ManageEngine, AD GPOs, SnipeIT) to CMMC requirements, identify gaps, and drive remediation.
• Maintain the organizational risk register; support ongoing Risk Management Framework (RMF) processes and report risk posture to the CISO.
• Lead preparation for CMMC Level 2 assessments — build evidence packages, coordinate with the C3PAO, and manage assessor requests and findings.
• Develop and maintain cybersecurity policies, procedures, and standards aligned to CMMC, DFARS, SOC 2, and GDPR; ensure version control and staff acknowledgment records are maintained.
• Define, track, and report security metrics and KPIs to the CISO and non-technical stakeholders including legal, contracts, and business development teams.
• Support contract teams with DFARS clause requirements, cybersecurity representations, and customer security questionnaires.
• Conduct vendor and third-party risk assessments; maintain supplier risk documentation.
• Manage the security awareness training program and phishing simulations; maintain completion records per CMMC requirements.
• Monitor SIEM for security events and alerts relevant to CUI systems; write and tune detection rules; triage and escalate incidents; produce post-incident reports with compliance impact assessment. Leverage audit log aggregation to satisfy CMMC AU (Audit & Accountability) control evidence requirements.
• Monitor EDR alerts for CUI-scoped endpoints; investigate detections and coordinate response with IT.
• Work with IT to ensure vulnerability findings are remediated within CMMC-required timeframes, track and report on remediation status.
• Leverage MDM and Active Directory to enforce device compliance, GPO-based security baselines, and access control policies across CUI-scoped endpoints.
• Use asset inventory as the authoritative hardware/software asset register for CMMC system boundary documentation; keep it current and audit ready.
• Conduct periodic access control audits; enforce least-privilege across AD, SSO, and SaaS tooling handling CUI.

Security Analyst – ISSO

• operationalizing the Threat Intelligence Platform (TIP)
• tracking priority threats
• delivering actionable, detection‑driven intelligence to security teams and leadership
• identifying, analyzing, and tracking cyber threats that may impact the organization
• collecting intelligence from a wide range of internal and external sources
• analyzing and contextualizing threat intelligence
• supporting security operations through actionable insights
• monitoring and analyzing intelligence from commercial, industry, and OSINT sources
• maintaining and using Threat Intelligence Platforms (TIP)
• integrating intelligence across security tools
• collecting, enriching, and managing actionable IOCs
• providing real‑time intelligence context during investigations and incidents
• responding to ad hoc and time‑sensitive intelligence requests from stakeholders
• producing and delivering intelligence reports and briefings for technical and non‑technical audiences

Cyber Threat Intelligence Analyst

• Monitor, tune, and triage alerts across the SIEM platform, escalating confirmed incidents per established runbooks
• Manage the vulnerability management lifecycle— including scanning, prioritization, remediation tracking, and executive reporting
• Support endpoint security, email security, and network monitoring tools; identify gaps and recommend configuration improvements
• Conduct periodic threat hunting activities and contribute to the development of detection rules and playbooks
• Participate in incident response activities including containment, eradication, and post-incident reviews
• Support ongoing SOC 2 Type II compliance efforts, including evidence collection, control testing, and coordination with external auditors
• Assist with NIST CSF assessments — mapping current controls to framework functions and identifying gaps for remediation
• Maintain and update security policies, standards, and procedures in collaboration with senior team members
• Conduct periodic security risk assessments and contribute findings to the organization risk register
• Track remediation efforts for identified risks and control deficiencies through to closure
• Partner with IT, Engineering, and business stakeholders to embed security best practices into day-to-day operations
• Assist in security awareness initiatives and provide guidance to staff on security topics
• Prepare clear, concise reporting on security metrics, vulnerability status, and compliance posture for management

Information Security Analyst

• Lead Incident Response efforts for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery.
• Perform threat hunting across endpoints, networks, and cloud workloads to proactively identify indicators of compromise, emerging threats, and control gaps.
• Conduct cloud incident response for AWS, Azure, and GCP, and other cloud environments including Kubernetes and containerized workloads, performing log analysis, identity compromise investigations, and workload forensics.
• Drive product security incident response, collaborating with engineering teams to analyze potential exposure to vulnerabilities, exploits, and security flaws in NVIDIA products.
• Perform digital forensics and malware analysis to support investigations and root cause analysis.
• Develop and optimize security orchestration and automation playbooks in partnership with Security Engineering to accelerate detection and response.
• Build and refine detections and defense strategies based on threat models and attacker behaviors across cloud, identity, endpoint, and product telemetry, using frameworks such as MITRE ATT&CK to map adversary tactics and enhance detection coverage.
• Provide guidance to engineering and business teams on secure design and incident handling standards and contribute to security policies, standards, and metrics to continuously improve NVIDIA’s security posture.

Cyber Security Analyst

• Assist the ISSO/SSPO in interfacing with federal staff, contractors, and business partners to execute information security aspects of the agency's CIPSEA obligations, IT modernization, and cloud migration efforts.
• Support Security Assessment and Authorization (SA&A) activities including agency-hosted, contractor-hosted, cloud-hosted, and FedRAMP SA&As; assist with interpretation of regulations and policy guidance.
• Develop, track, and update Plans of Action and Milestones (POA&Ms) for identified vulnerabilities and risks; report remediation status monthly.
• Prepare and maintain System Security Plans (SSPs) in accordance with NIST SP 800-18 and NIST SP 800-53.
• Conduct and document Risk Assessment Reports (RARs) consistent with NIST SP 800-30 and applicable agency policies.
• Support FISMA reporting to the Department of Homeland Security and OMB; prepare gap reports of agency practices against evolving federal, HHS, and agency requirements.
• Assist with Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) in accordance with HHS policy and OMB M-03-22.
• Prepare weekly project management/status reports and monthly RMF status reports for the COR and Program POC.
• Develop and maintain reusable templates, standard operating procedures (SOPs), and process documentation (e.g., SSP templates, risk assessment templates, process flow diagrams).
• Coordinate with agency Security, Business, and Technical Stewards; provide stakeholder advisory support and training as required.
• Support EPLC security reviews, IT acquisition security reviews, and security governance coordination activities.
• Assist in applying CIPSEA oversight in coordination with the agency Confidentiality Officer.
• Maintain compliance with all agency security training requirements including annual Security Awareness Training (SAT) and role-based training (RBT).

RMF Cybersecurity Analyst

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

• Work closely with Product Owners, other ISSOs, ISSMs, and engineering and infrastructure staff to provide guidance on the implementation of security policies, standards, and procedures.
• Analyze new or updated security requirements, collaborate with stakeholders, and develop responses that are clear and accurate.
• Support the review and update of ATO artifacts such as System Security Plans, Information System Contingency Plans, Configuration and Change Management Plans, Incident Response Plans, Privacy Impact Analyses, and more.
• Interpret security risk assessments, review security scan results, assess security vulnerabilities, and support the development and remediation of vulnerability and compliance issues via Plans of Action and Milestones (POA&Ms).
• Support the development and implementation of design documentation.
• Work with engineering and infrastructure personnel to document remediation for vulnerabilities and non-compliance issues.
• Analyze and interpret agency security requirements and provide governance communication to non-security personnel.
• Collaborate with product teams, ISSOs, and other stakeholders in support of continuous monitoring and ATO efforts.
• Conduct vulnerability assessments and monitor systems, networks, databases, and Web-based assets for potential system breaches.
• Recommend and take the lead on implementing changes to enhance security systems, prevent unauthorized access, and help mitigate security vulnerabilities.
• Respond to alerts from information security tools.
• Report, investigate, and resolve higher-level security incidents.
• Respond to security tool outages and degradations in service, tune security rules and alerts, and set up/maintain security tool dashboards and reporting.
• Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach.
• Ensure compliance with regulations and privacy laws.
• Conduct research to identify new attack vectors.
• Educate and communicate security requirements and procedures to all users and new employees.
• Recommend process improvements to the information system for risk mitigation.
• Support continuous improvement and security automation practices to strengthen the program’s overall security posture.
• Conduct audit log reviews, present findings, and plan for investigation or remediation activities.
• Perform periodic user and privileged access reviews.

Lead Information Security Analyst

• Acting as an appointed Information System Security Officer (ISSO) for IC cyber systems being developed by the engineering team
• Reporting, documenting, and briefing the status of systems under development, while assuring their successful and timely progression through the clients’ Risk Management Framework (RMF)
• Providing clear justification satisfying all applicable security control implementation as specified by the IC, AO, or NIST-800-53, rev 4 rev 5
• Authoring System Security Plans (SSP) and System Security Test Plans (SSTP)
• Conducting self-assessments of all systems under development
• Analyzing security controls and the impacts the changes would have on the environment
• Preparing for and assisting with formal risk assessments conducted by the AO’s designated Security Control Assessors (SCA) while acting as a member of the security assessment test team
• Ensuring the remediation of any findings assigned to engineering as documented in the Security Assessment Report (SAR) and its Plan of Actions and Milestones (PO&AM)
• Documenting and defending reasoning when waivers are sought, or non-standard remediation solutions are requested for specific security controls
• Assisting with the transition of systems granted an ATO to the Operations branch and the assignment of an operations ISSO
• Researching remediation options for vulnerabilities identified for systems under development or already in production under an ATO

Cybersecurity Analyst – Risk Management Framework, TS/SCI w/ Polygraph

Threat Intelligence Specialist

• Provide counterintelligence (CI) and cyber threat protection to Northrop Grumman's intellectual property, networks and sensitive data against adversaries.
• Perform daily in-depth analysis of current network and host based threat activity.
• Assess trends developing in the future and monitor CI portals.
• Liaison with Defense Industrial Base and government peers to enhance the protection of the Northrop Grumman Managed Network (NGMN).
• Identify and counter sophisticated and varying cybersecurity and cyber threats across the NGMN.

Security Analyst jobs in Maryland

See all jobs on JobTailor

Information Security Support Analyst I

Cybersecurity Program Analyst

Information Security Analyst I

Cybersecurity Analyst

Information Security Analyst III

Security Analyst – Mid-Atlantic region

Security Analyst – ISSO

Cyber Threat Intelligence Analyst

Information Security Analyst

Cyber Security Analyst

RMF Cybersecurity Analyst

Cybersecurity Analyst

Lead Information Security Analyst

Cybersecurity Analyst – Risk Management Framework, TS/SCI w/ Polygraph

Senior Principal Cyber Intelligence Analyst