Security Analyst

• Monitor, tune, and triage alerts across the SIEM platform, escalating confirmed incidents per established runbooks
• Manage the vulnerability management lifecycle— including scanning, prioritization, remediation tracking, and executive reporting
• Support endpoint security, email security, and network monitoring tools; identify gaps and recommend configuration improvements
• Conduct periodic threat hunting activities and contribute to the development of detection rules and playbooks
• Participate in incident response activities including containment, eradication, and post-incident reviews
• Support ongoing SOC 2 Type II compliance efforts, including evidence collection, control testing, and coordination with external auditors
• Assist with NIST CSF assessments — mapping current controls to framework functions and identifying gaps for remediation
• Maintain and update security policies, standards, and procedures in collaboration with senior team members
• Conduct periodic security risk assessments and contribute findings to the organization risk register
• Track remediation efforts for identified risks and control deficiencies through to closure
• Partner with IT, Engineering, and business stakeholders to embed security best practices into day-to-day operations
• Assist in security awareness initiatives and provide guidance to staff on security topics
• Prepare clear, concise reporting on security metrics, vulnerability status, and compliance posture for management

Information Security Analyst

• Lead Incident Response efforts for corporate, cloud, and product environments, including investigation, containment, eradication, and recovery.
• Perform threat hunting across endpoints, networks, and cloud workloads to proactively identify indicators of compromise, emerging threats, and control gaps.
• Conduct cloud incident response for AWS, Azure, and GCP, and other cloud environments including Kubernetes and containerized workloads, performing log analysis, identity compromise investigations, and workload forensics.
• Drive product security incident response, collaborating with engineering teams to analyze potential exposure to vulnerabilities, exploits, and security flaws in NVIDIA products.
• Perform digital forensics and malware analysis to support investigations and root cause analysis.
• Develop and optimize security orchestration and automation playbooks in partnership with Security Engineering to accelerate detection and response.
• Build and refine detections and defense strategies based on threat models and attacker behaviors across cloud, identity, endpoint, and product telemetry, using frameworks such as MITRE ATT&CK to map adversary tactics and enhance detection coverage.
• Provide guidance to engineering and business teams on secure design and incident handling standards and contribute to security policies, standards, and metrics to continuously improve NVIDIA’s security posture.

Cyber Security Analyst

• Assist the ISSO/SSPO in interfacing with federal staff, contractors, and business partners to execute information security aspects of the agency's CIPSEA obligations, IT modernization, and cloud migration efforts.
• Support Security Assessment and Authorization (SA&A) activities including agency-hosted, contractor-hosted, cloud-hosted, and FedRAMP SA&As; assist with interpretation of regulations and policy guidance.
• Develop, track, and update Plans of Action and Milestones (POA&Ms) for identified vulnerabilities and risks; report remediation status monthly.
• Prepare and maintain System Security Plans (SSPs) in accordance with NIST SP 800-18 and NIST SP 800-53.
• Conduct and document Risk Assessment Reports (RARs) consistent with NIST SP 800-30 and applicable agency policies.
• Support FISMA reporting to the Department of Homeland Security and OMB; prepare gap reports of agency practices against evolving federal, HHS, and agency requirements.
• Assist with Privacy Threshold Analyses (PTAs) and Privacy Impact Assessments (PIAs) in accordance with HHS policy and OMB M-03-22.
• Prepare weekly project management/status reports and monthly RMF status reports for the COR and Program POC.
• Develop and maintain reusable templates, standard operating procedures (SOPs), and process documentation (e.g., SSP templates, risk assessment templates, process flow diagrams).
• Coordinate with agency Security, Business, and Technical Stewards; provide stakeholder advisory support and training as required.
• Support EPLC security reviews, IT acquisition security reviews, and security governance coordination activities.
• Assist in applying CIPSEA oversight in coordination with the agency Confidentiality Officer.
• Maintain compliance with all agency security training requirements including annual Security Awareness Training (SAT) and role-based training (RBT).

RMF Cybersecurity Analyst

• Own the day-to-day security operations for a HIPAA-regulated, cloud-only environment
• Harden Microsoft security stack, run incident response, hunt threats, and build the security program
• Investigate alerts, tune detections, close gaps in Conditional Access, ensure compliance posture
• Manage and refine Conditional Access policies, administer Privileged Identity Management (PIM)
• Harden Exchange Online Protection and own email authentication projects
• Write and tune KQL queries in Microsoft Defender Advanced Hunting and triage alerts
• Implement Microsoft Purview information protection labels, DLP policies, and retention rules
• Execute posture improvement roadmaps with external Microsoft security partner

Cybersecurity Analyst

• Work closely with Product Owners, other ISSOs, ISSMs, and engineering and infrastructure staff to provide guidance on the implementation of security policies, standards, and procedures.
• Analyze new or updated security requirements, collaborate with stakeholders, and develop responses that are clear and accurate.
• Support the review and update of ATO artifacts such as System Security Plans, Information System Contingency Plans, Configuration and Change Management Plans, Incident Response Plans, Privacy Impact Analyses, and more.
• Interpret security risk assessments, review security scan results, assess security vulnerabilities, and support the development and remediation of vulnerability and compliance issues via Plans of Action and Milestones (POA&Ms).
• Support the development and implementation of design documentation.
• Work with engineering and infrastructure personnel to document remediation for vulnerabilities and non-compliance issues.
• Analyze and interpret agency security requirements and provide governance communication to non-security personnel.
• Collaborate with product teams, ISSOs, and other stakeholders in support of continuous monitoring and ATO efforts.
• Conduct vulnerability assessments and monitor systems, networks, databases, and Web-based assets for potential system breaches.
• Recommend and take the lead on implementing changes to enhance security systems, prevent unauthorized access, and help mitigate security vulnerabilities.
• Respond to alerts from information security tools.
• Report, investigate, and resolve higher-level security incidents.
• Respond to security tool outages and degradations in service, tune security rules and alerts, and set up/maintain security tool dashboards and reporting.
• Research security trends, new methods, and techniques used in unauthorized access of data to preemptively eliminate the possibility of system breach.
• Ensure compliance with regulations and privacy laws.
• Conduct research to identify new attack vectors.
• Educate and communicate security requirements and procedures to all users and new employees.
• Recommend process improvements to the information system for risk mitigation.
• Support continuous improvement and security automation practices to strengthen the program’s overall security posture.
• Conduct audit log reviews, present findings, and plan for investigation or remediation activities.
• Perform periodic user and privileged access reviews.

Lead Information Security Analyst

• Acting as an appointed Information System Security Officer (ISSO) for IC cyber systems being developed by the engineering team
• Reporting, documenting, and briefing the status of systems under development, while assuring their successful and timely progression through the clients’ Risk Management Framework (RMF)
• Providing clear justification satisfying all applicable security control implementation as specified by the IC, AO, or NIST-800-53, rev 4 rev 5
• Authoring System Security Plans (SSP) and System Security Test Plans (SSTP)
• Conducting self-assessments of all systems under development
• Analyzing security controls and the impacts the changes would have on the environment
• Preparing for and assisting with formal risk assessments conducted by the AO’s designated Security Control Assessors (SCA) while acting as a member of the security assessment test team
• Ensuring the remediation of any findings assigned to engineering as documented in the Security Assessment Report (SAR) and its Plan of Actions and Milestones (PO&AM)
• Documenting and defending reasoning when waivers are sought, or non-standard remediation solutions are requested for specific security controls
• Assisting with the transition of systems granted an ATO to the Operations branch and the assignment of an operations ISSO
• Researching remediation options for vulnerabilities identified for systems under development or already in production under an ATO

Cybersecurity Analyst – Risk Management Framework, TS/SCI w/ Polygraph

Threat Intelligence Specialist

• Provide counterintelligence (CI) and cyber threat protection to Northrop Grumman's intellectual property, networks and sensitive data against adversaries.
• Perform daily in-depth analysis of current network and host based threat activity.
• Assess trends developing in the future and monitor CI portals.
• Liaison with Defense Industrial Base and government peers to enhance the protection of the Northrop Grumman Managed Network (NGMN).
• Identify and counter sophisticated and varying cybersecurity and cyber threats across the NGMN.

Senior Principal Cyber Intelligence Analyst

• Produce ICD-203 compliant finished intelligence products for the customer.
• Conduct analysis of foreign malign influence on free and fair elections.
• Write and deliver high-quality analytic documents, summaries, issue papers, talking points, and briefings, including the use of Microsoft PowerPoint.
• Collaborate effectively within the IC structure and member organizations, ensuring alignment with their roles and capabilities in analysis, collection, and core enabling functions.
• Address intelligence priority topics and support intelligence information needs.
• Proactively manage tasks and meet short deadlines in a dynamic, fast-paced environment.
• Communicate complex data clearly to nontechnical customers through strong interpersonal and critical thinking skills.

Senior Intelligence Analyst

• Monitor day-to-day operations of the sensors (Suricata, Palo Alto, and Splunk) located at supporting customer's locations.
• Perform Enterprise Defense Countermeasure (DC) activities and coordination with other government agencies to record and prepare incident reports and analysis methodology and results.
• Monitor and analyze signature alerts from Intrusion Detection/Prevention Systems (IDS/IPS) for false positives.
• Provide technical enforcement of organizational security policies.
• Provide “tune-or-drop” recommendations towards the DC team’s Signature Lifecycle Review procedure.
• Provide insight to Detection and Response teams on signature functionality and providing signature tuning as needed.
• Communicate with customers and teammates clearly and concisely.
• Maintain current knowledge of relevant technology as assigned.
• Participate in special projects as required. Position may require evening, weekend or shift-work (depending on operational tempo).

See all jobs on JobTailor