Security Analyst

• Provide information security consultation to improve awareness and compliance with Enterprise Information Security policy, processes and standards
• Interpret advanced data aggregation and data of information security risk exposure
• Develop and deliver Information Security Education Awareness and Training in accordance with the Enterprise Information Security Program standards
• Evaluate and interpret internal and Enterprise Information Security policies, processes and standards, and provide recommendations to incorporate them into scenario development
• Collaborate and consult with peers, colleagues, and managers to resolve issues and achieve goals
• Interact with internal customers and external customers as needed
• Scenario development, environment setup, and participant scheduling.
• Develop and deliver pre-exercise briefings and post-exercise debriefs.
• Conduct targeted training sessions to maximize participant learning and skill development.
• Serve as a primary point of contact for wargame participants, internal cybersecurity teams, and other stakeholders.
• Address inquiries regarding exercise objectives, logistics, and outcomes.
• Collaborate with internal cybersecurity teams and external experts.
• Design realistic, challenging, and relevant wargame scenarios (business-focused tabletop exercises).
• Base scenarios on current threat intelligence and organizational risks.
• Create engaging exercise materials, including rulebooks, scenario injects, and technical playbooks.

Senior Information Security Analyst – Wargame Facilitator

Threat Intelligence Specialist

• Provide high level security system analysis including proactive policy evaluation and tuning.
• Lead the research and resolution of complex and/or escalations issues, including technical troubleshooting calls with Customer/other Verizon teams.
• Manage complex changes and vendor interaction.
• Creation of security documentation, including policies, procedures, training documents playbooks and operations manuals.
• Liaise with Verizon and customer’s senior management and other Verizon teams on service improvement initiatives.
• Provide mentorship and team lead functions, including supervision of staff, escalation management, and performance appraisal contributions.

Public Sector Threat Hunter

• Create and write analytic intelligence reports regarding acquired public datasets
• Help evaluate new tools and datasets for integration into proprietary workflows or technology
• Craft finished analytical products incorporating text and graphics to convey complex concepts to senior executives and other decision-makers
• Identify, infiltrate, and monitor online communities of interest that are selling public data
• Develop new data-driven methodologies and efficiencies to enable core Pandion workflows
• Lead or support complex digital investigations
• Demonstrate adaptability and flexibility in real-time to meet shifting client or organizational demands

Senior Intelligence Analyst

• Monitor & Investigate: Actively monitor security dashboards, queues, and alerts from various sources (automated tools, escalated tickets) to detect potential threats.
• Incident Triage & Response: Conduct initial investigations into security alerts, perform rapid response actions like securing user accounts, and collect necessary log data for analysis.
• Escalate Effectively: Analyze findings to determine the scope and severity of incidents, resolving straightforward issues and escalating complex cases to Level 2 Analysts with clear, concise information.
• Security Tool Management: Review and implement authorized, routine changes to security tools, such as processing client exemption requests in the EDR or temporarily adjusting settings for testing.
• Collaborate with the Security Team: Work closely with fellow analysts and security engineers, sharing information, participating in team discussions, and contributing to a collaborative security environment.
• Engage with Users/Clients: Communicate professionally and clearly with end-users or clients to gather details about potential security issues, explain security procedures, and provide guidance during incident resolution.
• Liaise Across Departments: Interact effectively with other teams (e.g., Reactive Support, Client Strategy, NOC) to coordinate security responses and share necessary information.
• Document Actions: Maintain accurate and detailed records of investigations, actions taken, communications, and resolutions within ConnectWise.
• Provide Support: Offer timely and helpful support related to security inquiries, upholding a professional and customer-service-oriented approach in all interactions.

Security Analyst I

• Support the execution of access certification campaigns using SailPoint IdentityIQ (IIQ)
• Configure and launch certification campaigns based on documented procedures and guidance
• Monitor campaign progress and provide status updates to stakeholders
• Assist managers, application owners, and reviewers with certification-related questions
• Track campaign completion metrics and identify overdue certifications
• Generate certification reports and maintain audit documentation
• Escalate issues, exceptions, and access review concerns to appropriate teams
• Validate user and application data prior to campaign launches
• Document operational procedures and lessons learned
• Collaborate with Identity Management, Security, Compliance, and Business teams to ensure certification deadlines are met
• Support periodic audits and compliance activities related to access reviews

Cybersecurity IGA Operations Analyst

• Establish and implement system-wide information security requirements through comprehensive analysis of user, policy, regulatory, and resource demands
• Coordinate with customer organizations to define security programs, allocate resources, and identify organizational risks
• Support the maintenance and operation of the Security Technology Integrated Program (STIP) platform
• Ensure communications control and data retrieval functionality for transportation security systems
• Extract and analyze data from Transportation Security Equipment (TSE) to generate actionable security intelligence
• Develop and deliver security reports to stakeholders
• Facilitate information exchange between internal systems and other data sources within the transportation enterprise
• Monitor compliance with security policies and regulatory requirements
• Identify and mitigate security vulnerabilities and risks
• Collaborate with cross-functional teams to enhance security posture

Cyber Security Analyst II

• Support the Security Standards & Baselines (SSB) section within the Technology, Innovation, and Engineering (TIE) Office.
• Identify and implement solutions to enhance, streamline, and automate workflows.
• Promote awareness of security issues among management and ensure that sound security principles are reflected in organizational goals.
• Communicate complex security concepts to both technical and non-technical stakeholders, including senior leadership.
• Perform extensive research, analysis, and documentation of security threat vectors.
• Provide coaching, mentorship, and knowledge sharing to team members.
• Develop bulletins, alerts, advisories, and security configuration baseline documents aligned with Departmental policy and industry best practices.
• Ensure rigorous application of information security and information assurance policies and practices.
• Evaluate existing, emerging, and modified technologies to develop recommended security configuration baselines using trusted sources such as DISA STIGs, CIS Benchmarks, and vendor security guidance.

Cybersecurity Analyst – Security Standards, Baselines

• Use technical knowledge and analytical mindset to support clients
• Research, develop, and test data methodologies
• Generate cross-functional solutions through analysis and visualization of large data sets
• Present data findings and recommendations to clients
• Establish quantitative and qualitative metrics for financial or trade analysis
• Grow communication and technical skills by creating data-centric solutions

Financial Intelligence Data Analyst, Mid

• Perform information security risk analysis and risk management processes and technologies
• Provide research and operational support to teams within Information Security Management
• Work with cross-functional teams for several initiatives
• Help with reporting and metrics
• Assisting with central intake, triage requests, and tickets

Information Security Support Analyst I

• Conduct investigative research and intelligence analysis in support of financial crime investigations for U.S. Government, law enforcement, and international partners.
• Analyze individuals, corporate entities, transactions, and financial networks using Bank Secrecy Act (BSA) data, government and commercial data sources, open-source intelligence (OSINT), and law enforcement systems to develop actionable financial intelligence.
• Identify patterns, anomalies, and typologies, and indicators of money laundering, terrorist financing, proliferation financing, cyber-enabled crime, sanctions evasion, and related illicit activity.
• Evaluate large and complex datasets to uncover emerging risks, financial crime trends, and relationships among individuals, entities, accounts, and transactions through network and link analysis.
• Develop clear, accurate, and insight-driven intelligence products, reports, and briefings that support operational decision-making and investigative outcomes.
• Produce strategic analysis on financial crime methodologies, networks, and evolving threat landscapes for policymakers, regulators, and law enforcement stakeholders.
• Communicate analytical findings effectively to technical and non-technical audiences through written products, presentations, briefings, and visualizations.
• Ensure all analytical outputs are accurate, defensible, timely, and aligned to mission priorities.

Senior Financial Intelligence Analyst – Consultant

• Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
• Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
• Prepare, maintain, and review cybersecurity documentation, including Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Security Authorization Packages (SAPs), ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
• Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
• Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
• Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
• Analyze program performance, provide recommendations to leadership, track key performance indicators, and support strategic planning and decision-making.
• Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
• Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
• Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.

Cybersecurity Program Analyst

• Respond and perform analysis on security alerts and incidents.
• Support technical investigations of complex or high-severity security threats or incidents.
• Coordinate information security incident response with SNHU's Information Security Incident Response Plan.
• Support the incident response lifecycle and have the analytical mindset needed when it comes to escalated investigations and investigations into novel security incidents.
• Participate in incident containment and eradication activities like endpoint isolation, malware remediation, forensic analysis, malware analysis, community member interviews, and network traffic analysis.
• Work cross-functionally across ITS and all SNHU teams to provide support, guidance, and technical implementations where appropriate, to include triage, containment, and remediation when applicable.
• Analyze digital evidence to identify indicators of compromise, adversary activity, root cause, incident timelines, and attack vector(s).
• Conduct real-time monitoring of security events from multiple sources and use analytical and critical thinking skills to identify, triage, analyze, investigate, and escalate information security events and alerts.
• Help perform investigations in complex or high-severity security threats or incidents.
• Communicate with partners, in a non-technical manner, at all organizational levels as part of incident response and remediation activities.
• Review and help implement standard operational processes for handling common incident types.
• Demonstrate a deep source of ethics, integrity, and confidentiality.
• Can remain calm and function at the highest level during a crisis.

Information Security Analyst I

• Conduct technical analysis of network traffic to identify anomalies.
• Monitor and understand emerging threats.
• Report detected incidents to agency and work toward resolution.
• Develop detection signatures and test them for effectiveness.
• Identify and document network-based tactics used by attackers.

Threat Hunter

• Research and analyze open source and classified reporting to identify current and emerging threat trends.
• Document and report current and emerging threats that will exploit vulnerabilities of Department of Homeland Security stakeholders.
• Communicate, coordinate, share information, and work closely with customer components.
• Produce weekly, monthly, quarterly, and annual performance metrics reports.

Senior Cyber Threat Analyst

• Assist the client leadership with vulnerability management and incident response activities.
• Lead and manage Incident Response (IR) activities to include triage, investigating, interviewing, resolving, and reporting on events.
• Creating, updating, and/or revising the IR Playbook and IR Plan.
• Monitor, maintain and administer policies and rules within EDR and SIEM tools (e.g., Crowdstrike, Splunk).
• Support and develop reports during and after incidents, which include all actions taken to properly mitigate, recover and return operations to normal operations.
• Develop and implement defensive cyber best practice tactics, techniques, and procedures.
• Maintain Incident Ticketing tracking system and related tickets within Remedy or other tracking tools.
• Monitor and take action within multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., Tenable Security Center, IBM BigFix, SCCM), endpoint protection (e.g., antivirus, ATP), intrusion detection software and hardware.
• Manage and perform Splunk queries to examine and query log data from the Enterprise Logging as a Service system and perform log analysis.
• Ensure system and application logs are being sent to enterprise SIEM tool for log monitoring.
• Conduct and manage vulnerability scans using Tenable SC and/or Qualys.
• Analyze scan results, prioritize findings by risk and impact, coordinate with responsible parties for remediation and validate false positives.
• Interacting with GRC tool (e.g., CSAM) to perform daily/weekly vulnerability analysis.
• Creating and compiling weekly security metrics into dashboards and charts.
• Presenting vulnerability analysis to system admins, system owners, and leadership.

Security Analyst, Incident Responder

• Join a collaborative team of 8 multi-disciplinary science & technology, legal, and security professionals who are on a mission to advance the economic security priorities of OUSW(R&E) and the United States
• Shape the policy and enforcement landscape of U.S. economic security with respect to the OUSW(R&E) Critical Technology Areas and other technology protection priorities.
• Analyze new proposals for new U.S. regulations, including changes to U.S. or multilateral export controls.
• Participate in related interagency working groups and negotiate on behalf of OUSW(R&E).
• Manage CFIUS cases and export license applications, coordinating with other technical experts across the DOW to present analysis and recommendations
• Be entrepreneurial and self-motivated in identifying, analyzing, and addressing policy gaps, process inefficiencies, analytical tools, and bureaucratic roadblocks, so U.S. technology policy strikes the right balance between protection and promotion.
• Spend your time on areas of greatest interest and greatest mission impact.
• Grow your analytical and communication skills
• Learn from and support some of the most accomplished scientists and engineers in the world.
• Build relationships to ensure that the right technical expertise is brought to bear on the right technology policy processes.

Principal Scientist/Senior Economic Security Analyst

• Support Navy and DoD information systems through Cybersecurity (CS), Certification & Accreditation (C&A), and Risk Management Framework (RMF) activities.
• Perform security assessments and analysis, including IA controls validation, risk assessments, and risk mitigation planning.
• Serve as a Navy Qualified Validator (NQV), supporting system Accreditation & Authorization (A&A) efforts.
• Conduct system and network vulnerability analysis and support remediation and mitigation activities.
• Execute STIG assessments and manage RMF artifacts using automated STIG tools and eMASS.
• Support Security Test and Evaluation (ST&E) activities and document results.
• Develop and maintain RMF documentation, including SOPs, CONOPs, security plans, and POA&Ms.
• Support contingency planning, training, and testing related to system security.
• Provide expert guidance to system owners and stakeholders on cybersecurity compliance and vulnerability mitigation.

Information Security Analyst – Navy Qualified Validator

• GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk.
• Seeking a Security Analyst with a proactive mindset to prevent incidents rather than just respond.
• Collaborating as a team player and willingness to learn from constructive criticism to stay ahead of emerging threats and innovative threat actors.
• Looking for a candidate currently living in the eastern time zone (EST)

Security Analyst – Mid-Atlantic region

• Collaborate with the client to design, implement, and manage the Solution Development Lifecycle (SDLC)
• Develop and deliver lightweight data solutions to meet ISR needs
• Leverage expertise as part of a cross-functional team of data scientists, Agile SMEs, and more
• Ensure awareness and understanding of data modernization efforts
• Assist with Air Force ISR efforts in achieving analytic modernization towards Object-Based Production (OBP)

• Conducting threat investigations in Verizon’s most complex and critical network environments
• Coordinating with multidisciplinary teams across network organization to iteratively improve security controls and detection capabilities
• Conducting time-sensitive analysis during cyber investigations, including active threat investigation and forensic analysis
• Leveraging Verizon’s network telemetry to find indicators of compromise
• Developing expertise on the Verizon threat landscape using threat intelligence, network telemetry, and operational metrics to clearly communicate the threat landscape
• Analyzing malicious code, packet capture files, and forensic artifacts
• Analyzing log data to detect active threats within the network using knowledge of the current threat landscape, threat actor techniques, and Verizon’s network
• Identifying gaps in logging capabilities and develop and propose strategies to fill gaps
• Identifying and propose automated alerts for new and previously unknown threats
• Collaborate with teams across the Cyber organization to mitigate risk by testing, deploying, and developing investigative playbooks

Security Analyst jobs in Virginia

See all jobs on JobTailor

Senior Information Security Analyst – Wargame Facilitator

Public Sector Threat Hunter

Senior Intelligence Analyst

Security Analyst I

Cybersecurity IGA Operations Analyst

Cyber Security Analyst II

Cybersecurity Analyst – Security Standards, Baselines

Financial Intelligence Data Analyst, Mid

Information Security Support Analyst I

Senior Financial Intelligence Analyst – Consultant

Cybersecurity Program Analyst

Information Security Analyst I

Threat Hunter

Senior Cyber Threat Analyst

Security Analyst, Incident Responder

Principal Scientist/Senior Economic Security Analyst

Information Security Analyst – Navy Qualified Validator

Security Analyst – Mid-Atlantic region

Senior Intelligence Analyst

Senior Analyst, Threat Intelligence