Security Analyst

• Lead real-time monitoring, triage, and analysis of complex security events, providing verifiable assessments of threats and incident severity.
• Engineer and automate advanced detection use cases across DigitalOcean's cloud and corporate environments, leveraging deep knowledge of adversary TTPs to design and implement scalable alerting solutions.
• Develop, track, and report on key metrics for security monitoring effectiveness and incident response performance, using data to drive improvements.
• Own and evolve the security monitoring program strategy, ensuring alignment with evolving threat landscapes and business priorities.
• Work closely with Infrastructure Security Engineers to identify log sources, integrate, and maintain data pipelines (e.g., log sources, forwarders, parsing, enrichment).
• Perform proactive threat hunting and hypothesis-driven investigations and investigate anomalous activity to uncover hidden or emerging threats within DigitalOcean’s environments.
• Mentor and guide lower level analysts, reviewing escalated incidents and providing technical leadership during incident response.
• Coordinate threat analysis using historical data and architecture diagrams to identify attack vectors.
• Collaborate with multiple teams to close monitoring gaps and improve overall security.
• Optimize security tools and processes to reduce false positives, improve detection fidelity, and automate response workflows where appropriate.
• Lead the creation and maintenance of detailed playbooks, runbooks, and documentation to standardize detection and response efforts.

Senior Security Analyst

Threat Intelligence Specialist

• Support intelligence efforts for global operations, travel security, data center security, executive protection, and market expansion initiatives.
• Monitor and assess global events including armed conflict, terrorism, political instability, sanctions, civil unrest, organized crime, regional escalation, and infrastructure disruption, translating developments into actionable business risk assessments.
• Produce strategic, operational, and tactical intelligence products including forecasts, executive briefings, travel risk assessments, crisis updates, heat maps, geospatial overlays, dashboards, and early warning alerts.
• Help build, integrate, and maintain intelligence collection pipelines using open-source intelligence, commercial intelligence feeds, geospatial data, proprietary sources, and third-party intelligence platforms.
• Continually improve intelligence workflows, alerting mechanisms, and analytical tooling.
• Partner cross-functionally with Global Security, Legal, Supply Chain, Strategy, Infrastructure, and business teams to operationalize intelligence and support risk-informed decision making.
• Conduct post-incident analysis and lessons-learned reviews following geopolitical events, operational disruptions, or security incidents.
• Contribute to best practices, technical standards, and scalable processes for geopolitical and operational threat intelligence.
• Support relationships with external intelligence vendors, industry peers, academic institutions, and government or law enforcement partners, where appropriate.
• Share domain knowledge, and contribute to continuous improvement of the team.

Senior Threat Intelligence Specialist, Protective and Geopolitical Intel

• Use technical knowledge and analytical mindset to support clients
• Research, develop, and test data methodologies
• Generate cross-functional solutions through analysis and visualization of large data sets
• Present data findings and recommendations to clients
• Establish quantitative and qualitative metrics for financial or trade analysis
• Grow communication and technical skills by creating data-centric solutions

Financial Intelligence Data Analyst, Mid

• Conduct investigative research and intelligence analysis in support of financial crime investigations for U.S. Government, law enforcement, and international partners.
• Analyze individuals, corporate entities, transactions, and financial networks using Bank Secrecy Act (BSA) data, government and commercial data sources, open-source intelligence (OSINT), and law enforcement systems to develop actionable financial intelligence.
• Identify patterns, anomalies, and typologies, and indicators of money laundering, terrorist financing, proliferation financing, cyber-enabled crime, sanctions evasion, and related illicit activity.
• Evaluate large and complex datasets to uncover emerging risks, financial crime trends, and relationships among individuals, entities, accounts, and transactions through network and link analysis.
• Develop clear, accurate, and insight-driven intelligence products, reports, and briefings that support operational decision-making and investigative outcomes.
• Produce strategic analysis on financial crime methodologies, networks, and evolving threat landscapes for policymakers, regulators, and law enforcement stakeholders.
• Communicate analytical findings effectively to technical and non-technical audiences through written products, presentations, briefings, and visualizations.
• Ensure all analytical outputs are accurate, defensible, timely, and aligned to mission priorities.

Senior Financial Intelligence Analyst – Consultant

• Maintain and manage integrated project plans, schedules, milestones, dependencies, deliverables, risks, issues, action items, and performance metrics across multiple cybersecurity assessment and authorization projects.
• Coordinate and support RMF, A&A, and ATO activities by working with ISSOs, system owners, security teams, government stakeholders, and assessors to track assessments, findings, remediation efforts, and authorization package progress.
• Prepare, maintain, and review cybersecurity documentation, including Security Assessment Reports (SARs), Risk Assessment Reports (RARs), Security Authorization Packages (SAPs), ATO letters, waiver memoranda, SOPs, templates, briefing materials, and other program deliverables.
• Develop executive-level reports, dashboards, status updates, and presentations that communicate project health, schedule performance, risks, issues, milestones, and authorization activities.
• Facilitate meetings, develop agendas and briefing packages, document decisions and action items, and coordinate follow-up activities with program, security, and customer stakeholders.
• Ensure project and security documentation complies with organizational, regulatory, and cybersecurity requirements and is maintained accurately throughout the project lifecycle.
• Analyze program performance, provide recommendations to leadership, track key performance indicators, and support strategic planning and decision-making.
• Identify and implement process improvements, documentation standards, and best practices to enhance program execution and cybersecurity authorization activities.
• Draft and maintain official correspondence and customer-facing communications supporting authorization, compliance, and program management efforts.
• Provide ad hoc project, program, cybersecurity, and administrative support to meet evolving mission, customer, and contract requirements.

Cybersecurity Program Analyst

• Support the SCRA Lead in executing Twilio's global security regulatory strategy
• Independently interpret complex and ambiguous regulatory frameworks and provide structured outputs
• Support the development and maintenance of regulatory repositories and systems of record, ensuring accuracy and audit readiness
• Execute and continuously improve the Cyber Regulation Intake & Triage process in partnership with Legal
• Map regulatory requirements to internal control frameworks, identifying gaps
• Develop regulator-ready and high-quality artifacts, including evidence mappings and control narratives
• Identify, analyze, and escalate regulatory risks and audit obligations
• Partner cross-functionally with Legal, Public Policy, R&D, Security, Product, Sales, and Risk teams

Security Compliance and Regulatory Affairs Analyst

• Designing new research projects within an established research area, scoping research questions, and managing collaborators (including GU student research affiliates) with limited additional supervision from Research Lead/Research Fellow.
• Authoring and coauthoring written publications with limited ongoing supervision of Research Lead/Research Fellow.
• Assisting Research Fellows in ongoing project management tasks like coordinating internal reviews, convening project brownbags, ensuring timeline compliance, and navigating the publications process.
• Collaborating with Research Fellows, other Research Analysts (including Data Research Analysts and Sr. Research Analysts), Data Scientists, and Center leadership to design research proposals and execute resulting research products.
• Providing research support such as compiling literature reviews, conducting open-source research and analysis, collecting and annotating data, and writing and editing.
• Developing and delivering presentations and briefs for policy-making audiences on topics related to emerging technologies, specifically those reflected in CSET Lines of Research and associated policy considerations.
• Designing research plans for data-focused analytic tasks, such as identifying potential data sources; determining data quality management strategies; devising analysis plans within the constraints of project planning and timelines, and executing the research plan in coordination with more junior researchers.
• Generating data presentations and graphics suitable for reports, briefs and other CSET products with limited ongoing supervision of Research Fellows.
• Motivating, coaching and challenging colleagues to provide quality projects and advance their skill set.
• Attending DC briefings and events and providing summaries to other CSET team members.
• Monitoring trends and developments in CSET areas of interest and national security policy.
• Upholding CSET’s mission, vision and values.
• Contributing to CSET’s organizational development, including contributing to internal working groups, seminars, leading and coordinating professional development activities and discussions.

Senior Research Analyst, Security and Emerging Technology

• Conducting comprehensive insider-threat analysis, integrating behavioral, technical, and counterintelligence indicators
• Identifying, assessing, and elevating potential risks across HHS
• Providing and supporting briefings to senior departmental leaders and Operating/Staff Divisions
• Developing and maintaining trusted working relationships with HHS principals and key mission partners
• Collaborating with federal, IC, and departmental partners
• Producing high-quality analytic and operational insider-threat products

Senior Insider Threat Specialist – Intelligence Analyst 4

• Conduct all-source intelligence analysis, screening and vetting, identity resolution, network analysis, and risk assessments to identify foreign affiliations, malign foreign influence, counterintelligence concerns, technology transfer risks, and other threats to HHS programs, research, and supply chains
• Produce tailored intelligence products
• Provide briefings and decision-support to HHS leadership, acquisition officials, program managers, and security personnel
• Develop working relationships with key stakeholders to address evolving intelligence and security requirements
• Identify non-obvious relationships between individuals, organizations, foreign governments, talent recruitment programs, and entities of concern
• Monitor emerging threats
• Coordinate with Intelligence Community, law enforcement, and interagency partners
• Participate in working groups and interagency forums
• Provide actionable intelligence that supports the protection of HHS-funded research, sensitive information, and national security equities

Intermediate Screening and Vetting Analyst – Intelligence Analyst 3

• Design & Execute end-to-end cybersecurity third-party assessments for strategic and high-risk vendors, including questionnaire reviews, technical evidence validation, architecture reviews, cloud configuration analysis, IAM assessments, encryption and key management reviews, logging/monitoring validation, and vulnerability/penetration test interpretation.
• Produce repeatable processes that create clear, prioritized risk findings and remediation guidance tailored to vendor risk and business impact.
• Design, build, and maintain automated assessment capabilities: evidence collection scripts, API connectors, ETL pipelines, data validation routines, and integration points with TPRM/GRC platforms (Aravo, ServiceNow GRC, RSA Archer, OneTrust, etc.).
• Develop and deploy agentic AI components (e.g., automated evidence triage, document ingestion and extraction, risk-scoring assistants, remediation suggestion agents) while ensuring safe, auditable, and privacy-preserving behavior.
• Lead lean process improvement initiatives across the assessment lifecycle: map value streams, eliminate waste, reduce handoffs, optimize SLAs, and implement continuous improvement cycles to increase throughput and quality.
• Create and maintain technical assessment artifacts: standardized templates, evidence matrices, technical checklists, assessment playbooks, and scoring rubrics that support repeatability and auditability.
• Validate and tune automated scoring models and AI outputs; perform periodic calibration and manual reviews to ensure accuracy and reduce false positives/negatives.
• Collaborate closely with Procurement, Legal, Security Operations/CIRT, Privacy, and other business stakeholders to ensure technical assessment findings map to contractual requirements and incident response expectations.
• Support remediation verification and re-assessment - use automation to track evidence submission, validate fixes, and update risk status.
• Maintain strong documentation & processes to support change management of automation logic, AI agent behaviors, data mappings, integration schemas.
• Stay current on emerging attack techniques, supply chain threats, automation best practices, responsible AI controls, and lean methods; propose and implement improvements.

Senior Cybersecurity Third-Party Risk Analyst

• Patrol the firm’s networks, review security audits and logs, and regularly verify the cybersecurity controls in place as part of the firm’s Information Security Management System
• Participate in assessing the cybersecurity of the firm’s vendors and contractors as well as respond to client reviews of the firm’s cybersecurity posture
• Be prepared to respond nimbly and effectively to possible cyber incidents
• Provide incident investigation, handling and documentation; and ensure remediation steps timelines are understood
• Remain abreast of the latest cybersecurity news, including assessing the implications for the firm’s systems of newly-identified vulnerabilities
• Maintain expertise on the evolving tactics, techniques, and procedures of sophisticated malicious cyber actors
• Supports cybersecurity awareness program by explaining policies and best practices, developing training materials, and advising users on secure solutions to business problems

Cybersecurity Analyst

• Work remotely in support of a government contract for a client located in Washington, DC.
• Provide threat hunting capabilities.
• Collaborate with teams to enhance the security posture.

Threat Hunter

• Work remotely in support of a government contract for a client located in Washington, DC.
• Collaborate with teams to generate reports and analyze threats.
• Utilize threat intelligence for technical analysis of enterprise assets.
• Create and present Cyber Threat Intelligence products and white papers to senior leadership.

Cyber Intelligence Analyst

• Work remotely in support of a government contract for a client located in Washington, DC.
• Provide risk and vulnerability analysis.
• Conduct security assessments and scanning.
• Collaborate with teams to address vulnerabilities and improve security measures.

Risk and Vulnerability Analyst

• Analyzing and correlating large data sets to uncover novel threats and attack techniques
• Collaborating with data science, threat research, and cyber defense control teams
• Developing and documenting new and innovative threat hunt hypotheses

• Analyze client environments to identify vulnerabilities and weaknesses in system architecture, configurations, and user access controls.
• Implement technical safeguards, encryption protocols, and secure configurations to ensure compliance with security best practices and regulatory requirements.
• Maintain secure computer networks and systems to protect against unauthorized access, malware, and other cyber threats.
• Manage anti-malware solutions, conduct scans, and lead remediation efforts for identified threats.
• Configure, monitor, and improve vulnerability management and incident response processes across multiple environments.
• Perform regular security assessments, audits, and penetration testing to evaluate system resilience.
• Participate in configuration and change management processes to ensure system integrity and documentation accuracy.
• Respond to and investigate security incidents, providing root cause analysis and recommendations to improve system defenses.
• Work in collaboration with internal teams and client representatives to align systems security with business and technical goals.
• Provide expert input on IT security strategies and project planning, especially in client onboarding and environment transitions.
• Participate in SecOps on call rotation.

• Conducting all‑source analysis
• Providing and supporting briefings to senior personnel
• Developing effective working relationships with HHS principals and addressing their intelligence requirements
• Identifying emerging risks within the assigned portfolio
• Coordinating and collaborating with federal partners
• Participating in relevant working groups and interagency meetings
• Performing tasks common to an intelligence analyst position, such as delivering briefing support and producing tailored intelligence products

Pharmaceuticals, Drugs, and Biotechnology Specialist – Intelligence Analyst 3

• Assist with the development and execution of test plans and procedures for telecommunications priority services
• Support testing in wireline, wireless, IP, LTE, and emerging 5G environments under senior engineer guidance
• Document test results, observations, and issues for review by senior technical staff
• Help prepare technical reports and engineering documentation
• Participate in meetings and technical discussions with internal and external stakeholders
• Assist with Operations, Administration, Maintenance, and Provisioning (OAM&P) documentation and coordination activities
• Support review and analysis of proposed carrier implementations and operational processes
• Help prepare program documentation, presentations, and technical summaries
• Assist with cybersecurity documentation and compliance requirements for telecommunications systems
• Support the development and maintenance of security controls and cybersecurity artifacts
• Participate in security assessments, vulnerability reviews, and risk documentation activities under supervision
• Help maintain Interconnection Security Agreements (ISAs) and ATO-related materials

Telecommunications, Cybersecurity Analyst

Incident Response Analyst

• Lead and conduct comprehensive host forensics, network forensics, log analysis, and malware triage to support incident response investigations.
• Create and enhance scripts, tools, and methodologies to automate and improve our incident investigation processes.
• Provide leadership and mentorship to the incident response team, acting as a resource and guide for other team members.
• Partner with multiple internal and external organizations. Draft detailed reports, assign remediation actions, and implement improvements.
• Develop and present comprehensive reports, training sessions, and presentations for both technical and non-technical audiences.
• Participate in and help conduct tabletop exercises and incident simulations to ensure readiness.
• Collaborate with the Adobe Threat Hunting Team to conduct proactive and iterative hunts through cloud and enterprise networks, endpoints, and datasets to detect malicious or suspicious activities that have evaded existing detection tools.

Staff Cyber Incident Response Engineer

• assess threats to ProMedica’s information technology resources and data
• develop policies, processes and procedures related to a comprehensive security program
• ensure compliance with IT security policies
• review security logs for suspicious activities
• investigate security incidents and upgrades
• perform risk assessments
• available for rotational, on-call 24/7 support

Security Analyst jobs in Washington

See all jobs on JobTailor

Senior Security Analyst

Senior Threat Intelligence Specialist, Protective and Geopolitical Intel

Financial Intelligence Data Analyst, Mid

Senior Financial Intelligence Analyst – Consultant

Cybersecurity Program Analyst

Security Compliance and Regulatory Affairs Analyst

Senior Research Analyst, Security and Emerging Technology

Senior Insider Threat Specialist – Intelligence Analyst 4

Intermediate Screening and Vetting Analyst – Intelligence Analyst 3

Senior Cybersecurity Third-Party Risk Analyst

Cybersecurity Analyst

Threat Hunter

Cyber Intelligence Analyst

Risk and Vulnerability Analyst

Threat Hunter

Cybersecurity Analyst

Pharmaceuticals, Drugs, and Biotechnology Specialist – Intelligence Analyst 3

Telecommunications, Cybersecurity Analyst

Staff Cyber Incident Response Engineer

IT Security Analyst II