Top Cybersecurity Analyst jobs

Develop and troubleshoot SailPoint IdentityIQ solutions, including workflows, rules, plugins, lifecycle events, provisioning, approvals, access requests, auditing, governance, reports, dashboards, and integrations. The role requires Java, BeanShell, XML, SQL, Git, and IdentityIQ API expertise, along with production support, technical documentation, communication, and independent project execution in enterprise or regulated environments.

Supports cybersecurity and risk management for Department of Defense information systems. Executes NIST RMF and Assessment and Authorization processes, manages security incidents, analyzes threats and vulnerabilities, maintains compliance with federal and DoD standards, and supports classified and unclassified systems. Provides cybersecurity mentorship, participates in ATO and working-group meetings, and serves as a liaison with government stakeholders in a mid-level ISSO capacity.

Analyze software and firmware code, design documents, and requirements to identify security vulnerabilities and risks. Support code reviews, testing, security assessments, documentation, and technical diagrams while helping maintain secure systems. The role requires foundational cybersecurity knowledge, programming experience, vulnerability identification skills, a STEM bachelor’s degree, and Secret clearance. Preferred experience includes high-assurance and NIST/RMF assessments, static or dynamic code scanning, secure coding, cryptography, networking protocols, Rust, TS/SCI clearance, and DoDI 8570 certification.

Supports DoD cybersecurity compliance, RMF activities, continuous monitoring, ATO documentation, STIG reviews, vulnerability assessments, security audits, and remediation coordination. Uses Tanium and other approved tools for endpoint visibility, inventory, vulnerability identification, patch compliance, and tracking. Maintains eMASS records and works with ISSMs, ISSOs, system owners, and engineering teams to satisfy NIST and DoD security requirements.

Operates and improves cybersecurity tools, monitors and investigates alerts, supports incident response, vulnerability remediation, access control, security documentation, audits, and operational reporting. The role collaborates with IT teams, business stakeholders, vendors, and auditors while maintaining security technologies across endpoints, identities, email, cloud, networks, and data. It also supports phishing response, security awareness, policy development, and occasional after-hours incident response.

Supports DoD cybersecurity and IT acquisition activities by analyzing budgets and programs, developing acquisition strategies and contract documents, conducting market research, reviewing contracts for compliance, maintaining contract records, identifying process improvements, and preparing executive briefings on cost, schedule, performance, risks, and program status.

Provides senior acquisition and contract-management support for DoD cybersecurity and IT programs. Analyzes program, financial, and acquisition data; develops procurement strategies and contract documentation; supports multiple contracts and funding types; conducts market research; ensures FAR and DFARS compliance; manages contract records; and prepares executive briefings on cost, schedule, risks, and performance.

Performs cybersecurity monitoring, threat analysis, vulnerability scanning, forensic analysis, incident mitigation, and security infrastructure support for Air Force Reserve Command systems. Develops and maintains security policies, controls, tools, and risk mitigation strategies; conducts cybersecurity awareness training; and supports system protection against unauthorized access and cyber threats. The role requires active DoD Secret clearance, IAM Level II certification, and at least five years of technical cybersecurity analysis experience.

Supports security monitoring, incident response, vulnerability management, identity and access reviews, vendor risk documentation, compliance activities, phishing simulations, security training, and disaster recovery exercises under senior analyst supervision.

Designs and develops security solutions, automates Linux configuration and patching, remediates POA&M findings, and supports configuration management, system hardening, security assessments, and RMF documentation. The role works with ISSOs to maintain operational security and supports transitions from IATT to ATO. It requires significant Linux automation and cybersecurity compliance experience, DoD IAT II certification, U.S. citizenship, and Secret clearance with Top Secret/SCI eligibility.

Monitors security alerts and network traffic, investigates incidents, performs vulnerability assessments and penetration testing, manages security tools, supports audits and regulatory compliance, documents risks, and promotes security awareness. The role requires collaboration with IT teams, strong knowledge of security technologies and best practices, and occasional after-hours or weekend availability.

Supports security operations through alert monitoring, incident triage, evidence collection, log analysis, phishing investigations, vulnerability management, identity and access reviews, audits, compliance documentation, and security awareness activities. The role collaborates with IT and business teams to remediate vulnerabilities, maintain operational records, escalate incidents, and improve defensive processes across endpoint, cloud, network, identity, and application environments.

Supports cybersecurity governance and compliance across cloud and on-premises environments. Responsibilities include maintaining policies, validating security controls and vulnerability findings, preparing audit evidence, tracking remediation, conducting risk assessments, supporting access governance, and communicating security posture to leadership. The role also supports CMMC readiness, security awareness, incident documentation, and coordination with IT, Engineering, Program Management, and security leadership. An active Secret clearance must be obtained and maintained.

Performs initial response and triage for security incidents, classifies alerts using MITRE categories, distinguishes true from false positives, escalates significant compromises, communicates with clients when needed, and maintains alert-process documentation. The role requires SOC experience and cybersecurity certifications, with preferred experience in ServiceNow and managed service provider environments.

Supports cybersecurity data automation, RMF compliance, and sustainment analysis for a portfolio of systems. Develops dashboards, reports, data models, metrics, and documentation using Microsoft tools. Reviews eMASS packages, maintains cybersecurity controls, supports vulnerability remediation, and ensures security requirements are incorporated into system designs. Collaborates with distributed teams and stakeholders while analyzing complex cybersecurity datasets.

Provides technical expertise, installation, troubleshooting, sustainment, training, and customer support for VSAT satellite systems, Cisco networks, and deployable DoD C5ISR communications environments. The role requires extensive experience with Cisco routing and switching, satellite and RF communications, encryption devices, LAN/WAN networks, systems integration, testing, maintenance, and lifecycle sustainment. Candidates must hold a Secret clearance, support potential deployments, and demonstrate leadership across C5ISR requirements, testing, training, or operational support.

Integrates cybersecurity controls into software development lifecycles and DevSecOps programs. Conducts security assessments, RMF activities, vulnerability analysis, risk management, authorization support, and remediation tracking. Reviews architectures, code-scanning results, configurations, and software releases for security risks. Produces compliance documentation and executive briefings, supports incident analysis, collaborates with developers, mentors junior analysts, and participates in Agile and security working groups.

Protects regional IT and OT environments through security monitoring, incident response, vulnerability management, risk assessments, penetration-test remediation, compliance audits, and executive reporting. Owns cybersecurity tools, controls, playbooks, and compliance initiatives while partnering with global teams, third-party SOC providers, and business stakeholders. The role requires onsite work, cross-functional influence, and occasional international travel supporting cybersecurity standards including ISO 27001, TISAX, NIST, CMMC, and IATF 16949.

Performs cybersecurity audits and compliance assessments for complex information systems, applications, and industrial control environments. Develops RMF and FISMA documentation, evaluates vulnerabilities, STIG compliance, certification results, and security controls, and tracks remediation activities. Ensures adherence to Federal, DOD, and DLA policies while recommending technical and procedural improvements. The role also supports IA certification and accreditation, vulnerability analysis, and IT management activities using Microsoft tools and eMASS.

Monitor and investigate cybersecurity alerts, logs, incidents, and platform health across endpoint, network, and backup systems. The analyst will support gaming operations, maintain runbooks and audit documentation, develop monitoring automation, track security metrics, coordinate vendors, assist compliance efforts, and communicate risks and outcomes to leadership in a regulated 24/7 environment.

Conduct continuous security monitoring, Tier II helpdesk support, SIEM operations, vulnerability assessment coordination, threat hunting, incident analysis, and network traffic investigation across cloud and on-premises environments. Evaluate configurations, reconstruct attacks, integrate threat intelligence, and support SOC/NOC operations while following DoD policies and MITRE ATT&CK practices. The role requires collaboration with NOC teams, program management, and multiple work centers at a government customer site.

Supports classified information systems as an ISSO by maintaining RMF security documentation, implementing and assessing security controls, conducting audits and risk analysis, managing continuous monitoring, supporting configuration management, responding to incidents, and preparing for inspections. The role requires an active Top Secret clearance, ability to obtain a CI polygraph, cybersecurity certification, Windows hardening expertise, security tool experience, strong technical writing, on-site work, and occasional after-hours support.

Performs ISSO and cybersecurity duties for classified information systems, including RMF documentation, security control assessments, continuous monitoring, audits, risk analysis, configuration management, incident response, and inspection preparation. The role requires an active Top Secret clearance with SCI access and CI polygraph eligibility, IAT Level II certification, Windows hardening knowledge, familiarity with cybersecurity tools and STIGs, occasional travel, after-hours support, and on-site work in Northridge or Tucson.

Analyzes and remediates security threats using SIEM, EDR/XDR, anti-malware, vulnerability management, and forensic tools. Maintains security controls, policies, vulnerability programs, and reporting; performs assessments, penetration testing, phishing evaluations, and third-party risk reviews. Supports incident response, system hardening, access controls, cloud security, privacy assessments, audits, and security awareness initiatives while coordinating with IT, legal, vendors, and leadership.

Monitors security alerts and conducts end-to-end incident investigations, threat hunting, log and PCAP analysis, file analysis, and compromise investigations across Windows, Linux, network, and cloud environments. Documents findings, recommends mitigations, supports 24/7 security monitoring, and collaborates with forensics, threat intelligence, penetration testing, vulnerability management, and purple teams to improve security operations.