Top Cybersecurity Analyst jobs

Leads the Risk Management Framework lifecycle and enterprise cybersecurity compliance for Air Force financial management systems. Develops and assesses security controls, maintains SSPs, RARs, POA&Ms, and other authorization artifacts in eMASS and ITIPS. Conducts vulnerability and mission-impact risk analyses, coordinates remediation, prepares ATO decision packages, interprets DoD and Air Force cybersecurity policy, briefs leadership and Authorizing Officials, validates engineering changes, and mentors analysts and ISSOs.

Build automation and data tooling for Sales Engineering, support customer Proofs of Value, integrate and validate security data, and analyze vulnerabilities, controls, and attack paths. Own threat intelligence for go-to-market teams by tracking CVEs and active exploitation. Present findings to customers, support technical sales conversations, and collaborate with Product, R&D, and Research to improve detection and mitigation logic.

Conduct cybersecurity risk and vulnerability assessments for USSOCOM networks, systems, applications, and technology initiatives. Analyze security architectures, implement and monitor security controls, maintain Authorization to Operate documentation, and develop security policies and procedures. Evaluate network security products, validate design solutions, support NIST and CNSSI control compliance, maintain Assessment and Authorization packages, and advise stakeholders and senior management on risks and remediation.

Assist with Risk Management Framework accreditation packages and maintain Authorization to Operate certifications for networked systems and applications. Develop security and privacy documentation, manage records in eMASS, assess security controls and technical architectures, review STIGs and vulnerability scans, perform security assessments, audits, vulnerability testing, risk analysis, and breach investigations, and coordinate requirements with ISSOs and system managers.

Support Security Program Managers by designing and implementing compliance programs, configuring compliance platforms, liaising with clients and auditors, conducting tabletop exercises (incident response, business continuity), completing security questionnaires, training staff, and helping build risk management programs across cloud environments.

Analyzes software code and integrates security practices throughout the software development lifecycle. Develops software and scripts, performs testing, documents defects and security findings, reviews design documents and requirements, and applies secure development standards. The role uses static and dynamic assessment tools, supports DevSecOps and compliance processes, and may guide junior employees. A Secret clearance and high school diploma or GED are required.

Leads cybersecurity compliance and IT GRC initiatives, assesses security controls, manages audit findings and remediation, prepares audit and regulatory reports, supports external audits, maintains policies and risk documentation, delivers compliance training, and identifies emerging cybersecurity risks. Collaborates with IT, security, business teams, auditors, and regulators to strengthen the organization’s security posture.

Monitors and analyzes network, endpoint, application, server, and cloud activity to detect and respond to cybersecurity threats. Responsibilities include incident investigation and containment, patching, intrusion detection, log correlation, vulnerability mitigation, software security evaluation, security standards testing, audit coordination, cybersecurity training follow-up, and support for business continuity and disaster recovery activities.

Monitor and analyze cybersecurity alerts, perform vulnerability scans and forensic analysis, maintain security infrastructure and policies, research and implement mitigation strategies, develop security plans and training, and support incident response and system protection efforts for Air Force Reserve Command IT systems.

Investigate and identify cybersecurity threats using Tanium, Splunk, ArcSight, syslog, and related monitoring tools. Analyze indicators of compromise, configure incident detection and reporting, follow escalation workflows, recommend corrective actions, support security tool direction, and collaborate with engineering and cross-functional teams on technical planning and projects.

Lead cybersecurity monitoring, investigation, and incident response. Develop and enforce security controls and policies, perform vulnerability assessments, mentor junior staff, and partner cross-functionally to reduce risk and ensure compliance.

Protect the firm from cyber threats by leading threat program initiatives, implementing security capabilities, developing incident response/escalation procedures, performing vulnerability remediation (especially web apps), and applying risk assessment, intrusion detection/prevention, and counter-threat operations.

Perform technical cyber analysis and development including network reconnaissance, mapping, forensics, packet/traffic analysis, scripting, and briefings. Profile network security posture, document findings, and support cyber operations and penetration-testing activities.

Perform security monitoring, vulnerability testing, risk analysis and security assessments. Implement and upgrade security controls, establish protocols and requirements, manage IPS/IDS and other security tools, investigate breaches, and coordinate with vendors to remediate issues.

Perform vulnerability testing, risk analysis, security assessments, and monitor/analyze network traffic and security events. Implement and upgrade security solutions, establish security protocols and requirements, manage security tools, and coordinate remediation with vendors.

Ensure privileged access controls meet IAM standards across platforms; partner with governance to measure and report controls; define PAM requirements for technology partners; apply PAM best practices and modernization efforts; identify and remediate PAM risks; educate stakeholders; support audits and provide senior management reporting to reduce sustained risk.

Entry-level cybersecurity analyst responsible for coordinating with IT and government personnel to implement IAVM, patches, and STIGs; support ISSOs with NIST RMF A&A activities; perform security tasks per NISPOM, NIST SP 800-37, and DoDI guidance; and assist in safeguarding classified and unclassified information systems.

Support VA Health portfolio cybersecurity across projects: lead ATO/ATC activities, develop security/privacy artifacts, review controls against NIST SP 800-53, perform scans and remediation, update ServiceNow/CAM and GRC tools, prepare audit documentation, and coordinate with stakeholders to identify and mitigate risks while enabling agile application development and operations.

Produce and maintain cyber threat actor profiles and intelligence requirements, brief stakeholders up to the Board, integrate cyber risk methodologies, support threat detection with technical analysis, and develop intelligence-sharing relationships with critical infrastructure and financial partners.

Protect and defend DoD information systems by performing vulnerability analysis, RMF/STIG compliance, incident response, documentation (POA&M, System Security Plan), ATO support, and use of automated tools (SCAP, Nessus, ACAS) to ensure policy compliance and system restoration.

Serve as a Principal SOC Analyst supporting federal cyber missions. Requires 5+ years experience, technical training or degree, required IAT II/CSSP/GMON/SCCU certifications, active Top Secret/SCI clearance and ability to obtain a polygraph. Work onsite supporting SOC operations, threat monitoring, and incident response.

Perform hands-on digital forensics and malware analysis for an IC program: image and analyze storage and volatile memory, extract forensic artifacts across Windows/Linux/iOS/Android, reverse-engineer mobile devices and malware, use debuggers/disassemblers, and work within virtualized environments to detect kernel-level compromises and report findings.

Monitor, detect, and respond to cybersecurity alerts in a SOC environment. Analyze logs and threat intelligence, investigate incidents, follow escalation procedures, assist recovery, recommend hardening improvements, prepare reports, and support 24/7 shift operations protecting DoD information systems.

The Cyber Security Analyst ensures the security of information systems, analyzes threats, develops policies, and leads less-experienced team members.