Cybersecurity Analyst

RER SOLUTIONS, INC•Washington, DC

10d

About The Position

Do you want to work for a company that cares about you as a person, not just a number? For a company that provides outstanding leadership? For a company that offers exceptional benefits? RER Solutions, Inc., could be your new home. RER Solutions, Inc., is accepting resumes for a Cybersecurity Analyst who will support the organization's security posture through continuous monitoring, analysis, documentation, and coordination of security awareness, policy, and incident preparedness activities. The Cybersecurity Analyst role reviews threat intelligence and security notifications, investigates anomalies in access/activity logs, tracks security training compliance, maintains cybersecurity program artifacts, and helps drive periodic policy reviews and tabletop exercises.

Requirements

2+ years of experience in cybersecurity operations, GRC support, IT audit support, or a related security role.
Hands-on experience reviewing logs and alerts, documenting investigations, and escalating issues through defined channels
Working knowledge of security awareness training programs and tracking/reporting compliance metrics
Ability to create and maintain clear, audit-ready documentation (policies, procedures, evidence, and exercise artifacts)
Familiarity with common security frameworks and concepts (e.g., NIST CSF/800-171, CIS Controls) and basic risk management principles
Familiarity with ticketing/workflow systems and producing metrics for leadership reporting
Familiarity with threat advisories/feeds: CISA notifications and related vulnerability advisories
Experience with log review and reporting tools (platform-dependent), including secure communications access logs (e.g., Preveil)
Familiarity with security awareness training platforms and reporting dashboards
Experience with documentation and evidence repositories (e.g., SharePoint/Teams/knowledge base), spreadsheets, and templates
Strong written communication skills and attention to detail; comfortable coordinating across internal teams and external partners

Nice To Haves

Relevant certifications (one or more): Security+, CySA+, SSCP, GIAC (e.g., GSEC), or similar experience
Experience supporting tabletop exercises, incident response planning, or business continuity/disaster recovery exercises
Experience with secure collaboration/email platforms (e.g., Preveil) and access/activity monitoring
Experience working with government or regulated environments and consuming advisories from sources such as CISA

Responsibilities

Partner closely with IT, compliance, and business stakeholders, as well as external partners, to validate training and control activities
Escalate security concerns to management and any designated security lead to help ensure follow-through on corrective actions
Escalate findings to appropriate stakeholders and partners to ensure timely remediation and consistent security practices
Monitor and triage cybersecurity notifications and threat intelligence (e.g., CISA alerts); document analysis, perform research, and escalate items requiring action
Conduct periodic reviews of secure communications/access logs (e.g., Preveil) to identify anomalies; document findings, investigate indicators, and escalate as required
Review end-user security awareness training reports for completion and effectiveness; document results and escalate non-participation or high failure rates to management
Coordinate with partner organizations to validate equivalent end-user training is occurring; obtain, organize, and retain supporting documentation
Initiate and document periodic reviews of security policies and procedures; update policy documentation to reflect current controls, processes, and requirements
Plan, facilitate, and document periodic cybersecurity tabletop exercises; track lessons learned and follow-up actions
Organize and maintain evidence/artifacts supporting cybersecurity policy implementation and ongoing operational procedures (e.g., audit-ready documentation and process records)