Cybersecurity Analyst

Fusion Technology • Washington, DC

1d • Onsite

About The Position

The Cybersecurity Analyst assists the Customer in researching and enforcing technical cybersecurity compliance for the Agency’s systems. The role investigates system attributes such as encryption, vulnerability management, multi-factor authentication, and centralized logging and auditing. The analyst applies knowledge of relevant federal standards and technologies, provides technical summaries and input, and works with Security Assessment Teams (Red, Blue, and Purple) and the DCISO/CISO to identify noncompliant systems and potential vulnerabilities. The analyst also helps communicate remediation methods to personnel and stakeholders inside and outside the organization.

The position supports interpretation and implementation of federal cybersecurity requirements, audits and data calls, security assessments, incident response, and digital forensic investigations. It includes analyzing logs and threat intelligence, tracking vulnerabilities and remediation timelines, maintaining detailed records and evidence, and producing forensically sound images of data and electronic storage media when needed.

Requirements

• Active TS clearance.
• Bachelor’s degree from an accredited college or university in Cybersecurity, Information Technology, Computer Science, or a related field.
• At least 8 years of experience in a cybersecurity-focused role.
• Capability to conduct in-depth technical analysis, confirm compliance information, and maintain detailed records of actions, evidence, and communications.
• Experience assessing information systems for compliance with Federal cybersecurity policies, standards, and technical security requirements, including NIST guidelines, encryption, multi-factor authentication, vulnerability management, and centralized logging.
• Knowledge of vulnerability management processes, including identifying and analyzing system vulnerabilities, documenting security deficiencies, and developing remediation recommendations.
• Proficiency analyzing security logs, network traffic, and threat intelligence to identify anomalous activity, potential data exfiltration, indicators of compromise, and emerging threats.
• Experience supporting cybersecurity audits, security assessments, incident response, and digital forensic investigations, including evidence preservation, technical reporting, and coordination with cybersecurity teams and stakeholders.

Nice To Haves

• CompTIA CySA+ certification.
• CompTIA CASP+ certification.
• CompTIA PenTest+ certification.
• CompTIA SecurityX certification.
• EC-Council Certified Ethical Hacker (C|EH) certification.
• EC-Council Certified Incident Handler (C|IH) certification.
• GIAC GPEN certification.
• GIAC GCIH certification.

Responsibilities

• Research and enforce technical cybersecurity compliance of Agency systems.
• Investigate system attributes related to encryption, vulnerability management, multi-factor authentication, and centralized logging and auditing.
• Provide technical summaries and input on cybersecurity compliance data.
• Work with Security Assessment Teams (Red, Blue, Purple) and the DCISO/CISO to analyze systems, identify noncompliance and vulnerabilities, and help develop remediation methods.
• Assist with interpretation and implementation of Federal Government requirements for systems.
• Coordinate audits and data calls involving system data.
• Analyze logs to identify anomalous traffic and potential data exfiltration.
• Maintain working knowledge of system vulnerabilities and how they may be exploited.
• Interpret security guidance and technical requirements, and communicate them in a readable format to others.
• Help ensure current Federal Government security policies are followed and required documentation is provided.
• Assist with incident detection, isolation, remediation, and investigation when required.
• Participate in After Action Reviews of incident responses.
• Analyze threat intelligence to identify emerging threats and support proactive defense.
• Assist with vulnerability management notifications from OGAs, the Agency, and vendors; ensure applicable vulnerabilities are remediated and reported within required timelines.
• Produce, analyze, and interpret forensically sound images of data and electronic storage media when required or requested.
• Maintain detailed records of actions taken, evidence, and communications.

Benefits

• Best-in-class matching 401(k) program.
• Comprehensive healthcare plan through Cigna.
• Employer contribution to a health savings account.
• Vision and dental plans.
• Life insurance.
• Short- and long-term disability coverage.
• Personal leave.
• Paid certifications and training.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior