Cybersecurity Analyst

JCS Solutions LLC•Bethesda, MD

19d•$90,000 - $130,000

About The Position

JCS Solutions is seeking a Cybersecurity Analyst to help protect critical federal systems. In this hands-on role, you'll support vulnerability management, threat monitoring, endpoint security, incident response, and remediation efforts. Working alongside cybersecurity and IT teams, you'll identify risks, investigate security events, and drive corrective actions. We're looking for a proactive cybersecurity professional who combines technical expertise with strong problem-solving and communication skills.

Requirements

US Citizenship is required. Candidates must be eligible to obtain and maintain a US security clearance.
3+ years of experience supporting cybersecurity operations in an enterprise environment.
Experience in at least three of the following areas: Security Monitoring, Vulnerability Management, Endpoint Security, Incident Response, Security Remediation, Cybersecurity Tool Administration.
Hands-on experience with enterprise security technologies such as SIEM, vulnerability management, EDR/endpoint protection, patch management, or related cybersecurity platforms.
Experience analyzing security alerts, investigating vulnerabilities, assessing risk, and supporting remediation efforts.
Strong ability to document technical findings and communicate security risks to both technical and non-technical stakeholders.
Bachelor's degree in a related field, or an equivalent combination of education and relevant experience.
Current cybersecurity certification such as Security+, CySA+, SSCP, CISSP, GSEC, ISC2 Associate, or equivalent.
Ability to work effectively in a collaborative federal IT environment and follow established security, incident management, and change management processes.
Experience supporting federal agencies, healthcare organizations, or highly regulated environments.
Familiarity with NIST, FISMA, RMF, and other federal cybersecurity frameworks.
Experience with tools such as Tenable/Nessus, Splunk, Microsoft Defender, BigFix, or comparable technologies.
Experience supporting security assessments, audits, compliance activities, or Authority to Operate (ATO) processes.

Nice To Haves

Experience with enterprise cybersecurity tools, including vulnerability management, SIEM/log analysis, endpoint protection, EDR, or patch management platforms (e.g., Tenable, Splunk, Microsoft Defender, BigFix, or similar).
Familiarity with federal cybersecurity frameworks and requirements, including NIST, RMF, FISMA, and Continuous Diagnostics and Mitigation (CDM).
Experience supporting security assessments, audits, compliance activities, or Authorization to Operate (ATO) efforts.
Experience using ServiceNow or similar platforms to track cybersecurity incidents, vulnerabilities, risks, and remediation activities.
Experience supporting cybersecurity operations in enterprise environments across Windows, Linux, cloud, and networked systems.
Ability to analyze security findings, assess risk, and translate technical issues into actionable remediation plans.
Strong analytical, troubleshooting, documentation, and communication skills.
Experience managing multiple priorities while collaborating effectively with cross-functional technical teams.
Commitment to continuous learning and professional development in cybersecurity.
Active Public Trust, Secret, Top Secret, or higher US security clearance preferred.

Responsibilities

Monitor security alerts, SIEM events, endpoint activity, and vulnerability scan results to identify and investigate potential threats.
Perform vulnerability management activities, including scanning, risk assessment, remediation tracking, and validation.
Administer and support enterprise cybersecurity tools, endpoint protection platforms, and security monitoring technologies.
Investigate security incidents, conduct initial triage, and coordinate appropriate response and remediation efforts.
Partner with system administrators, engineers, and application teams to identify risks and implement security improvements.
Support patch management, system hardening, secure configurations, and endpoint security operations.
Maintain accurate documentation of incidents, vulnerabilities, remediation activities, and operational metrics.
Assist with security assessments, audits, compliance activities, and evidence collection.
Stay current on emerging threats, vulnerabilities, and cybersecurity best practices.
Escalate complex or high-risk security issues when appropriate.