Information Security Analyst
About The Position
The Information Security Analyst will help protect Appian’s infrastructure and support the company’s security and compliance needs, particularly as Appian grows in government and regulated sectors. The role focuses on vulnerability management, timely remediation, and readiness for FedRAMP audits. The analyst will work with teams across the organization to turn security findings into actionable remediation plans and help protect Appian’s platform and customers. The position is based on-site at Appian Headquarters in McLean, Virginia. It involves assessing infrastructure vulnerabilities, working with Engineering to resolve findings within contractual SLAs and regulatory requirements, supporting audits, analyzing security metrics, and collaborating with Product, Cloud Operations, and Compliance teams.
Requirements
- Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Systems, or a related STEM field.
- At least 2 years of experience in information security, vulnerability management, or security operations in enterprise technology environments.
- Hands-on experience with vulnerability scanning and management platforms such as Nessus or Qualys, including configuration, scan execution, and results analysis.
- Working knowledge of FedRAMP audit processes, control frameworks, and regulatory compliance requirements in government or highly regulated industries.
- Advanced proficiency in Excel for data manipulation, trend analysis, and reporting security metrics and vulnerability status.
- Demonstrated ability to support security audits by preparing documentation, responding to findings, and tracking remediation activities to closure.
Nice To Haves
- Industry-recognized security certifications such as Security+, CEH, CISSP, or GIAC.
- Experience with cloud infrastructure security in AWS, Azure, or Google Cloud Platform environments.
- Ability to automate security workflows using Python, PowerShell, or similar scripting languages.
- Experience with enterprise platforms.
Responsibilities
- Lead vulnerability assessments across Appian’s infrastructure, identify and prioritize risks by severity and business impact, and analyze results.
- Partner with Engineering teams to drive timely remediation of vulnerabilities and misconfigurations in accordance with contractual SLAs and regulatory requirements, including FedRAMP standards.
- Prepare for and support FedRAMP and other compliance framework audits, including providing evidence documentation and coordinating responses to auditor findings.
- Analyze security data and trends using Excel and vulnerability management platforms, and report actionable insights about risk posture and remediation progress to leadership.
- Collaborate with Product, Cloud Operations, and Compliance stakeholders to implement security best practices and reduce the attack surface of Appian’s platform.
- Prepare audit documentation, respond to findings, and track remediation activities through closure.
Benefits
- 401(k) plan with company match.
- Flexible time off.
- Paid parental leave.
- Medical, dental, and vision plans.
- Life insurance and disability insurance.
- Wellness programs and wellness dollars.
- Flexible spending accounts and health savings account contributions.
- Employee referral bonus program.
- Learning and development resources, including training, mentorship, and Appian University.
- Tuition reimbursement.
- Employee Assistance Program with free mental health support.
- Employee Stock Purchase Program.
- Family-forming benefits.
- Certain positions may be eligible for equity awards.
- Discretionary bonus may be awarded based on individual and company performance.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Mid Level
