Information Security Analyst (Vulnerability Management)
About The Position
Blue Yonder Defense Solutions (BYDS) is seeking an Information Security Analyst to support the organization's cybersecurity operations, vulnerability management program, compliance initiatives, and risk management activities. This role plays a critical part in identifying, analyzing, and remediating security vulnerabilities across cloud and on-premises environments while helping maintain compliance with government and industry security requirements. The successful candidate will support compliance with ISO/IEC 27001, the Department of Defense Cybersecurity Maturity Model Certification (CMMC) Level 2, NIST (National Institute of Standards and Technology) Special Publication 800-171 and Special Publication 800-53, along with other cybersecurity standards applicable to U.S. Government contractors. The role supports a cloud-first environment utilizing Microsoft Azure, Oracle Cloud Infrastructure (OCI), and Microsoft 365 and will work closely with IT, engineering, and business stakeholders to strengthen Blue Yonder Defense Solutions overall security posture.
Requirements
- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent professional experience considered in lieu of degree.
- 5+ years of cybersecurity, vulnerability management, security operations, or information security experience.
- Experience supporting government, defense contractor, or Defense Industrial Base (DIB) environments.
- Working knowledge of Cybersecurity Maturity Model Certification (CMMC) Level 2 and NIST SP 800-171 and/or NIST SP 800-53 frameworks.
- Hands-on experience with vulnerability scanning tools, vulnerability assessment, remediation, and risk prioritization.
- Experience securing cloud-based environments, including Microsoft Azure, Oracle Cloud Infrastructure (OCI), AWS, and/or Microsoft 365.
- Strong communication, documentation, and cross-functional collaboration skills.
- US Citizen (Must Hold OR Be Willing to Obtain a Government Clearance)
Nice To Haves
- Experience supporting ISO/IEC 27001 compliance programs and audits.
- Familiarity with vulnerability management solutions such as Tenable, OpenVAS, Qualys, Rapid7, Amazon Inspector, Microsoft Defender, or similar tools.
- Experience supporting incident response and security investigations.
- Experience working within highly regulated environments subject to government or defense cybersecurity requirements.
- Industry certifications such as Security+, CySA+, SSCP, GSEC, SC-200, AZ-500, or equivalent cybersecurity certifications.
- Certifications or training related to ISO 27001, NIST SP 800-171, or NIST SP 800-53 are a plus.
- Strong analytical, troubleshooting, and problem-solving skills.
- Excellent written, verbal, and technical documentation skills.
- Ability to manage multiple priorities while maintaining attention to detail.
- Ability to communicate effectively with both technical and non-technical stakeholders.
- Collaborative mindset with a commitment to continuous learning and professional growth.
Responsibilities
- Conduct regular vulnerability scans across cloud and on-premises assets using industry-standard tools.
- Analyze scan results, assess risk, prioritize findings, and recommend remediation activities based on business impact.
- Collaborate with IT, infrastructure, and development teams to track, prioritize, and remediate security vulnerabilities.
- Develop and maintain automation scripts and reporting processes to support vulnerability management activities.
- Support incident response efforts by providing vulnerability context, risk analysis, and remediation guidance.
- Document vulnerability management processes, findings, remediation activities, and security recommendations.
- Assist with compliance initiatives by providing evidence, reporting, and support for ISO 27001, CMMC Level 2, NIST 800-171, and NIST 800-53 requirements.
- Stay current with emerging threats, vulnerability trends, cybersecurity technologies, and industry best practices.
- Participate in ongoing efforts to strengthen BYDS's security posture across cloud and enterprise environments.
Benefits
- Comprehensive Medical, Dental and Vision
- 401K with Matching
- Flexible Time Off
- Corporate Fitness Program
- A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more
- Annual performance bonus or commission program
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
