Security Analyst III

Bowman Consulting Group, Ltd. • Reston, VA

129d

About The Position

Bowman is hiring a Security Analyst III to join its Information Security team in Virginia. This senior team member advances the organization’s cybersecurity posture through proactive monitoring, threat detection, incident investigation, and risk management. The role partners with IT, infrastructure, cloud, and business teams to protect sensitive information, strengthen security controls, and enable secure business operations, while serving as a trusted security advisor.

The position provides cybersecurity subject matter guidance, mentors junior analysts, leads or contributes to cross-functional security initiatives, and supports security awareness and informed decision-making. It also supports compliance, audits, risk assessments, security policies, and continuous improvement of the security program.

Operational work includes monitoring and triaging alerts across enterprise systems, networks, endpoints, cloud platforms, and applications; investigating and responding to security incidents; supporting vulnerability management; administering and optimizing security tools; developing detection logic and automated workflows; performing security testing and control validation; and documenting investigations, controls, and operational metrics. After-hours or on-call support may be required for incident response and critical security events.

Bowman offers competitive compensation and a comprehensive benefits package. The stated pay range is $41.00–$53.00 per hour, with salary and eligible variable compensation, if any, commensurate with experience. Eligibility for certain benefits may vary by position, location, and employment status.

Requirements

• Bachelor’s degree in Information Security, Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent experience.
• Five or more years of experience in cybersecurity, security operations, IT infrastructure, or a related discipline.
• Experience investigating cybersecurity incidents, phishing campaigns, malware events, and unauthorized access attempts.
• Strong understanding of Windows, Linux, and macOS operating systems and enterprise security principles.
• Working knowledge of networking, endpoint security, identity and access management, vulnerability management, and incident response.
• Experience supporting vulnerability assessments, remediation efforts, and security monitoring programs.
• Experience with enterprise security tools such as CrowdStrike, Microsoft Defender, Microsoft Sentinel, SIEM, EDR, vulnerability management, or identity security platforms.
• Familiarity with frameworks such as NIST CSF, NIST 800-53, CIS Controls, or ISO 27001.
• Experience with cloud security and Microsoft security technologies.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently and as part of a team, manage multiple time-sensitive tasks, and operate with limited direction.
• Ability to respond with urgency, investigate and resolve security incidents, interpret data, and balance security requirements with business priorities.
• Commitment to quality, collaboration, accountability, continuous learning, and professional development.

Nice To Haves

• Security+, CySA+, CISSP, GIAC, Microsoft Security certifications, or equivalent.

Responsibilities

• Serve as a subject matter resource for cybersecurity initiatives, projects, and operational activities.
• Mentor junior analysts and guide incident investigations and risk assessments.
• Lead or contribute to cross-functional security initiatives and continuous improvement efforts.
• Promote security awareness and risk-informed decision-making across the organization.
• Communicate security risks, findings, and recommendations to technical and non-technical stakeholders.
• Partner with IT, infrastructure, cloud, and business teams to identify and mitigate security risks.
• Support cybersecurity compliance initiatives, audits, and regulatory requirements.
• Conduct risk assessments and evaluate security controls against frameworks such as NIST, CIS, and ISO.
• Assist in developing and maintaining security policies, standards, procedures, and guidelines.
• Contribute to security program maturity and continuous improvement.
• Evaluate emerging threats, technologies, and digital transformation initiatives from a security perspective.
• Monitor and triage security alerts across enterprise systems, networks, endpoints, cloud platforms, and applications.
• Investigate and respond to incidents involving phishing, malware, unauthorized access, and indicators of compromise.
• Lead complex incident investigations and coordinate response efforts with internal and external stakeholders.
• Develop and maintain incident response procedures, playbooks, and escalation processes.
• Support vulnerability management, including validation, prioritization, and remediation tracking.
• Administer, tune, and optimize cybersecurity tools to improve detection and response capabilities.
• Develop detection logic, security use cases, and automated workflows.
• Perform security testing, control validation, and risk assessments.
• Monitor cloud environments and SaaS platforms for security risks and suspicious activity.
• Maintain documentation of security investigations, controls, and operational metrics.

Benefits

• Medical, dental, and vision insurance.
• Life and disability insurance.
• 401(k) retirement savings plan with company match.
• Paid time off, sick leave, and paid holidays.
• Tuition reimbursement and professional development support.
• Discretionary bonuses and other performance-based incentives.
• Employee Assistance Program (EAP), wellness initiatives, and employee discounts.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior