Security Analyst - Remote (Security Clearance Required)

Akamai•Cambridge, MA

5d•Remote

About The Position

Our Incident Response function is the first line of defense against sophisticated cyber-attacks targeting our global environment. As a Senior Security Analyst, you'll work to detect, investigate, and contain security incidents that matter. This will include highly regulated environments such as FedRAMP IL5. In this role, you will support the security posture of Akamai's non-production environments by identifying/analyzing vulnerabilities. This position is strictly focused on analysis, and reporting activities no system building/implementation/provisioning/maintenance is performed. You will collaborate with a global team of security professionals to assess and improve Akamai's vulnerability management processes while ensuring alignment with FedRAMP IL5 and related U.S. government standards.

Requirements

Have a bachelors degree in Information Security or related field
Demonstrate experience with incident response/threat detection
Understand common vulnerability management standards and frameworks (CVE, CVSS) and their application to IL5 compliance requirements.
Possess technical knowledge of various systems, VMs, cloud infrastructure, networking, and secure configurations relevant to government-grade systems.
Demonstrate accountability, analytical skill, and a collaborative approach within high-compliance and security-conscious environments.
Have an active Secret Security Clearance

Responsibilities

Supporting and enhancing the vulnerability management lifecycle for non-production systems aligned with FedRAMP IL5 compliance requirements.
Conducting vulnerability scans, analysis, and reporting activities in test and staging environments.
Providing detailed assessments and recommendations to internal teams for remediation activities (remediation is performed by others).
Maintaining knowledge of vulnerabilities, exploits, and mitigation strategies relevant to Defense and Federal compliance frameworks.
Evaluating potential impacts of identified vulnerabilities and document appropriate compensating controls or mitigations.
Triaging scan results to identify true positives, reduce false positives, and support compliance validation processes.
Developing metrics and reports supporting internal security visibility and compliance documentation.