Senior Cyber Security Analyst

ECS Tech Inc•Work from home, Virginia

1d•$130,000 - $160,000

About The Position

At Everforth ECS Federal, we believe technology should serve those who have served us. Partnering with the U.S. Department of Veterans Affairs, we safeguard critical systems and sensitive data that directly impact the lives of millions of veterans and their families. As a Senior Cyber Security Analyst, you will bring your expertise in Data Loss Prevention (DLP) and Zero Trust Architecture (ZTA) to design strategies, assessments and tests to ensure sensitive veteran data remains secure, compliant, and resilient against evolving cyber threats.

Requirements

Must be a U.S. citizen eligible to obtain and maintain a Tier 5 (critical sensitive national security) background investigation.
5+ years in cybersecurity operations, ideally within a federal or VA environment.
5+ years of hands-on experience with DLP tools (e.g., Symantec, Forcepoint, or Microsoft Purview) and ZTA frameworks.
5+ years working with languages like Python, C++, JavaScript, and PowerShell to automate tasks, analyze malware and develop security tools and practices
Monitor and analyze security events across VA systems, identifying anomalies and potential breaches in real time.
Implement and fine-tune DLP policies to prevent unauthorized data movement or exposure.
Support ZTA initiatives, ensuring access controls and segmentation are enforced across cloud and on-prem environments.
Conduct vulnerability assessments and recommend remediation strategies.
Collaborate with VA stakeholders to ensure compliance with FedRAMP and VA-specific security requirements.
Develop and enforce security policies and ensure compliance with regulatory standards.
Perform cyber defense trend analysis and reporting and recommend computing environment vulnerability corrections.
Document incidents, investigations, and security improvements for audit readiness.
5+ years of experience with a Bachelor’s degree in Cybersecurity, Computer Science, or Information Technology.

Nice To Haves

One or more related certifications preferred, such as but not limited to: CISSP, CEH, CompTIA Security+, CISM.

Responsibilities

Lead Incident Response Efforts – Coordinate and execute containment, eradication, and recovery activities during security incidents, ensuring minimal operational disruption.
Security Architecture Reviews – Evaluate and enhance system designs, network configurations, and application deployments to align with Zero Trust principles and DLP best practices.
Automation & Scripting for Security Operations – Develop and maintain automated workflows to streamline log analysis, alert triage, and compliance reporting.
Continuous Monitoring & Improvement – Implement advanced monitoring techniques to detect insider threats, anomalous behaviors, and policy violations in real time.
Audit & Compliance Readiness – Prepare systems and documentation for internal and external audits, ensuring adherence to NIST, FedRAMP, and VA-specific frameworks.
Cross-Functional Collaboration – Partner with DevOps, cloud engineering, and network teams to embed security controls early in the system development lifecycle.
Policy & Standards Development – Contribute to the creation and refinement of enterprise security policies, technical standards, and operational procedures.