Security & Compliance Analyst

About the role

This is an onsite position based in Sterling, VA.

Responsibilities

• Support security and compliance assessments, audits, and risk management activities.
• Monitor and evaluate security controls, policies, procedures, and compliance requirements.
• Assist with vulnerability management, security assessments, and remediation tracking.
• Maintain security documentation, policies, procedures, risk registers, and compliance evidence.
• Support implementation and monitoring of security controls aligned with NIST, FISMA, CIS, or other applicable frameworks.
• Assist with security incident documentation, investigation, and escalation.
• Review system logs, security alerts, vulnerability reports, and other security information.
• Track identified security weaknesses and work with technical teams to support timely remediation.

Requirements

• 1–3 years of professional experience in cybersecurity, information security, IT compliance, risk management, or a related field.
• U.S. Citizenship and the ability to obtain and maintain a U.S. Government security clearance.
• Bachelor’s degree in Cybersecurity, Information Security, or a related discipline.
• CompTIA Security+ or Network+ certification preferred/required.
• Understanding of cybersecurity principles, security controls, vulnerabilities, and risk management.
• Familiarity with NIST Cybersecurity Framework, NIST 800-53, FISMA, CIS Controls, or similar standards.
• Basic understanding of network security, endpoint security, identity and access management, and vulnerability management.
• Strong analytical, documentation, communication, and problem-solving skills.
• Experience supporting Federal, State, or other highly regulated environments.

Benefits

• Medical, dental, and vision insurance
• 401(k) retirement plan
• Disability insurance
• Flexible spending accounts