Senior Cybersecurity Analyst

This is a full-time contract position for a Senior Cybersecurity Analyst based in Arlington, Virginia. You will assist with designing, implementing, and maintaining security architecture and controls that protect the organization's information systems, operational technology, and cloud infrastructure. This role provides technical leadership and architectural guidance across a complex environment consisting of multi-cloud platforms, enterprise applications, and industrial control systems. You will collaborate with IT, engineering, operations, and third-party vendors to integrate security into system design, deployment, and ongoing operations.

Responsibilities

• Design, implement, and maintain enterprise security architectures that protect IT and OT environments across on-premises and cloud platforms.
• Develop and maintain security reference architectures and secure design patterns to support repeatable and scalable implementation of cybersecurity controls.
• Conduct architecture and security design reviews for enterprise platforms, applications, and infrastructure in multi-cloud and hybrid environments.
• Ensure cybersecurity controls are integrated into system design, development, and deployment processes.
• Support the implementation and ongoing maturity of the organization's enterprise cybersecurity program.
• Lead threat modeling exercises and collaborate with technical teams to integrate security controls into system architecture and solution design.
• Conduct security risk assessments and ensure alignment with enterprise risk management strategies.
• Identify potential vulnerabilities and provide remediation strategies to reduce organizational risk exposure.
• Develop and maintain security standards, policies, and procedures aligned with regulatory frameworks and industry best practices.
• Ensure security assessments and architecture reviews are documented and executed consistently to deliver high-quality security outcomes.
• Design and implement security controls for cloud environments including identity, network segmentation, encryption, monitoring, and compliance capabilities.
• Support secure deployment practices across DevOps pipelines through DevSecOps integration and automation.
• Research and implement innovative approaches for security automation and security-as-code capabilities.
• Ensure alignment with recognized cybersecurity frameworks including NIST 800-53, FISMA, FedRAMP, and ISO 27000 series.
• Support internal and external security audits, compliance reviews, and control validation activities.
• Maintain documentation of security architecture decisions, assessments, and compliance artifacts.
• Partner with IT, infrastructure, application development, and operational technology teams to embed security into technology initiatives.
• Work closely with vendors, cloud providers, and third-party partners to ensure secure system integrations.
• Provide technical guidance and security expertise during platform implementations and system upgrades.

Qualifications

• Required
  • Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, or equivalent professional experience.
  • Minimum 10 years of experience in cybersecurity, information security engineering, or security architecture, preferably within the energy, utilities, or industrial sectors.
  • At least 5 years of experience performing security risk assessments and implementing security frameworks such as NIST 800 series, ISO 27000 series, or IT General Controls.
  • Experience designing and implementing security controls within cloud environments (Azure and AWS).
  • Experience supporting multi-cloud or hybrid infrastructure environments.
  • Experience implementing or supporting NIST 800-53, FISMA, or FedRAMP Moderate/High security controls.
  • Strong knowledge of Identity and Access Management (IAM) and authentication protocols including SAML, OAuth, OIDC, and Multi-Factor Authentication.
  • Experience with cryptography, key management, and secrets management platforms.
  • Deep understanding of network security, data protection, encryption technologies, and secure access controls.
  • Experience securing enterprise applications, cloud services, and infrastructure platforms.
• Preferred
  • Familiarity with DevSecOps principles and security automation frameworks.