Security Analyst
ABBTECH
Location Riverdale, MD Our client is seeking a Security Analyst with a strong security background to lead security assessments, manage and maintain our SOC 2 compliance program, and oversee our vulnerability management lifecycle. This role will be hands-on and highly cross-functional, partnering with Engineering, IT, Product, and key business stakeholders to identify risk, drive remediation, and strengthen our overall security posture. Experience using Whistic for vendor risk management is highly desired.
Key Responsibilities
Benefits (Full-Time, W2 Employees - at least 30 hours per week):
tag#IND1
Key Responsibilities
- Lead and execute security assessments across systems, applications, cloud environments, and business processes; document findings and drive remediation efforts with technical and non-technical stakeholders.
- Own day-to-day management of the SOC 2 compliance program, including control design, evidence collection, continuous monitoring activities, and audit readiness support.
- Coordinate with internal teams and external auditors to ensure audit timelines, deliverables, and documentation requirements are met.
- Oversee the vulnerability management program, including vulnerability scanning, triage, risk rating, prioritization, tracking, and reporting through remediation closure.
- Partner with IT and Engineering to validate remediation actions, improve patching processes, and reduce security debt over time.
- Manage vendor security and third-party risk activities, including collecting and reviewing vendor security documentation, assessing security controls, and tracking follow-ups; leverage Whistic to streamline and scale vendor assessments.
- Maintain security policies, standards, and procedures aligned to compliance requirements and business needs.
- Provide clear security risk reporting to leadership, including trends, key metrics, and program maturity improvements.
- Contribute to incident readiness by supporting security monitoring processes and assisting with investigations or root cause analysis as needed.
- Proven experience in information security, security assessments, and risk management in a modern SaaS or enterprise environment.
- Strong working knowledge of SOC 2 (Type I and/or Type II), including common control domains, evidence requirements, and audit support.
- Demonstrated experience running a vulnerability management program (scanning, prioritization, remediation tracking, reporting).
- Ability to translate technical security issues into business risk and actionable remediation plans.
- Strong organizational skills with the ability to manage multiple workstreams and deadlines.
- Bachelor's degree plus 6 years of relevant experience (4 years of relevant experience in lieu of the degree accepted)
- Hands-on experience with Whistic (or similar vendor risk management platforms); Whistic strongly preferred.
- Experience with common vulnerability scanning and tracking tools (examples: Tenable, Qualys, Rapid7, Snyk, Wiz, Jira, ServiceNow-tooling may vary).
- Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, and/or SIG questionnaires.
- Experience in a regulated environment and/or supporting customer security reviews and questionnaires.
- Senior Level : $64-$74 Mid Level: $50-$56
Benefits (Full-Time, W2 Employees - at least 30 hours per week):
- Medical, Dental, and Vision offerings
- Weekly Direct Deposit
- Paid Holidays and Personal Time Off
- 401(k) with match
- Voluntary Life and AD&D, Short / Long Term Disability, plus other voluntary coverages
- Pre-Paid Legal and Employee Assistance Programs
- This program requires US Citizenship or Green Card (Lawful Permanent Residents)
tag#IND1
Vacancy posted 2 days ago
Similar jobs that could be interesting for youBased on the Security Analyst in Laurel, MD vacancy
$19 - $20 per hour
...Job Description Job Description Junior Physical Security Specialist TSA is actively hiring for a Junior Physical Security Specialist at NAS Patuxent River to support security administration requirements at various facilities. Duties will include physical and...SuggestedHourly payDay shift- ...Maryland Overtime Exempt: No Reports To: ARMADA HQ Security Clearance Required: Secret ******************CONTINGENT UPON... ...Program and Policy Administration: The Security Forces Readiness Analyst will provide on-site analytical support for Duties on War (DoW)...SuggestedFull timeFor contractorsLocal areaRelocation
- ...telework may be authorized only when consistent with mission and security requirements. This position is contingent upon contract... ...Position Summary TACFI Consulting is seeking a Readiness Analyst to support Air National Guard Security Forces readiness reporting...SuggestedFull timeContract workFixed term contractRemote workMonday to FridayFlexible hours
- ...Network Security Analyst LOCATION Annapolis Junction, MD 20701 CLEARANCE TS/SCI Full Poly (Please note this position requires full U.S. Citizenship) KEY SUMMARY We are looking for a detail-oriented and proactive Network Security Analyst to join...SuggestedTemporary workFor contractorsImmediate startFlexible hours
$45k - $55k
...Job Description Job Description Junior Program Protection Security Analyst Overview: Aether Aerospace is currently seeking a Program Protection Security Analyst, Junior level, to support our government customer at NAS Patuxent River, MD. The candidate must...Suggested- ...contingent upon contract award Position Summary TACFI Consulting is seeking a Defensive Base Operations / Electronic Security Systems (ESS) & IT Analyst to support Security Forces technical programs, electronic security systems, defensive base operations, IT integration...Full timeContract workFixed term contractRemote workMonday to FridayFlexible hours
$30.08 - $52.65 per hour
...contribution. ~ Paid Time off & Paid holidays. ~ Health and wellness programs and MORE! Position Summary: The IT SECURITY ANALYST III is responsible for implementing and supporting information security engineering for all Johns Hopkins Health Plans (JHHP...Full timeLocal area- ...upon contract award Position Summary TACFI Consulting is seeking a Senior Antiterrorism / Force Protection Analyst to support Air National Guard Security Forces antiterrorism, physical security, mission assurance, compliance, training, assessment, and readiness...Full timeContract workFixed term contractRemote workMonday to FridayFlexible hours
- ...This position is contingent upon contract award Position Summary TACFI Consulting is seeking a Senior Analyst to support Air National Guard Security Forces requirements, equipment, logistics, policy, and program execution. The position will provide analytical...Full timeContract workFixed term contractRemote workMonday to FridayFlexible hours
- ...is contingent upon contract award Position Summary TACFI Consulting is seeking a Compliance & Workflow Analyst to support Air National Guard Security Forces staff actions, inspections, compliance programs, process management, workflow analytics, quality control...Full timeContract workFixed term contractWork at officeRemote workMonday to FridayFlexible hours
- ...is contingent upon contract award Position Summary TACFI Consulting is seeking a Programming & Resources Analyst to support Air National Guard Security Forces resource planning, budget execution, manpower analysis, program tracking, and enterprise coordination. The...Full timeContract workFixed term contractRemote workMonday to FridayFlexible hours
- ...Job Description Job Description Description: Onsite in Fort Meade, MD Our client seeks a Security Analyst serving as an Information Systems Security Officer to lead implementation and enforcement of security policies aligned to NIST frameworks. The role will...Hourly payContract workLocal area
- ...openings.* Description Plan, implement, upgrade, or monitor security measures for the protection of computer networks and... ...Computer Security Specialist, IT Risk Specialist, Network Security Analyst Requirements TBD Clearance Required: TS/SCI with Full-Scope...Full timeContract work
- ...Job Description Job Description CyberLinx Solutions is seeking a SOC Analyst (Tier 1) / Security Monitoring Analyst to support our Security Operations Center (SOC). This role is responsible for continuous monitoring of security alerts generated by SIEM, provide continuous...
$55 - $60 per hour
*Description* Position Overview The Information Security Analyst II (GRC) provides support for Governance, Risk, and Compliance activities aligned to NIST CSF, NIST SP 800-53, HIPAA Security Rule, and HITRUST CSF, PCI-DSS. The role supports risk assessments, audit...Contract workTemporary work- ...partnering with our clients to improve the lives and ensure the security of all Americans—from soldiers and veteran to kids and the... ...Purpose of Scope: We are seeking an Information Security Analyst who is responsible for providing security support services while...Work experience placementRemote work
$102.5k - $188.9k
...with resilience, grow with confidence, and proactively manage to secure success. Cyber threats continue to evolve, and organizations... ...it disrupts business operations. As a Cyber Exploitation Analyst, you will support cyber defense efforts by analyzing threat activity...Work at office$107.9k - $195.05k
The C5ISR Center Cyber Security Service Provider (CSSP) is a premier defensive cyber operations organization supporting the Department... ...an immediate opportunity for an experienced Endpoint Security Analyst to support a highly visible, strategic Cybersecurity Task Order...Full timeImmediate start- ...Junior Security Analyst The Junior Security Analyst will oversee, evaluate, and support the documentation, validation, and accreditation processes necessary to assure that IT systems meet the organization's security requirements: • Respond to crisis or urgent situations...Immediate start
$69.4k - $158k
Security Operations Center AnalystThe Opportunity:Are you ready to take a strategic role in cyber defense for U.S Cyber Command? Do you... ...identification and complex incident response, you want to be a SOC analyst. As an analyst on our SOC team, you’ll analyze logs, forensic...Full timeContract workPart timeWork at officeLocal areaRemote work- ...Senior Information Security Analyst As a Senior Information Security Analyst, you will be a key member of our security team, responsible for safeguarding our organization's systems and data from cyber threats. Your primary focus will be assessing security risks, developing...Contract workWork experience placement
$69.4k - $158k
Job Number: R0246874 Security Operations Center Analyst The Opportunity: Are you ready to take a strategic role in cyber defense for U.S Cyber Command? Do you want to use your experience-based knowledge to protect critical warfighter infrastructure from the constant onslaught...Full timeContract workPart timeWork at officeLocal areaRemote work- We are seeking an experienced Info Security Analyst IV to support FIPS 140 validation projects within a hands-on lab environment. This role focuses on security analysis, cryptographic validation testing, product evaluations, automation, and technical reporting in support...Local area
- ...Job Description Job Description iQuasar is seeking to fill an Information Security Analyst IV position. At iQuasar, we strive to provide the next generation of cutting-edge technologies. Our growth means exciting career opportunities for talented professionals in...Contract work
- ...Loss Prevention Services Group has the opportunity you've been looking for! About Us: At Metro One LPSG, we are reshaping the security industry with a dynamic, service-driven approach. We are proud to provide top-tier security and loss prevention services to our...Weekly payFlexible hours
$68.4k - $143.7k
...CACI is currently seeking an outstanding Program Financial Analyst to join our Wireless Solutions Finance team. This position will... ...Acquisition Regulation) and Cost Accounting Standards (CAS) • TS/SCI Security Clearance - What You Can Expect: A culture of integrity....Contract workWork experience placementFlexible hours$99k - $225k
Security & Compliance AdministratorThe Opportunity: As an information security risk specialist on our team, you’ll use your experience to work with military clients to discover their cyber risks, understand applicablepolicies, and develop a mitigation plan. You’ll review...Full timeContract workPart timeWork at officeLocal areaRemote work$71.94k
...Job Description Job Description 93-012 – Security Administrator/Visitor Control (SA/VC) I Customer ID: 93-012 Billet Number: JUSTIFIED-1904 Location: Andrews AFB, MD Customer Labor Category: Security Administrator/Visitor Control (SA/VC)...Local area$72.4k
...Description Are you a dedicated, hardworking physical security specialist interested in the understanding and application of requirements while also working in a growing, complex classified environment and enjoy a fast-paced day-to-day op tempo? Do you want to be...Temporary workFor contractorsWork experience placementFor subcontractorRelocation packageFlexible hours$49.5k - $86.7k
...Description The Security and Loss Prevention Expert (SLP Expert) is a key leadership position within the Amazon Security and Loss Prevention (S&LP) team. This role leads the effort to efficiently and effectively provide End-to-End (E2E) S&LP services across all assigned...Work at officeWorldwideAll shiftsFlexible hoursShift workNight shift
Do you want to receive more vacancies?
Subscribe and receive similar vacancies to Security Analyst. Be the first to apply!


