Security Analyst

Location Riverdale, MD

Our client is seeking a Security Analyst with a strong security background to lead security assessments, manage and maintain our SOC 2 compliance program, and oversee our vulnerability management lifecycle. This role will be hands-on and highly cross-functional, partnering with Engineering, IT, Product, and key business stakeholders to identify risk, drive remediation, and strengthen our overall security posture. Experience using Whistic for vendor risk management is highly desired.

Key Responsibilities

• Lead and execute security assessments across systems, applications, cloud environments, and business processes; document findings and drive remediation efforts with technical and non-technical stakeholders.

• Own day-to-day management of the SOC 2 compliance program, including control design, evidence collection, continuous monitoring activities, and audit readiness support.

• Coordinate with internal teams and external auditors to ensure audit timelines, deliverables, and documentation requirements are met.

• Oversee the vulnerability management program, including vulnerability scanning, triage, risk rating, prioritization, tracking, and reporting through remediation closure.

• Partner with IT and Engineering to validate remediation actions, improve patching processes, and reduce security debt over time.

• Manage vendor security and third-party risk activities, including collecting and reviewing vendor security documentation, assessing security controls, and tracking follow-ups; leverage Whistic to streamline and scale vendor assessments.

• Maintain security policies, standards, and procedures aligned to compliance requirements and business needs.

• Provide clear security risk reporting to leadership, including trends, key metrics, and program maturity improvements.

• Contribute to incident readiness by supporting security monitoring processes and assisting with investigations or root cause analysis as needed.

Required Qualifications

• Proven experience in information security, security assessments, and risk management in a modern SaaS or enterprise environment.

• Strong working knowledge of SOC 2 (Type I and/or Type II), including common control domains, evidence requirements, and audit support.

• Demonstrated experience running a vulnerability management program (scanning, prioritization, remediation tracking, reporting).

• Ability to translate technical security issues into business risk and actionable remediation plans.

• Strong organizational skills with the ability to manage multiple workstreams and deadlines.

• Bachelor’s degree plus 6 years of relevant experience (4 years of relevant experience in lieu of the degree accepted)

Preferred Qualifications

• Hands-on experience with Whistic (or similar vendor risk management platforms); Whistic strongly preferred.

• Experience with common vulnerability scanning and tracking tools (examples: Tenable, Qualys, Rapid7, Snyk, Wiz, Jira, ServiceNow—tooling may vary).

• Familiarity with security frameworks and standards such as ISO 27001, NIST CSF, CIS Controls, and/or SIG questionnaires.

• Experience in a regulated environment and/or supporting customer security reviews and questionnaires.

Pay Rate Range (Depending on experience):

• Senior Level : $64-$74 Mid Level: $50-$56

Benefits (Full-Time, W2 Employees – at least 30 hours per week):

• Medical, Dental, and Vision offerings

• Weekly Direct Deposit

• Paid Holidays and Personal Time Off

• 401(k) with match

• Voluntary Life and AD&D, Short / Long Term Disability, plus other voluntary coverages

• Pre-Paid Legal and Employee Assistance Programs

• This program requires US Citizenship or Green Card (Lawful Permanent Residents)

ABBTECH is an EOE/Minorities/Women/Disabled Individuals/Veterans

tag#IND1