Senior Cyber Security Analyst

Sr. Cyber Security Analyst

DPP is seeking a Sr. Cyber Security Analyst for an opportunity with our client in the healthcare insurance industry. Work location: Partial onsite (T, W, TH) and as needed preferred. Duration: 6 months. Terms: W2 contract. Work authorization: Candidates must be eligible to earn a low-level (Public Trust) US security clearance.

Position description:

• A Penetration Tester / Security Assessor typically spends the day planning and executing security tests against applications, systems, and infrastructure to uncover vulnerabilities before attackers do.
• Much of the work involves using Linux-based environments and tools such as Burp Suite, Metasploit, and Nessus to perform web application testing, vulnerability scanning, exploitation validation, and manual verification of findings.
• They often review scope, analyze prior results, run scans, investigate weaknesses, and document evidence to determine real-world risk.

About the Cyber Threat Intelligence (SecOps) team:

• This team is made up of highly motivated senior cybersecurity practitioners who bring deep hands-on experience in penetration testing, assessment, threat hunting, forensics, and security operations.
• The team works closely together to support ongoing security testing initiatives, validate risk across applications and infrastructure, and help strengthen the organization's overall security posture.
• A key selling point for candidates is the team's collaborative culture, with members openly sharing intelligence, techniques, and findings and actively supporting one another in solving complex security problems.
• This is a strong opportunity for someone who values working alongside experienced professionals in an environment that encourages knowledge sharing, continuous learning, and high-quality security work.

Required technology:

• Linux
• Penetration testing tools (e.g., BurpSuite, MetaSploit, Nessus)
• Ability to perform manual testing against applications, systems, and infrastructure
• Hands-on penetration testing expertise
• Ability to validate, exploit, or explain the findings
• Ability to distinguish false positives from legitimate security weaknesses or assess real-world risk

Soft skills:

• Strong verbal and written communication skills, with the ability to clearly explain security findings to both technical teams and non-technical stakeholders.
• Ability to translate complex vulnerabilities into business-relevant risk and provide practical, understandable remediation guidance.
• Professional presence and confidence when discussing assessment results, answering questions, and presenting recommendations.
• Ability to document findings thoroughly, accurately, and in a polished manner suitable for reports and stakeholder communication.

Schedule:

• Hours: 8 AM – 5 PM. Overtime as needed
• On-call, weekends, off-hours, some travel as needed, but not usual.

Required work experience:

• 8 years of job-related technical experience.

Required education/equivalencies:

• Bachelor's degree in Computer Science, Information Technology, or other job-related degree;
• OR, Associates degree in CS, IT, or other job-related degree plus 2 years of work-related experience;
• OR, 4 years job-related work experience (total 12 years without a degree)

US Citizen: This role requires the ability to obtain a low-level (Public Trust) US security clearance, which requires a thorough background search and US citizenship. Residency requirements may apply. EOE/AA/V/D