Security Analyst II |

Security Analyst II

The Security Analyst II is responsible for monitoring, analyzing, and responding to cybersecurity threats to protect government IT systems and data. This role focuses on vulnerability assessments, incident response, and ensuring compliance with standards such as NIST 800-53 and FISMA. Working within RMF, the analyst conducts investigations, correlates security data, and collaborates with teams to strengthen defenses. Overall, the position supports proactive risk management and continuous improvement of the organization's security posture.

• Analyze security events, vulnerabilities, and control effectiveness
• Support incident response, RMF compliance, and continuous monitoring
• Conduct moderately complex investigations and correlate logs across systems
• Perform vulnerability assessments using tools such as Nessus or Qualys
• Utilize SIEM platforms like Splunk or QRadar and endpoint protection tools
• Develop SOPs and runbooks to improve operational efficiency
• Contribute to POA&M tracking and remediation efforts
• Ensure compliance with frameworks such as NIST 800-53, FISMA, and ISO 27001
• Leverage 3–7 years of cybersecurity or IT security experience
• Apply strong analytical, problem-solving, and communication skills
• Collaborate with cross-functional teams to enhance security posture
• Support incident response processes and basic forensic analysis
• Work with cloud security tools and platforms such as AWS or Azure (preferred)
• Use scripting languages like Python or PowerShell for automation (preferred)
• Hold a Bachelor's degree in Cybersecurity, IT, Computer Science, or related field
• Possess or pursue certifications such as Security+, CEH, or CISSP preferred