Cybersecurity Analyst

Position Summary At Odyssey, our Cybersecurity Analysts protect our systems, data, and people from evolving cyber threats across cloud and on premises environments. You will monitor and triage alerts from SIEM, EDR, and intrusion detection tools, investigate confirmed threats, and contain incidents by isolating hosts, blocking malicious activity, and escalating as needed. You will document findings, refine detection rules, and partner with IT, engineering, and compliance teams to identify vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting continuous monitoring aligned with NIST RMF and FedRAMP requirements. Responsibilities Duties include but are not limited to:Monitors and responds to alerts from tools such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and intrusion detection systems, then triages each alert to determine whether it is a real threat or a false positive and how urgently it needs attention. For genuine threats, they investigate logs, network traffic, and endpoint activity to understand what happened and how far it spread, then contain the threat by isolating hosts, blocking IPs or accounts, and escalating serious incidents. They document their findings and actions in tickets and incident reports, and they continually refine detection rules to reduce noise and catch new attack techniques. Support NIST SP 800 171, NIST SP 800 53 and CMMC Level 2 requirements and writing control narratives, SSPs, POA&Ms and assessment evidence. Qualifications Citizenship: Must be a U.S. citizenMinimum Required QualificationsClearance: Eligible to obtain and maintain a Secret clearanceEducation: Bachelor’s degree in information security, information systems, or a related field, or equivalent experienceYears of Experience: 3 to 5 years in security compliance, audit, or GRC, including hands on experience with NIST SP 800-171 or NIST SP 800-53Certifications: CompTIA Security Plus or equivalentPreferred QualificationsClearance: Active Secret clearanceYears of Experience: 5 to 8 years experience supporting a DoD contractor or SOC organization, including CUI environments (i.e. Microsoft GCC High); prior participation in a C3PAO assessmentCertifications: SecurityX Plus, CISA, CRISC, or CISSPTechnical SkillsMicrosoft 365 and Azure compliance tooling (Purview, Compliance Manager, Defender for Cloud, Intune)SIEM, EDR, and vulnerability scanning tools to support continuous monitoringSecurity awareness and phishing simulation platformsNIST SP 800-171, NIST SP 800-171A, NIST SP 800-53, and CMMC Level 2 requirementsCUI and FCI scoping, asset categorization, and assessment boundary definitionWriting control narratives, SSPs, POA&Ms, and assessment evidence packageInterpersonal SkillsServes as primary contact for assessors, prime contractors, and customersCoordinates evidence across HR, facilities, export compliance, and ITPrepares clear, defensible packages for executive signatureHolds control owners accountable for findings through closureCommunicates compliance status and risk to technical and nontechnical stakeholdersAdditional InformationLocation: Colorado Springs, COTravel: 5-10%Work Arrangement: Remote or Hybrid (Periodic on location work as needed)#LI-MP1 Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities. Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through OdysseyCares, a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events.Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities Please Note: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received.Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.Odyssey BenefitsJob SummaryID: 2026-9496Category: CybersecurityType: Full TimeBiweekly Hours: 80Location : Name: Colorado Springs, COMin: USD $145,000.00/Yr.Max: USD $160,000.00/Yr.