Sr. Cyber Security Analyst

Overview DPP is seeking a Sr. Cyber Security Analyst for an opportunity with our client in the healthcare insurance industry. Work location Partial onsite (T, W, TH) and as needed preferred Duration 6 months Terms W2 contract Work authorization Candidates must be eligible to earn a low-level (Public Trust) US security clearance. Responsibilities A Penetration Tester / Security Assessor typically spends the day planning and executing security tests against applications, systems, and infrastructure to uncover vulnerabilities before attackers do. Much of the work involves using Linux-based environments and tools such as Burp Suite, Metasploit, and Nessus to perform web application testing, vulnerability scanning, exploitation validation, and manual verification of findings. They often review scope, analyze prior results, run scans, investigate weaknesses, and document evidence to determine real-world risk. About the Cyber Threat Intelligence (SecOps) team This team is made up of highly motivated senior cybersecurity practitioners who bring deep hands-on experience in penetration testing, assessment, threat hunting, forensics, and security operations. The team works closely together to support ongoing security testing initiatives, validate risk across applications and infrastructure, and help strengthen the organization’s overall security posture. This is a strong opportunity for someone who values working alongside experienced professionals in an environment that encourages knowledge sharing, continuous learning, and high-quality security work. Required technology Penetration testing tools (e.g., Burp Suite, Metasploit, Nessus) Ability to perform manual testing against applications, systems, and infrastructure Ability to validate, exploit, or explain the findings Ability to distinguish false positives from legitimate security weaknesses or assess real-world risk Strong verbal and written communication skills, with the ability to clearly explain security findings to both technical teams and non-technical stakeholders. Ability to translate complex vulnerabilities into business-relevant risk and provide practical, understandable remediation guidance. Professional presence and confidence when discussing assessment results, answering questions, and presenting recommendations. Ability to document findings thoroughly, accurately, and in a polished manner suitable for reports and stakeholder communication. Schedule Hours: 8 AM – 5 PM. Overtime as needed On-call, weekends, off-hours, some travel as needed, but not usual. Required work experience 8 years of job-related technical experience. Bachelor’s degree in Computer Science, Information Technology, or other job-related degree; OR, Associates degree in CS, IT, or other job-related degree plus 2 years of work-related experience; OR, 4 years job-related work experience (total 12 years without a degree) #J-18808-Ljbffr