business analyst

senior cybersecurity analyst Jobs in Washington

senior cybersecurity analyst

application security engineer Jobs in Washington

application security engineer

aws cloud security assurance manager Jobs in Washington

aws cloud security assurance manager

budget analyst

cybersecurity analyst

Arete Consulting LLC

<p><b>Overview:</b><br/>Arete Consulting is seeking a highly skilled Senior Cybersecurity Analyst to support the U.S. Coast Guard&rsquo;s Robotics and Autonomous Systems Program Executive Office (RAS PEO). This position focuses on cybersecurity compliance and lifecycle support for Unmanned Aircraft Systems (UAS) under the Risk Management Framework (RMF).</p><p><b>Duties:</b></p><ul><li>Develop and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs) across the RAS PEO. Prepare and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs).</li><li>Track and manage and validate Plan of Action and Milestones (POAMs) in eMASS, ensuring timely risk remediation and accurate reporting.</li><li>Oversee security control assessments, interpret scan results, and ensure transparency and traceability throughout the testing lifecycle.</li><li>Lead the preparation and submission of Authority to Operate (ATO) and Authority to Connect (ATC) packages; coordinate responses with CG-TECH, CGCYBER, ISSOs, and program stakeholders.</li><li>Support cybersecurity engineering and configuration management activities to ensure systems meet baseline and ongoing compliance requirements.</li><li>Provide lifecycle cybersecurity support from system inception through deployment, sustainment, and decommissioning.</li><li>Facilitate coordination between government program offices, cybersecurity service providers (CSSPs), and external partners to maintain accreditation and operational readiness.</li><li>Provide subject matter expertise on cybersecurity and risk posture, emerging threats, and mitigation strategies to inform program leadership decision-making.</li></ul><p><b>Qualifications:</b></p><ul><li>Active Top Secret Clearance required upon hire.</li><li>Demonstrated experience with the Risk Management Framework (RMF), including development of security authorization artifacts across RMF Steps 0-6.</li><li>Proficiency with eMASS for control inheritance, POA&amp;M management, and accreditation package development.</li><li>Hands-on experience supporting cybersecurity lifecycle management and configuration compliance for federal information systems.</li><li>Strong understanding of federal cybersecurity policies, including NIST 800-53, 800-37, and agency-level governance (e.g., DOD/CGCYBER directives).</li><li>Ability to work effectively within classified environments and collaborate with diverse government and contractor stakeholders.</li></ul><p><b>Preferred:</b></p><ul><li>Experience supporting acquisition programs, ATO/ATC processes, or cybersecurity integration for autonomous or aviation-relation systems.</li><li>Security certifications are a plus but not required.</li></ul><p>Pay: $110,000.00 - $135,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Work Location: In person</p>

Senior Cybersecurity Analyst

ASRC Federal

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
<br><br>
ASRC Agile Decision Sciences (ADS), a subsidiary of ASRC Federal, has a great opportunity for a Cybersecurity Professional to support our NASA program. This role will provide critical security oversight, assessment, and compliance support to ensure the protection and integrity of mission systems.
<br>Responsibilities
<br><ul>
<li>Monitor the health of network system security plans and implementations, ensuring responsiveness to emerging vulnerabilities and threats</li>
<li>Provide subject matter expertise on NASA security tools, including the Continuous Diagnostics and Mitigation (CDM) suite, Enterprise Data Warehouse, and RISCS</li>
<li>Perform Information Systems Security Officer (ISSO) functions to manage and maintain system security plans for NASA SCaN programmatic systems</li>
<li>Support security assessments and oversee activities aligned with CISA, NIST, and NASA guidance</li>
<li>Coordinate vulnerability management efforts, including tracking and remediation support</li>
<li>Collaborate with stakeholders to ensure compliance with federal and NASA cybersecurity requirements</li>
<li>Support scheduling, execution, and documentation of security assessments</li>
</ul>
Required Skills & Experience
<br><ul>
<li>Technical expertise in NASA and/or Federal security documentation, management, integration, and lifecycle management</li>
<li>Experience conducting or supporting security assessments and authorization processes (e.g., RMF)</li>
<li>Strong knowledge of NIST, CISA, and federal cybersecurity standards and frameworks</li>
<li>Familiarity with vulnerability management and remediation processes</li>
<li>Experience with NASA security tools and environments preferred</li>
<li>Active Top Secret (TS) clearance required</li>
</ul>
Education / Experience
<br><ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)</li>
<li>5+ years of experience in cybersecurity, information assurance, or related roles</li>
<li>Relevant certifications (e.g., CISSP, Security+, CISM) preferred</li>
</ul>
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
<br><br>
EEO Statement
<br>ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Alyn Inc.

<p><b>Company Overview</b></p><p>Alyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to align organizational structures with NextGen initiatives, ensuring efficiency and effectiveness in cybersecurity through expert guidance.</p><p><b>Cyber Threat Intelligence Analyst Summary:</b></p><p>Alȳn Inc. is seeking an experienced candidate to serve as Cyber Threat Intelligence Analyst in Washington, DC. The successful candidate is experienced in network operations, understanding cyber security policies and procedures, and evaluating emerging cyber threats and trends. This position will monitor emerging cyber threats, utilizing open source and classified analysis and research to provide proactive modeling, threat validation and attribution to communicate threats to the enterprise. This includes developing and maintaining a variety of intelligence products including threat research, threat profiles, executive overviews, intelligence briefings and alerts.</p><p><b>Cyber Threat Intelligence Analyst Responsibilities:</b></p><ul><li>Prepare detailed and comprehensive cyber intelligence analytical products including analysis reports, cyber threat assessments, and internal threat briefings on both operational and tactical intelligence for various audiences.</li><li>Engage and maintain relationships with security operations teams and cyber intelligence analyst counterparts across the US Intelligence and cyber communities for the purpose of sharing intelligence.</li><li>Monitor open-source information feeds and a variety of internal and external sources to maintain situational awareness on nation-state adversaries and targeted attack groups. Identify and fill any intelligence gaps.</li><li>Use formal intelligence analysis methods to collect information about Internet-based malware-related criminal activities and the actors behind them; perform extensive research using open source and classified data.</li><li>Develop and maintain a portfolio of known threat groups to include historical attacks and targets, known tools and malware, Tactics, Techniques and Procedures (TTPs), known infrastructure and indicators of compromise.</li><li>Utilize threat models as a structured approach to identify, classify, prioritize, and report on threats to the enterprise.</li></ul><p><b>Cyber Threat Intelligence Analyst Required Qualifications:</b></p><ul><li>Must be a US Citizen</li><li><b>Must hold an active Top Secret clearance with SCI eligibility.</b></li><li>6+ years performing cyber threat intelligence analysis.</li><li>Technical understanding in the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication, installation, malware types), intermediate knowledge of computer network defense operations (web/email proxy, firewall, IDS/IPS, router/switch), ability to make sound remediation recommendations to enhance detection and protection from identified cyber threats.</li><li>Demonstrated understanding of cyber advanced persistent threats, actors, infrastructure, and TTPs.</li><li>Experience collecting, analyzing, correlating, and interpreting data from multiple sources for the purpose of documenting findings and providing meaningful relevant products.</li><li>Knowledge of and experience documenting threat actor TTPs using the MITRE ATT&amp;CK Framework.</li><li>Strong documentation and presentation skills.</li><li>All-source intelligence gathering and analysis techniques.</li></ul><p><b>Cyber Threat Intelligence Analyst Desired Qualifications:</b></p><ul><li>Formal training as an intelligence analyst in any discipline.</li><li>Experience conducting network and security log analysis within a SIEM.</li><li>Ability to develop/contribute to the development of impactful dashboards.</li><li>Experience with ThreatConnect TIP</li></ul><p><b>Education:</b></p><ul><li>BA/BS or equivalent work experience</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: $115,000.00 - $145,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Employee discount</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Experience:</p><ul><li>Cyber Threat Intelligence: 6 years (Required)</li></ul><p>Security clearance:</p><ul><li>Top Secret (Required)</li></ul><p>Ability to Commute:</p><ul><li>Washington, DC 20201 (Required)</li></ul><p>Work Location: Hybrid remote in Washington, DC 20201</p>

Cyber Threat Intelligence Analyst (TS/SCI Req)

MCN Build

<div><div><div><div><div><b>GENESYS IMPACT LLC</b></div><div><b>
JOB DESCRIPTION</b></div><div><i>
Cloud &amp; Security Analyst I</i></div></div></div><div><div><div><b><br>
Department</b></div><div>
IT Services</div></div><div><div><b><br>
Location</b></div><div>
Washington, DC (Hybrid)</div></div><div><div><b><br>
FLSA Status</b></div><div>
Exempt</div></div><div><div><b><br>
Clearance</b></div><div>
MBI Public Trust or Higher</div></div></div></div><div></div><div><b><br>
ABOUT GENESYS IMPACT</b></div><div></div><div><br>
Genesys Impact LLC is a Washington, DC-based technology integrator specializing in IT managed services, cybersecurity, structured cabling, audiovisual systems, and physical security solutions. We serve commercial and federal government clients across the DMV area, delivering end-to-end technology solutions from design through implementation and ongoing support.</div><div><b>
POSITION SUMMARY</b></div><div>
The Cloud &amp; Security Analyst I is a technical role responsible for supporting Microsoft 365 cloud administration, cybersecurity compliance, and security governance activities across Genesys Impact client environments. This position will work closely with senior engineers and project managers to deliver managed services engagements for federal and commercial clients, with a focus on M365 platform management, data loss prevention, and security compliance frameworks.</div><div></div><div><b><br>
KEY RESPONSIBILITIES</b></div><div><b>
Microsoft 365 &amp; SharePoint Administration</b></div><div><ul><li>
Administer SharePoint Online site collections, document libraries, permissions, and governance policies across client M365 tenants</li><li>
Design and implement Power Automate workflows to automate business processes, notifications, and compliance-driven escalations</li><li>
Develop Power Apps and integrate with Microsoft Purview for eDiscovery, content holds, and incident response workflows</li><li>
Configure and maintain OneDrive, Teams, and Exchange Online environments in alignment with client security requirements</li><li>
Consolidate and migrate SharePoint sites; redesign information architecture and establish governance frameworks</li></ul></div><div></div><div><b><br>
Security, Compliance &amp; Data Governance</b></div><div><ul><li>
Implement and manage Data Loss Prevention (DLP) policies across M365 services including Exchange Online, OneDrive, and Teams</li><li>
Design Sensitive Information Types (SITs) and Trainable Classifiers to protect FII, PII, and SBU data categories</li><li>
Perform Data at Rest (DAR), Data in Motion (DIM), and Data in Use (DIU) scanning to identify and remediate exposed sensitive data</li><li>
Support implementation of access controls, governance policies, and compliance measures across integrated M365 services</li><li>
Monitor and respond to DLP policy violations, coordinating with client stakeholders on remediation actions</li><li>
Leverage Microsoft Defender for Cloud Apps (MDCA) and Microsoft Defender for Endpoint (MDE) for threat visibility and response</li></ul></div><div></div><div><b><br>
Automation &amp; Development</b></div><div><ul><li>
Develop Python-based automation scripts leveraging Microsoft Graph API and Security API to streamline security workflows and incident reporting</li><li>
Build integrations between M365 services, Purview eDiscovery, and ticketing/reporting platforms to reduce manual operational overhead</li><li>
Document automation solutions and contribute to internal knowledge base and runbooks</li></ul></div><div></div><div><b><br>
Client Engagement &amp; Support</b></div><div><ul><li>
Provide Tier 2/3 support to client staff on Microsoft 365 suite functionality including SharePoint, Teams, and OneDrive best practices</li><li>
Assist in preparation of federal and commercial technical proposals with input on M365, cloud, and cybersecurity scope sections</li><li>
Participate in client-facing meetings, status updates, and deliverable reviews under the guidance of senior staff</li></ul></div><div><b>
REQUIRED QUALIFICATIONS</b></div><div><ul><li>
Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field</li><li>
1&ndash;3 years of hands-on experience with SharePoint Online and the Microsoft 365 ecosystem</li><li>
Demonstrated experience with Power Automate workflow development</li><li>
Working knowledge of Microsoft Purview, DLP policies, and compliance frameworks</li><li>
Familiarity with Python scripting for automation and API integration (Microsoft Graph API a plus)</li><li>
MBI Public Trust clearance or ability to obtain one; higher clearances (Secret, TS) a plus</li><li>
Strong written and verbal communication skills with the ability to translate technical content for non-technical stakeholders</li></ul></div><div><b>
PREFERRED QUALIFICATIONS</b></div><div><ul><li>
M.S. in Information Systems, Cybersecurity, or related discipline</li><li>
Experience supporting federal agency M365 tenants (IRS, DoD, DHA, or similar)</li><li>
Exposure to Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender for Endpoint (MDE), or Splunk SIEM/SOAR</li><li>
Familiarity with Palo Alto Networks, Strata Cloud Manager (SCM), or Symantec Broadcom DLP</li><li>
Microsoft certifications (MS-900, SC-900, AZ-900, MS-500, AZ-500) or active pursuit thereof</li><li>
Experience contributing to federal or state technical proposals</li></ul></div><div><b>
COMPENSATION &amp; BENEFITS</b></div><div></div><div><div><div><b><br>
Salary Range</b></div><div><br>
$80,000 &ndash; $90,000 annually</div></div><div><div><b><br>
Health Benefits</b></div><div><br>
Medical, dental, and vision coverage</div></div><div><div><b><br>
Paid Time Off</b></div><div><br>
Competitive PTO and federal holiday schedule</div></div><div><div><b><br>
Professional Dev.</b></div><div><br>
Certification reimbursement and training support</div></div><div><div><b><br>
Work Arrangement</b></div><div><br>
Hybrid &mdash; Washington, DC metro area; client site travel as required</div></div></div><div></div><div><i><br>
Genesys Impact LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.</i></div></div>

Cloud & Security Analyst I - Washington D.C.

Amtrak

<div><p><b>Your success is a train ride away!</b></p><p>
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees.</p><p></p><p><b><br>
Are you ready to join our team?</b></p><p>
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future.</p><p></p><p><br>
The <b>Principal Cyber Threat Incident Response Analyst </b>will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches</p><p><b>
ESSENTIAL FUNCTIONS:</b></p><ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Both IT and OT Network analsis and forencis</li><li>
Experience handlig Malware and Malicious Code Reverse Engineering, Malware Analysis, Memory Analysis, Fileless Malware Analysis and Nation state actor malware investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul><p><b>
MINIMUM QUALIFICATIONS:</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul><p><b>
Experience on one or the combination of the below to satisfy education and experience requirements:</b></p><ul><li><div><ul><li><div><ul><li><b>
Incident Response</b></li><li>
Vulnerability Management</li><li><b>
Digital Forensics</b></li><li><b>
Malware and Malicious Code Reverse Engineering</b></li><li><b>
Malware Analysis</b></li><li><b>
Memory Analysis</b></li><li><b>
Fileless Malware Analysis
</b></li><li><b>Nation state actor malware investigations</b></li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul><p><b>
One incident response centric certification:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul><p><b>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.</b></p><ul><li><b>
Hands on experience with forensics tools and log correlation.</b></li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul><p><b>
 </b><b>PREFERRED QUALIFICATIONS:</b></p><ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul><p><b>
Two or more incident response centric certifications:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul><p><b>
WORK ENVIRONMENT:</b></p><ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul><p><b>
COMMUNICATIONS AND INTERPERSONAL SKILLS:</b><br>
Must have excellent oral and written communication skills.</p><p>
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p>
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p></p><p><b><br>
Requisition ID:</b>166157</p><p><b>
Work Arrangement:</b>06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
<br>
<b>Relocation Offered:</b>No
<br>
<b>Travel Requirements:</b>Up to 25%</p><p><b>
You power our progress through your performance.</b></p><p>
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions.</p><p><br>
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.</p><p>
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law.</p><p><br>
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions.</p><p></p><p><br>
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses.</p><p><br>
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience.</p><p><br>
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</p></div>

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote

CRITICAL SOLUTIONS

<div><p><b>Tier 1 Cyber Network Defense Analyst - Shift Schedule (w/ active TS)</b></p><p>
Location: Washington, DC
<br>
Full-time, Hybrid
<br>
Clearance: TS/SCI
<br>
Shift Schedule: Day Shift 7am - 7pm ET<br>
Salary Range: $58,000 - $74,000</p><p></p><p><b><br>
JOB DESCRIPTION</b></p><p>
Critical Solutions has an immediate opening for a Tier 1 Cyber Network Defense Analyst (CNDA) to support our federal customer in Washington, DC.
</p><p>The Tier 1 Cyber Network Defense Analyst (CNDA) will be part of a team that provides security operations center (SOC) support, cyber analysis, application development, and a 24x7x365 support staff. Candidates must have the ability to work non-core hours, if necessary.</p><p>
Duties include network security monitoring and detection. Proactively searching for threats. Inspect traffic for anomalies and new malware patterns. Investigate and analyze logs. Provide analysis and response to alerts, and document activity in SOC investigations and Security Event Notifications (SENs).</p><p></p><p><br>
PRIMARY ROLES AND RESPONSIBILITIES:</p><ul><li>
Utilize a SIEM for enterprise monitoring and detection</li><li>
Create Security Event Notifications to document investigation findings</li><li>
Perform critical thinking and analysis to investigate cyber security alerts</li><li>
Analyze network traffic using enterprise tools (e.g. Full PCAP, Firewall, Proxy logs, IDS logs, etc)</li><li>
Collaborate with team members to analyze an alert or a threat</li><li>
Stay up to date with latest threats</li><li>
Monitor shared email box for notifications and requests</li><li>
Utilize OSINT to aid in their investigation</li><li>
Contribute to content tuning requests</li></ul><p></p><p><br>
BASIC QUALIFICATIONS:</p><ul><li><b>
Active TS/SCI</b> and must be able to obtain and maintain an Entry on Duty (EOD) clearance</li><li>
must have the ability to work non-core hours, if necessary.</li><li>
Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field AND a minimum of two (2) years professional experience in the areas listed below:<ul><li>
Network Administration</li><li>
Unix/Linux Administration</li><li>
Software engineering</li><li>
Software development</li><li>
Systems administration</li><li>
Help desk/IT support</li></ul></li><li>
The ideal candidate is a self-motivated individual in pursuit of a career in cyber security.</li><li>
Familiarity with a SOC's purpose and role within an organization</li><li>
General understanding of common network ports and protocols (e.g. TCP/UDP, HTTP, ICMP, DNS, SMTP, etc)</li><li>
Familiarity with network topologies and network security device functions (e.g. Firewall, IDS/IPS, Proxy, DNS, etc).</li><li>
Familiarity with packet analysis tools such as Wireshark</li><li>
Able to perform critical thinking and analysis to investigate cyber security alerts</li><li>
Familiarity with common malware and attack vectors</li><li>
Familiarity with Windows operating systems and standard OS logging</li><li>
Familiarity with Antivirus, DLP, and host based firewalls</li><li>
Must have one of the following certifications: A+ CE, CCNA-Security, CND, Network+ CE, SSCP, Security+, CySA+</li></ul><p></p><p><br>
PREFERRED QUALIFICATIONS:</p><ul><li>
Familiar with SOC methodologies and processes</li><li>
Familiarity with scripting languages (e.g. Python, Powershell, Javascript, VBS etc)</li></ul><p></p><p><br>
SHIFT SCHEDULE:</p><p>
Shift schedule will be determine at the time of the start date</p><ul><li>
Day Shift Front: 7am - 7pm ET, Sunday - Tuesday and every other Wednesday (8hr shift)</li><li>
Day Shift Back: 7am - 7pm ET, Thursday - Saturday and every other Wednesday (8hr shift)</li><li>
Must have the ability to work non-core hours, if necessary.</li></ul><p></p><p><br>
LOCATION:</p><ul><li><b>
This is a hybrid role with expectations of being on the client site most days.</b></li><li>
Must be willing and able to commute to Washington, DC</li></ul><p></p><p><b><br>
ADDITIONAL INFORMATION:</b></p><p><b>
CLEARANCE REQUIREMENT:</b> <b>Must possess an active DoD Top Secret Clearance</b>. In addition, selected candidate must undergo background investigation (BI) and finger printing by the federal agency and successfully pass the preceding to qualify for the position. US CITIZENSHIP IS REQUIRED</p><p><b>
CRITICAL SOLUTIONS PAY AND BENEFITS</b>:
</p><p>Salary range $58,000 - $74,000. The salary range for this position represent the typical salary range for this job level and this does not guarantee a specific salary. Compensation is based upon multiple factors such as responsibilities of the job, education, experience, knowledge, skills, certifications, and other requirements.</p><p>
BENEFIT SNAPSHOT: 100% premium coverage for Medical, Dental, Vision, and Life Insurance, Supplemental Insurance, 401K matching, Flexible Time Off (PTO/Holidays), Higher Education/Training Reimbursement, and more</p></div>

T1 Cyber Network Defense Analyst – Day Shift (w/ active TS)

Gunnison Consulting Group, Inc.

<div>Description:
<p><i>
Salary: $115,000 - $125,000/year</i></p><p>
We are seeking a knowledgeable and detail-oriented Cybersecurity Compliance Subject Matter Expert (SME) to support our Department of State client. This role will support the continued maturation of the customer&rsquo;s cybersecurity program by contributing expert guidance on cyber policy, compliance, risk management, and operational reporting. The ideal candidate combines deep compliance expertise with strong analytical and data visualization skills to support informed decision-making through metrics and dashboards.</p><p><b>
Duties and Responsibilities</b></p><ul><li>
Support the development, interpretation, and implementation of cybersecurity policies and procedures within a secure software development environment, ensuring alignment with applicable security framework series and federal requirements.</li><li>
Serve as a cybersecurity compliance SME for U.S. Government contracting environments, maintaining up-to-date knowledge of relevant regulations, standards, and policies and advising stakeholders on their application.</li><li>
Conduct risk assessments, identify security control gaps and vulnerabilities, and recommend mitigation strategies to strengthen security posture across development and operational environments.</li><li>
Support compliance monitoring activities, including preparation for audits, assessments, and inspections; assist in identifying findings and contributing to remediation planning and documentation.</li><li>
Collaborate with security, engineering, and program stakeholders to support the development and delivery of role-based cybersecurity training (e.g., SO, ISSO, ISSM) and security awareness initiatives.</li><li>
Develop, maintain, and analyze cybersecurity compliance metrics to measure program effectiveness, control performance, and risk trends.</li><li>
Design and produce cybersecurity dashboards and reports using Power BI, Excel, and related tools, translating complex compliance and risk data into clear, actionable visualizations for technical and non-technical audiences.</li><li>
Support continuous process improvement by identifying opportunities to streamline compliance tracking, reporting, and documentation within a dynamic software development environment.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.</li><li>
Minimum of 8 years of experience in cybersecurity compliance, with demonstrated experience supporting U.S. Government contracting and software development environments.</li><li>
Strong working knowledge of U.S. Government cybersecurity regulations and standards, including NIST, FISMA, FedRAMP, DFARS, and related frameworks.</li><li>
Experience supporting security audits, assessments, or compliance reviews within federal or government-regulated environments.</li><li>
Proven ability to analyze compliance and security data and translate findings into meaningful metrics, reports, and recommendations.</li><li>
Proficiency in Excel (data analysis, pivot tables, charts) and experience designing Power BI dashboards or similar data visualization solutions.</li><li>
Excellent written and verbal communication skills, with the ability to clearly explain cybersecurity risks, compliance requirements, and trends to diverse stakeholders.</li><li>
Detail-oriented and proactive mindset with a strong focus on accuracy, documentation quality, and continuous improvement.</li></ul><p><b>
Desired Qualifications:</b></p><ul><li>
Cybersecurity certifications such as CISSP, CISM, or equivalent.</li><li>
Experience with Department of State FAM/FAH, including integration of requirements into system documentation, processes, and compliance artifacts.</li><li>
Prior experience developing or maintaining executive-level or program-level cybersecurity dashboards.</li><li>
Familiarity with SDLC-related compliance artifacts (SSP, POA&amp;M, RA, CMF documentation, etc.).</li></ul><p><b>
Clearance Requirement</b>: Active Secret clearance required.</p><p><br>
The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.<br>
Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:</p><ul><li>
3 weeks of Personal Leave your first year</li><li>
11 paid Holidays each year</li><li>
5 days of Flexible Time Off each year</li><li>
401(k) company match at 50% up to 10% of your salary</li><li>
Medical, Dental and Vision Insurance</li><li>
Life and Disability Insurance</li><li>
Public Transportation Subsidies</li><li>
Certifications and Training Allowance - $2,500/year!</li></ul><p><b>
Why Join Gunnison?</b></p><ul><li>
Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.</li><li>
Quality is our top priority.</li><li>
Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.</li><li>
There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.</li><li>
We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.</li><li>
We hire for careers at Gunnison, not to fill a position.</li></ul><p>
Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.<br>
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects<b>.</b> <b><i>By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could</i></b><b>,</b> the company has thrived for over 25 years.</p></div>

Cybersecurity Compliance SME

Explore 54+ Cybersecurity analyst in Washington this April. Find roles across top companies and apply now to boost your career.

54 cybersecurity analyst jobs In Washington

Senior Cybersecurity Analyst

Senior Cybersecurity Analyst

Cyber Threat Intelligence Analyst (TS/SCI Req)

Cloud & Security Analyst I - Washington D.C.

Principal Incident Response Analyst (Digital Forensics)- 90406800 - Remote

T1 Cyber Network Defense Analyst – Day Shift (w/ active TS)

Cybersecurity Compliance SME