cloud & security analyst i - washington d.c.

customer success program manager – isso services

cyber threat intelligence analyst (ts/sci req)

administrative assistant contractor (resource management)-remote

aws cloud security assurance manager Jobs in Washington

aws cloud security assurance manager

cloud & security analyst i - washington d.c. Jobs in Washington

customer success program manager – isso services Jobs in Washington

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

cybersecurity program manager (grc) Jobs in Washington

cybersecurity program manager (grc)

cybersecurity program manager grc

Anavation

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><p><b><br>
Description of Task to be Performed:</b></p>
<p>
AnaVation is seeking a senior-level Cybersecurity Program Manager (GRC) with an active Top Secret clearance. The ideal candidate will have Federal Program Management experience with teams of at least 20 cybersecurity personnel plus hands-on experience leading IT Security Audits and SA&amp;A activities. This is a full-time position located onsite with our customer in Washington DC.</p>
<p><b>
What you will be doing</b></p>
<ul>
<li>Fully accountable for planning, organizing, and executing all aspects of program scope, schedule, cost, technical, and staffing performance and activities on complex cybersecurity contracts to ensure exceptional service delivery</li>
<li>Manage subcontractors to ensure their strict adherence to AnaVation and client standards of quality and performance; provide a &ldquo;one team&rdquo; view to the client</li>
<li>Ensure timely, complete, high-quality contract deliverables; ensure SLOs are met or exceeded 100% of the time</li>
<li>Interface with client&rsquo;s senior management personnel, including briefings up to CIO/CISO level</li>
<li>Lead IT Security Audits including FISMA, FISCAM, IRS, and OIG</li>
<li>Leverages industry knowledge, best practices, lessons learned and stakeholder feedback to develop, implement and continuously improve GRC services</li>
<li>Optimize processes to maximize efficiencies within the team and program, including GRC automation and functional integration across task areas and teams</li>
<li>Be a positive change agent, both within and outside the organization; propagate our corporate culture throughout the program</li>
<li>Lead risk management activities, including identification and recommended mitigations; track and manage risks and issues through closure</li>
<li>Build, grow, and develop high-performing teams aligned with the client&rsquo;s mission and strategy</li>
<li>Manage program personnel to include interviewing, hiring, performance evaluations, compensation, and training and development</li>
<li>Guide and mentor subordinate managers, team leads, and staff</li>
<li>Work closely with the client to function as the single point of contact and accountability, ensuring that all technical work, communications, and decision-making remain aligned, timely, and defensible</li>
<li>Serve as Quality Control Manager ensuring all deliverables and assigned tasks meet QASP requirements</li>
<li>Must have the ability to work in a dynamic environment and adapt to changing conditions</li>
<li>Must possess a high degree of originality, creativity, and initiative requiring minimal supervision</li>
</ul></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><div>
<p><b>
Minimum Qualifications (Education/Certications, Experience, etc):</b></p>
<ul>
<li>Active PMP, CISSP, and CISM certifications</li>
<li>Bachelor&rsquo;s Degree in IT, Cybersecurity, Business, or related</li>
<li>15+ years managing GRC-centric cybersecurity programs with at least 25 people</li>
<li>5+ years leading IT security audits including FISMA, FISCAM, IRS, OIG, etc</li>
<li>1+ years leading FISMA metrics reporting</li>
<li>1+ years leading cybersecurity shared services (e.g., SOC-aaS, GRC-aaS)</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Active Top Secret clearance</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>Experience with IT Security Assessment &amp; Authorization (SA&amp;A) processes and documentation sufficient to mentor and advise team members</li>
<li>Experience with GRC tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
</ul></div><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><ul>
<li>Prior experience as an ISSO/ISSM/ISSE or SCA</li>
</ul><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Cybersecurity Program Manager (GRC)

<div><div><b>Be Challenged and Make a Difference</b></div>
<div></div>
<div>In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.</div><div></div><div><p><b><br>
Description of Task to be Performed:</b></p>
<p>
AnaVation is seeking a Customer Success Program Manager to support a cabinet-level client in Washington DC. The selected individual will oversee all aspects of delivering GRC services to interdepartmental and external Federal agencies in an -aaS model. Exceptional interpersonal and communication skills are required.</p>
<p><b>
What you will be doing</b></p>
<ul>
<li>Independently manage the entire portfolio of GRC Shared Services being delivered on behalf of the client to interdepartmental and external Federal agencies, including administration, governance, growth and adoption, financial management, cost models, service delivery, continuous improvement, and the service portfolio itself.</li>
<li>Maintain and mature the existing portfolio of GRC service offerings; recommend, develop, and sell new GRC services including pipeline, marketing, capability briefings, and technical and price proposals for prospective new end customers.</li>
<li>Provide Shared Services subject matter expertise including recommending program strategy and guidelines, leading operational improvements, and ensuring exceptional customer relationship management.</li>
<li>Provide GRC subject matter expertise to interpret technical requirements, brief program and client leadership, and resolve technical issues with stakeholders.</li>
<li>Lead quality management of shared services work products and deliverables, establish processes and monitor to ensure end customer SLAs are met, and support share services program audits.</li>
<li>Perform capacity planning to ensure current and future resource needs are met.</li>
<li>Negotiate resource utilization within and between teams providing technical shared services support.</li>
<li>Establish processes and support on- and offboarding of new shared services customers to ensure exceptional customer experience and the highest levels of satisfaction.</li>
<li>Recommend and complete special projects to continuously mature the program and its underlying elements.</li>
</ul></div><h3 class="jobSectionHeader"><b>Required Qualifications:</b></h3><p><b>
Minimum Qualifications (Education/Certifications, Experience, etc):</b></p>
<ul>
<li>Minimum one (1) managing cybersecurity service delivery in an -aaS model (e.g., SOCaaS, GRCaaS)</li>
<li>Minimum ten (10) years of hands-on GRC experience, e.g., as an ISSO/ISSE/ISSM, SCA.</li>
<li>At least two (2) active, high-level program management and/or cybersecurity certifications such as PMP, CISSP, CISM, CEH, CASP, CCSP, CCSK, or Security+.</li>
<li>Minimum two (2) years of hands-on experience with JCAM</li>
<li>Bachelors Degree in a related field, or four (4) additional years of related experience</li>
</ul>
<p><b>Clearance:</b></p>
<ul>
<li>Minimum Active Top Secret clearance with SCI eligibilit</li>
</ul>
<p><b>Other Required Skills &amp; Qualifications:</b></p>
<ul>
<li>Intimate familiarity with FISMA, NIST 800-53, RMF, FedRAMP, SA&amp;A, IT security audits, vulnerability and POA&amp;M remediation, executive orders and directives, BODs, and OMB cyber memoranda</li>
<li>Exceptional interpersonal skills to establish and maintain positive working relationships with all stakeholders</li>
<li>Expert-level command of the English language (oral and written), with experience interacting effectively at the CIO and CISO levels of large organizations</li>
<li>Expert-level organizational skills and ability to keep a multitude of tasks and projects on track at all times and with minimal supervision</li>
<li>Experience with cybersecurity tools such as vulnerability management, vulnerability scanning, endpoint management, data protection, SIEM, and GRC automation platforms</li>
</ul>
<p><b>Location:</b></p>
<ul>
<li>This position is currently performed remotely but the work location is subject to change at the customer&rsquo;s sole discretion. Candidates must be located in the DC-metro area and be willing to adapt to a hybrid or on site work location in Washington DC if required.</li>
</ul><h3 class="jobSectionHeader"><b>Preferred Qualifications:</b></h3><div>
<ul><li>Masters degree or higher in cybersecurity, information assurance, or related</li>
<li>Additional advanced cybersecurity-related certifications</li>
<li>Cybersecurity consulting experience is a plus</li>
</ul></div><div><b>Benefits</b></div>
<ul> <li>Generous cost sharing for medical insurance for the employee and dependents</li>
<li> 100% company paid dental insurance for employees and dependents</li>
<li> 100% company paid long-term and short-term disability insurance</li>
<li> 100% company paid vision insurance for employees and dependents</li>
<li> 401k plan with generous match and 100% immediate vesting</li>
<li> Competitive Pay</li>
<li> Generous paid leave and holiday package</li>
<li> Tuition and training reimbursement</li>
<li> Life and AD&amp;D Insurance</li>
</ul><div><b>About AnaVation</b></div>
<div>AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.</div>
<div></div>
<div>If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!</div>
<div></div>
<div>AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.</div></div>

Customer Success Program Manager – ISSO Services

MANTECH

<div><p><b>MANTECH</b> seeks a motivated, career and customer-oriented <b>Configuration Manager</b> to join our team in <b>Washington, D.C.</b></p><p></p><p><b>
Responsibilities include, but are not limited to:</b></p><ul><li>
Develop and maintain configuration management (CM) plans, policies, and baselines to support system development and operational environments</li><li>
Manage the Security Assessment and Authorization (SAA) process, ensuring systems comply with approved security policies and are properly maintained and transitioned into GRC tools</li><li>
Define and recommend system security controls, impact levels, and authorization boundaries in coordination with system owners and Authorizing Officials</li><li>
Coordinate and facilitate interconnection agreements (ISAs, MOUs, MOAs) for systems integrating with external or joint-use environments</li><li>
Conduct independent reviews of System Security Plans (SSPs), determine testing requirements, and support security control validation efforts</li><li>
Lead security inspections, testing, and ATO package submissions, while advising leadership on vulnerabilities, residual risks, and compliance status</li><li>
Support change and configuration management processes, including tracking Requests for Change (RFCs), maintaining documentation, and delivering executive-level briefings and stakeholder communications</li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li>
A minimum of 10 years&rsquo; experience in a computer science or cybersecurity related field with a minimum of 7 years of experience serving as an ISSR or in a similar role at a cleared facility</li><li>
Must hold at least one of the following certifications: Certified Information Systems Security Professional (CISSP), Global Information Security Professional (GISP), or the CompTIA Advanced Security Practitioner (CASP), or Certified Information System Manager (CISM).</li><li>
Experience operating security tools such as Tenable Nessus/Security Center, IBM Guardium, HP WebInspect, NMAP, or similar technologies</li><li>
Strong knowledge of RMF and ATO/SAA processes, including NIST SP 800-53 and FISMA compliance requirements</li><li>
Hands-on experience with configuration management, system baselining, and change control processes</li><li>
Familiarity with GRC tools (e.g., eMASS, Xacta, Archer), including POA&amp;M tracking, and experience developing/reviewing SSPs and security controls</li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li>
Bachelor's or advanced degree in Computer Science, Cybersecurity, or other cyber discipline</li></ul><p></p><p><b>
Clearance Requirements:
</b></p><ul><li>Must have a current/active Top Secret security clearance and be willing and able to obtain SCI eligibility prior to starting this position.</li><li>
Must be willing to sit for a polygraph if required</li></ul><p></p><p><b>
Physical Requirements:</b></p><ul><li>
Must be able to remain in a stationary position 50%.</li><li>
Needs to occasionally move about inside the office to access file cabinets, office machinery, etc.</li><li>
Constantly operates a computer and other office productivity machinery, such as a calculator, copy machine and computer printer.</li><li>
Often positions self to maintain computers in the lab, including under the desks and in the server closet.</li><li>
Frequently communicates with co-workers, management and customers, which may involve delivering presentations. Must be able to exchange accurate information in these situations.</li></ul></div><p></p>

Configuration Manager

MCN Build

<div><div><div><div><div><b>GENESYS IMPACT LLC</b></div><div><b>
JOB DESCRIPTION</b></div><div><i>
Cloud &amp; Security Analyst I</i></div></div></div><div><div><div><b><br>
Department</b></div><div>
IT Services</div></div><div><div><b><br>
Location</b></div><div>
Washington, DC (Hybrid)</div></div><div><div><b><br>
FLSA Status</b></div><div>
Exempt</div></div><div><div><b><br>
Clearance</b></div><div>
MBI Public Trust or Higher</div></div></div></div><div></div><div><b><br>
ABOUT GENESYS IMPACT</b></div><div></div><div><br>
Genesys Impact LLC is a Washington, DC-based technology integrator specializing in IT managed services, cybersecurity, structured cabling, audiovisual systems, and physical security solutions. We serve commercial and federal government clients across the DMV area, delivering end-to-end technology solutions from design through implementation and ongoing support.</div><div><b>
POSITION SUMMARY</b></div><div>
The Cloud &amp; Security Analyst I is a technical role responsible for supporting Microsoft 365 cloud administration, cybersecurity compliance, and security governance activities across Genesys Impact client environments. This position will work closely with senior engineers and project managers to deliver managed services engagements for federal and commercial clients, with a focus on M365 platform management, data loss prevention, and security compliance frameworks.</div><div></div><div><b><br>
KEY RESPONSIBILITIES</b></div><div><b>
Microsoft 365 &amp; SharePoint Administration</b></div><div><ul><li>
Administer SharePoint Online site collections, document libraries, permissions, and governance policies across client M365 tenants</li><li>
Design and implement Power Automate workflows to automate business processes, notifications, and compliance-driven escalations</li><li>
Develop Power Apps and integrate with Microsoft Purview for eDiscovery, content holds, and incident response workflows</li><li>
Configure and maintain OneDrive, Teams, and Exchange Online environments in alignment with client security requirements</li><li>
Consolidate and migrate SharePoint sites; redesign information architecture and establish governance frameworks</li></ul></div><div></div><div><b><br>
Security, Compliance &amp; Data Governance</b></div><div><ul><li>
Implement and manage Data Loss Prevention (DLP) policies across M365 services including Exchange Online, OneDrive, and Teams</li><li>
Design Sensitive Information Types (SITs) and Trainable Classifiers to protect FII, PII, and SBU data categories</li><li>
Perform Data at Rest (DAR), Data in Motion (DIM), and Data in Use (DIU) scanning to identify and remediate exposed sensitive data</li><li>
Support implementation of access controls, governance policies, and compliance measures across integrated M365 services</li><li>
Monitor and respond to DLP policy violations, coordinating with client stakeholders on remediation actions</li><li>
Leverage Microsoft Defender for Cloud Apps (MDCA) and Microsoft Defender for Endpoint (MDE) for threat visibility and response</li></ul></div><div></div><div><b><br>
Automation &amp; Development</b></div><div><ul><li>
Develop Python-based automation scripts leveraging Microsoft Graph API and Security API to streamline security workflows and incident reporting</li><li>
Build integrations between M365 services, Purview eDiscovery, and ticketing/reporting platforms to reduce manual operational overhead</li><li>
Document automation solutions and contribute to internal knowledge base and runbooks</li></ul></div><div></div><div><b><br>
Client Engagement &amp; Support</b></div><div><ul><li>
Provide Tier 2/3 support to client staff on Microsoft 365 suite functionality including SharePoint, Teams, and OneDrive best practices</li><li>
Assist in preparation of federal and commercial technical proposals with input on M365, cloud, and cybersecurity scope sections</li><li>
Participate in client-facing meetings, status updates, and deliverable reviews under the guidance of senior staff</li></ul></div><div><b>
REQUIRED QUALIFICATIONS</b></div><div><ul><li>
Bachelor's degree in Information Technology, Information Systems, Cybersecurity, or related field</li><li>
1&ndash;3 years of hands-on experience with SharePoint Online and the Microsoft 365 ecosystem</li><li>
Demonstrated experience with Power Automate workflow development</li><li>
Working knowledge of Microsoft Purview, DLP policies, and compliance frameworks</li><li>
Familiarity with Python scripting for automation and API integration (Microsoft Graph API a plus)</li><li>
MBI Public Trust clearance or ability to obtain one; higher clearances (Secret, TS) a plus</li><li>
Strong written and verbal communication skills with the ability to translate technical content for non-technical stakeholders</li></ul></div><div><b>
PREFERRED QUALIFICATIONS</b></div><div><ul><li>
M.S. in Information Systems, Cybersecurity, or related discipline</li><li>
Experience supporting federal agency M365 tenants (IRS, DoD, DHA, or similar)</li><li>
Exposure to Microsoft Defender for Cloud Apps (MDCA), Microsoft Defender for Endpoint (MDE), or Splunk SIEM/SOAR</li><li>
Familiarity with Palo Alto Networks, Strata Cloud Manager (SCM), or Symantec Broadcom DLP</li><li>
Microsoft certifications (MS-900, SC-900, AZ-900, MS-500, AZ-500) or active pursuit thereof</li><li>
Experience contributing to federal or state technical proposals</li></ul></div><div><b>
COMPENSATION &amp; BENEFITS</b></div><div></div><div><div><div><b><br>
Salary Range</b></div><div><br>
$80,000 &ndash; $90,000 annually</div></div><div><div><b><br>
Health Benefits</b></div><div><br>
Medical, dental, and vision coverage</div></div><div><div><b><br>
Paid Time Off</b></div><div><br>
Competitive PTO and federal holiday schedule</div></div><div><div><b><br>
Professional Dev.</b></div><div><br>
Certification reimbursement and training support</div></div><div><div><b><br>
Work Arrangement</b></div><div><br>
Hybrid &mdash; Washington, DC metro area; client site travel as required</div></div></div><div></div><div><i><br>
Genesys Impact LLC is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, or protected veteran status.</i></div></div>

Cloud & Security Analyst I - Washington D.C.

Bank of America

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p></p><div><div><div><p><b>
Overview:</b></p><p></p><p>
We are seeking a highly skilled and experienced AWS Cloud Assurance Manager to lead the design, execution, and continuous improvement of the Cloud Security Assurance (CSA) program across AWS environments. This role is responsible for establishing cloud security strategy, integrating assurance activities with cloud governance routines, and maintaining visibility into the cloud business roadmap to proactively manage risk.</p><p></p><p>
The ideal candidate brings deep expertise in cloud security posture management, vulnerability identification and analysis, and workload protection, combined with strong people leadership and the ability to drive technology initiatives through cross functional collaboration. This role oversees a small team of cloud security specialists responsible for CSPM, CWPP, and consolidated cloud risk monitoring and escalation.</p><p></p><p><b>
Job Responsibilities:</b></p><ul><li><p>
Design and execute the Cloud Security Assurance (CSA) strategy for AWS environments in alignment with enterprise security objectives and cloud adoption goals.</p></li><li><p>
Integrate CSA activities with cloud governance routines, ensuring consistent governance, transparency, and leadership visibility into cloud risk and control effectiveness.</p></li><li><p>
Maintain ongoing visibility into the cloud business roadmap to anticipate emerging risks, influence secure architecture decisions, and align security priorities with business initiatives.</p></li><li><p>
Drive cloud security technology requirements and lead technology initiative efforts, including tool selection, implementation, integration, and operational maturity.</p></li><li><p>
Provide oversight of vulnerability identification, security posture management, and vulnerability analysis processes across AWS accounts, regions, and services.</p></li><li><p>
Establish and govern operational processes for triage, prioritization, escalation, and remediation tracking of high risk cloud findings.</p></li><li><p>
Own cloud security posture, vulnerability, and risk metrics, including executive level reporting and audit ready documentation.</p></li><li><p>
Lead and develop a team of cloud security specialists, setting clear expectations, performance goals, and development plans.</p></li><li><p>
Partner with Cloud Engineering, DevOps, Architecture, GRC, and Risk teams to embed security controls into cloud platforms, standards, and delivery pipelines.</p></li><li><p>
Act as a subject matter expert and trusted advisor for cloud security assurance, posture management, and cloud risk governance.</p></li></ul></div></div></div><p></p><div><div><p><b>
Required Qualifications:</b></p><ul><li><p>
Deep understanding of AWS native services, architectures, and security controls.</p></li><li><p>
Strong knowledge of cloud security posture management, vulnerability management, and workload protection concepts.</p></li><li><p>
Experience integrating cloud security assurance with governance, risk, and compliance frameworks.</p></li><li><p>
Working knowledge of cloud threat landscapes, attack paths, and risk based prioritization.</p></li><li><p>
Experience leading CSPM, CWPP, and related cloud security platforms and tooling.</p></li><li><p>
Understanding of DevSecOps practices and integration of security controls into CI/CD pipelines.</p></li><li><p>
Ability to translate technical cloud risk into clear business impact for leadership and audit audiences.</p></li><li><p>
Proven experience leading and developing technical security teams.</p></li><li><p>
Strong analytical, qualitative, and quantitative reasoning skills.</p></li><li><p>
Ability to operate independently on complex, high visibility initiatives.</p></li><li><p>
Excellent written and verbal communication skills, with the ability to influence across technical and non-technical audiences.</p></li></ul></div></div><p></p><div><p><b>
Desired Qualifications:</b></p><div><ul><li><p>
CISSP, CISM, CCSP</p></li><li><p>
AWS Security Specialty or equivalent cloud security certifications</p></li><li><p>
SANS or GIAC cloud and security certifications</p></li><li><p>
Experience supporting regulated environments and audit engagements</p></li><li><p>
Bachelor&rsquo;s degree in a technical or security related field</p></li></ul><p></p><p>
This job will be open and accepting applications for a minimum of seven days from the date it was posted</p></div></div><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

AWS Cloud Security Assurance Manager

Alyn Inc.

<p><b>Company Overview</b></p><p>Alyn Inc. partners with Fortune 50 companies and top government agencies to enhance their Cybersecurity Operations programs. Our mission is to align organizational structures with NextGen initiatives, ensuring efficiency and effectiveness in cybersecurity through expert guidance.</p><p><b>Cyber Threat Intelligence Analyst Summary:</b></p><p>Alȳn Inc. is seeking an experienced candidate to serve as Cyber Threat Intelligence Analyst in Washington, DC. The successful candidate is experienced in network operations, understanding cyber security policies and procedures, and evaluating emerging cyber threats and trends. This position will monitor emerging cyber threats, utilizing open source and classified analysis and research to provide proactive modeling, threat validation and attribution to communicate threats to the enterprise. This includes developing and maintaining a variety of intelligence products including threat research, threat profiles, executive overviews, intelligence briefings and alerts.</p><p><b>Cyber Threat Intelligence Analyst Responsibilities:</b></p><ul><li>Prepare detailed and comprehensive cyber intelligence analytical products including analysis reports, cyber threat assessments, and internal threat briefings on both operational and tactical intelligence for various audiences.</li><li>Engage and maintain relationships with security operations teams and cyber intelligence analyst counterparts across the US Intelligence and cyber communities for the purpose of sharing intelligence.</li><li>Monitor open-source information feeds and a variety of internal and external sources to maintain situational awareness on nation-state adversaries and targeted attack groups. Identify and fill any intelligence gaps.</li><li>Use formal intelligence analysis methods to collect information about Internet-based malware-related criminal activities and the actors behind them; perform extensive research using open source and classified data.</li><li>Develop and maintain a portfolio of known threat groups to include historical attacks and targets, known tools and malware, Tactics, Techniques and Procedures (TTPs), known infrastructure and indicators of compromise.</li><li>Utilize threat models as a structured approach to identify, classify, prioritize, and report on threats to the enterprise.</li></ul><p><b>Cyber Threat Intelligence Analyst Required Qualifications:</b></p><ul><li>Must be a US Citizen</li><li><b>Must hold an active Top Secret clearance with SCI eligibility.</b></li><li>6+ years performing cyber threat intelligence analysis.</li><li>Technical understanding in the following areas: network communication using TCP/IP protocols, basic system administration, basic understanding of malware (malware communication, installation, malware types), intermediate knowledge of computer network defense operations (web/email proxy, firewall, IDS/IPS, router/switch), ability to make sound remediation recommendations to enhance detection and protection from identified cyber threats.</li><li>Demonstrated understanding of cyber advanced persistent threats, actors, infrastructure, and TTPs.</li><li>Experience collecting, analyzing, correlating, and interpreting data from multiple sources for the purpose of documenting findings and providing meaningful relevant products.</li><li>Knowledge of and experience documenting threat actor TTPs using the MITRE ATT&amp;CK Framework.</li><li>Strong documentation and presentation skills.</li><li>All-source intelligence gathering and analysis techniques.</li></ul><p><b>Cyber Threat Intelligence Analyst Desired Qualifications:</b></p><ul><li>Formal training as an intelligence analyst in any discipline.</li><li>Experience conducting network and security log analysis within a SIEM.</li><li>Ability to develop/contribute to the development of impactful dashboards.</li><li>Experience with ThreatConnect TIP</li></ul><p><b>Education:</b></p><ul><li>BA/BS or equivalent work experience</li></ul><p>Job Types: Full-time, Permanent</p><p>Pay: $115,000.00 - $145,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Employee assistance program</li><li>Employee discount</li><li>Flexible spending account</li><li>Health insurance</li><li>Health savings account</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Experience:</p><ul><li>Cyber Threat Intelligence: 6 years (Required)</li></ul><p>Security clearance:</p><ul><li>Top Secret (Required)</li></ul><p>Ability to Commute:</p><ul><li>Washington, DC 20201 (Required)</li></ul><p>Work Location: Hybrid remote in Washington, DC 20201</p>

Cyber Threat Intelligence Analyst (TS/SCI Req)

<div><p>Description</p><p><i>
Please note: This role is contingent upon a contract award. While it is not an immediate opening, we are actively conducting interviews and extending offers in anticipation of the award.</i></p><p></p><p><b>
The Work:</b> We are seeking an experienced Scrum Master to support Agile delivery for a cross‑functional development team. This role partners closely with Product Owners, technical teams, and stakeholders to ensure Agile best practices are followed, delivery commitments are met, and continuous improvement is embedded in the team&rsquo;s culture.</p><p></p><p><b>
Job Location: </b>This is remote within the National Capitol Region (Washington, DC) with periodic travel to the client office.</p><p></p><p>
If you accept this position, you should note that ICF does monitor employee work locations and blocks access from foreign locations/foreign IP addresses, and also prohibits personal VPN connections.</p><p></p><p><b>
What You Will Do:</b></p><div><ul><li>
Serve as Scrum Master for one or more Agile development teams, facilitating all core Scrum ceremonies including sprint planning, daily stand-ups, sprint reviews, and retrospectives</li><li>
Coach teams on Agile principles, Scrum framework, and continuous improvement practices</li><li>
Remove impediments that impact team delivery and proactively manage risks and dependencies</li><li>
Partner with Product Owners to support backlog refinement, prioritization, and story readiness</li><li>
Promote transparency through effective reporting on sprint progress, metrics, and delivery outcomes</li><li>
Foster collaboration across cross-functional teams, including developers, testers, UX, and program leadership</li><li>
Ensure Agile practices align with federal program requirements, security constraints, and compliance expectations</li><li>
Support Agile transformation efforts and mentor team members on Agile maturity</li></ul><p></p><p><b>
What You Will Bring With You:</b></p><ul><li><div>
Active Top Secret clearance with SCI eligibility</div></li><li><div><b>
10+ years of experience</b> supporting Agile software development processes</div></li></ul><p></p><p><b>
What We Would Like You To Bring With You:</b></p><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Computer Science, Information Technology, or related technical field.</li><li>
2 years&rsquo; experience working with DCSA</li><li>
Experience working on federal or DoD IT programs</li><li>
Demonstrated experience operating as a Scrum Master in complex, enterprise-scale environments</li><li>
Strong understanding of Agile frameworks, with emphasis on Scrum</li><li>
Scrum Master certification (CSM, SAFe Scrum Master, or equivalent).</li></ul></div><p></p><p><b>
Working at ICF</b></p>
ICF is a global advisory and technology services provider, but we&rsquo;re not your typical consultants. We combine unmatched expertise with cutting-edge technology to help clients solve their most complex challenges, navigate change, and shape the future.<p></p><div><p>
We can only solve the world's toughest challenges by building a workplace that allows everyone to thrive. We are an equal opportunity employer. Together, our employees are empowered to share their expertise and collaborate with others to achieve personal and professional goals. For more information, please read our EEO policy.</p><p></p><p>
We will consider for employment qualified applicants with arrest and conviction records.</p><p></p><p><br>
Reasonable Accommodations are available, including, but not limited to, for disabled veterans, individuals with disabilities, and individuals with sincerely held religious beliefs, in all phases of the application and employment process. To request an accommodation, please email Candidateaccommodation@icf.com and we will be happy to assist. All information you provide will be kept confidential and will be used only to the extent required to provide needed reasonable accommodations.</p></div><p></p><div><p>
Read more about workplace discrimination rights or our benefit offerings which are included in the Transparency in (Benefits) Coverage Act.</p></div><p></p><div><b><br>
Candidate AI Usage Policy</b></div><div><div><p>
At ICF, we are committed to ensuring a fair interview process for all candidates based on their own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) tools to generate or assist with responses during interviews (whether in-person or virtual) is not permitted. This policy is in place to maintain the integrity and authenticity of the interview process.</p></div><p></p><div><p>
However, we understand that some candidates may require accommodation that involves the use of AI. If such an accommodation is needed, candidates are instructed to contact us in advance at candidateaccommodation@icf.com. We are dedicated to providing the necessary support to ensure that all candidates have an equal opportunity to succeed.</p></div></div><p></p><p><b><br>
Pay Range</b> - There are multiple factors that are considered in determining final pay for a position, including, but not limited to, relevant work experience, skills, certifications and competencies that align to the specified role, geographic location, education and certifications as well as contract provisions regarding labor categories that are specific to the position.
</p><p></p><p>The pay range for this position based on full-time employment is:</p>
$130,687.00 - $222,169.00<p></p>
DC Remote Office (DC99)</div>

Scrum Master (Top Secret cleared)

Explore 75+ Cybersecurity program manager grc in Washington this April. Find roles across top companies and apply now to boost your career.