senior cybersecurity analyst

application security engineer Jobs in Washington

application security engineer

cloud & security analyst i - washington d.c. Jobs in Washington

customer support specialist Jobs in Washington

customer support specialist

cyber threat intelligence analyst (ts/sci req) Jobs in Washington

cybersecurity specialist

Arete Consulting LLC

<p><b>Overview:</b><br/>Arete Consulting is seeking a highly skilled Senior Cybersecurity Analyst to support the U.S. Coast Guard&rsquo;s Robotics and Autonomous Systems Program Executive Office (RAS PEO). This position focuses on cybersecurity compliance and lifecycle support for Unmanned Aircraft Systems (UAS) under the Risk Management Framework (RMF).</p><p><b>Duties:</b></p><ul><li>Develop and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs) across the RAS PEO. Prepare and maintain RMF documentation to support acquisition lifecycle phases and Acquisition Decision Events (ADEs).</li><li>Track and manage and validate Plan of Action and Milestones (POAMs) in eMASS, ensuring timely risk remediation and accurate reporting.</li><li>Oversee security control assessments, interpret scan results, and ensure transparency and traceability throughout the testing lifecycle.</li><li>Lead the preparation and submission of Authority to Operate (ATO) and Authority to Connect (ATC) packages; coordinate responses with CG-TECH, CGCYBER, ISSOs, and program stakeholders.</li><li>Support cybersecurity engineering and configuration management activities to ensure systems meet baseline and ongoing compliance requirements.</li><li>Provide lifecycle cybersecurity support from system inception through deployment, sustainment, and decommissioning.</li><li>Facilitate coordination between government program offices, cybersecurity service providers (CSSPs), and external partners to maintain accreditation and operational readiness.</li><li>Provide subject matter expertise on cybersecurity and risk posture, emerging threats, and mitigation strategies to inform program leadership decision-making.</li></ul><p><b>Qualifications:</b></p><ul><li>Active Top Secret Clearance required upon hire.</li><li>Demonstrated experience with the Risk Management Framework (RMF), including development of security authorization artifacts across RMF Steps 0-6.</li><li>Proficiency with eMASS for control inheritance, POA&amp;M management, and accreditation package development.</li><li>Hands-on experience supporting cybersecurity lifecycle management and configuration compliance for federal information systems.</li><li>Strong understanding of federal cybersecurity policies, including NIST 800-53, 800-37, and agency-level governance (e.g., DOD/CGCYBER directives).</li><li>Ability to work effectively within classified environments and collaborate with diverse government and contractor stakeholders.</li></ul><p><b>Preferred:</b></p><ul><li>Experience supporting acquisition programs, ATO/ATC processes, or cybersecurity integration for autonomous or aviation-relation systems.</li><li>Security certifications are a plus but not required.</li></ul><p>Pay: $110,000.00 - $135,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>401(k) matching</li><li>Dental insurance</li><li>Health insurance</li><li>Life insurance</li><li>Paid time off</li><li>Professional development assistance</li><li>Referral program</li><li>Tuition reimbursement</li><li>Vision insurance</li></ul><p>Work Location: In person</p>

Senior Cybersecurity Analyst

ASRC Federal

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work™
<br><br>
ASRC Agile Decision Sciences (ADS), a subsidiary of ASRC Federal, has a great opportunity for a Cybersecurity Professional to support our NASA program. This role will provide critical security oversight, assessment, and compliance support to ensure the protection and integrity of mission systems.
<br>Responsibilities
<br><ul>
<li>Monitor the health of network system security plans and implementations, ensuring responsiveness to emerging vulnerabilities and threats</li>
<li>Provide subject matter expertise on NASA security tools, including the Continuous Diagnostics and Mitigation (CDM) suite, Enterprise Data Warehouse, and RISCS</li>
<li>Perform Information Systems Security Officer (ISSO) functions to manage and maintain system security plans for NASA SCaN programmatic systems</li>
<li>Support security assessments and oversee activities aligned with CISA, NIST, and NASA guidance</li>
<li>Coordinate vulnerability management efforts, including tracking and remediation support</li>
<li>Collaborate with stakeholders to ensure compliance with federal and NASA cybersecurity requirements</li>
<li>Support scheduling, execution, and documentation of security assessments</li>
</ul>
Required Skills & Experience
<br><ul>
<li>Technical expertise in NASA and/or Federal security documentation, management, integration, and lifecycle management</li>
<li>Experience conducting or supporting security assessments and authorization processes (e.g., RMF)</li>
<li>Strong knowledge of NIST, CISA, and federal cybersecurity standards and frameworks</li>
<li>Familiarity with vulnerability management and remediation processes</li>
<li>Experience with NASA security tools and environments preferred</li>
<li>Active Top Secret (TS) clearance required</li>
</ul>
Education / Experience
<br><ul>
<li>Bachelor’s degree in Cybersecurity, Information Technology, or a related field (or equivalent experience)</li>
<li>5+ years of experience in cybersecurity, information assurance, or related roles</li>
<li>Relevant certifications (e.g., CISSP, Security+, CISM) preferred</li>
</ul>
We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.
<br><br>
EEO Statement
<br>ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

<p><b>IT Security Engineer</b></p><p>We are seeking a highly skilled and proactive IT Security Engineer to take ownership of the organization&rsquo;s end-to-end security program. This individual will be responsible for protecting systems, data, and infrastructure while partnering cross-functionally to ensure security is embedded across all technology and business operations. This role reports directly to the IT Director.</p><p><b>Key Responsibilities</b></p><ul><li>Own and manage the full lifecycle of the organization&rsquo;s cybersecurity program</li><li>Conduct penetration testing, vulnerability scanning, and ongoing risk assessments to identify and mitigate threats</li><li>Develop, implement, and maintain security policies, procedures, and compliance documentation</li><li>Ensure adherence to regulatory frameworks including GDPR and HIPAA, with future exposure to ISO standards</li><li>Lead incident response efforts, including investigation, containment, and remediation of security events</li><li>Collaborate with internal teams to integrate security into daily operations and new technology initiatives</li><li>Provide strategic input on the development and evolution of the organization&rsquo;s technology stack</li><li>Manage vendor relationships, including evaluating third-party security practices and overseeing audits</li><li>Oversee endpoint and system security, including patching, monitoring, and access controls</li><li>Partner with external security vendors (e.g., SOC, EDR) to monitor systems and respond to threats</li><li>Deliver security awareness training and guidance to end users to reduce risk and improve best practices</li><li>Support audits, security questionnaires, and compliance-related requests</li></ul><p><b>Technical Environment</b></p><ul><li>Microsoft Azure Active Directory supporting approximately 130 end users</li><li>Experience with cloud security, identity and access management, MFA, and endpoint protection tools</li></ul><p><b>Qualifications</b></p><ul><li>Bachelor&rsquo;s degree in Computer Science, Information Security, or related field (or equivalent experience)</li><li>5+ years of experience in cybersecurity or security engineering roles</li><li>Strong expertise in security technologies including firewalls, VPNs, SIEMs, IDS/IPS, and endpoint security</li><li>Experience with penetration testing, vulnerability management, and incident response</li><li>Familiarity with compliance frameworks such as GDPR, HIPAA, and general knowledge of ISO standards</li><li>Industry certifications such as CISSP, CISM, or similar are preferred</li></ul><p><b>Skills &amp; Competencies</b></p><ul><li>Strong analytical and problem-solving abilities with a proactive approach to risk mitigation</li><li>Excellent written and verbal communication skills, with the ability to translate technical concepts to non-technical stakeholders</li><li>High attention to detail and ability to manage multiple priorities in a fast-paced environment</li><li>Strong cross-functional collaboration and stakeholder management skills</li></ul><p><b>Additional Information</b></p><ul><li>Role requires local candidates with a hybrid schedule of three days onsite (Monday required)</li><li>Involves regular interaction with leadership and cross-functional teams across the organization</li><li>Interview process consists of three stages: initial virtual interview followed by two onsite meetings with technical leadership and executive team</li></ul><p>Pay: $130,000.00 - $170,000.00 per year</p><p>Work Location: Hybrid remote in Washington, DC 20036</p>

IT Security Engineer

Technology Transformation Services (GSA)

<p>Are you an Enterprise Architect - or just a really awesome tech professional looking for your next opportunity?</p><p><b>GSA is hosting TWO Technology Hiring Information Sessions next week:</b></p><p><b>Tuesday, April 7th at noon ET</b></p><p>https://events.zoomgov.com/ev/AlD571M-7v7iWub4KwnTTPq2Pqrc120g7rpqPOXoAQGl1ZxI4_7W~AnlCO21u-LUtecRekCuWNBL0YIyp9nNCeHZSZWTQJLLlPuC_BoGyWRn1AQ?lmt=1775132950000</p><p><b>Thursday, April 9th at 3 pm ET</b></p><p>https://events.zoomgov.com/ev/AoffOe5V1PDu628NgjQw1JrxJqhSHbp6fr58Ku1-smKzwxeQIxYb~AhvTUaRvXESkoMBJLOqhhYoUTSbWQ-7QFI1ZnJfcZCCp4mOkxImenYkQ0A?lmt=1775132970000</p><p>These sessions are your chance to:</p><p>✅ Learn about the types of technology roles at GSA</p><p>✅ Get the inside scoop on our NEW application process</p><p>✅ Ask questions and connect with the GSA team before announcements go live</p><p>Whether you're actively job searching or just curious about what GSA is building, consider exploring this opportunity.</p><p><b>#GSA #TechJobs #Hiring #NowHiring #TechCareers #DataEngineering #Cybersecurity #UXDesign #ProductManagement #GovernmentTech #WeAreHiring</b></p><p>Pay: $169,279.00 per year</p><p>Work Location: In person</p>

Software Enterprise Architect

Anakim Consulting Inc

<div><p><b>Talent Network - All Locations</b><br>
<b>Washington, DC</b></p>
<p>Anakim Consulting is always on the lookout for talented professionals to join our team.</p>
<p>If you have a flexible timeline to make your next job move, we welcome you to join our Talent Network. Applications are reviewed on an ongoing basis to meet hiring needs. <i>All positions are contingent on customer funding and approval.</i></p>
<p><b>Job Type: </b>Full Time W2<br>
<b>Location</b>: Varied by position and may require hybrid/on-site schedules<br>
<b>Schedule:</b> All positions are full-time. Some roles may require shift work and non-standard hours including nights and weekends.</p>
<p><b>Security Clearance:</b> Current Security Clearance, NASA, IRS MBI and DHS Suitiability preferred</p>
<p><b>Positions vary and ongoing roles may include:
</b></p><ul><li>Configuration Management (Cloud Services)</li>
<li>Pega Developers, Testers, Business Analysts</li>
<li>System Engineer</li>
<li>Network Engineer (Cisco/Juniper/Aruba)</li>
<li>Senior Software Engineer (Video Workflows)</li>
<li>Enterprise Architect (Microsoft and Cisco Telephony Platforms)</li>
<li>Microsoft Telephony Engineer (E911)</li>
<li>Cybersecurity Expert (Microsoft and Cisco Telephony Platforms)</li>
<li>Linux System Administrator (varied environments)</li>
<li>Network Operations Center (NOC) Specialist</li>
<li>Network Monitor</li>
<li>System Support Specialist</li>
<li>System Administrator (Atlassian/Jira)</li>
<li>Security Engineer (Fortinet)</li>
<li>Cybersecurity Watch Officer (DHS)</li></ul></div>

Talent Network - All Locations

Tyto Athene

<div>Description:
<div>
Tyto Athene is searching for a <b>Senior Information System Security Officer (ISSO)</b> to be responsible for the overall handling of information assurance expertise for a large, complex IT infrastructure program in Washington DC. Systems are deployed using a public cloud service provider to deliver advanced capabilities to the Federal government using IaaS, PaaS, and SaaS service models.</div><div></div><div><br>
This role is responsible for researching, generating, and validating security controls that support the customers&rsquo; Risk Management Framework (RMF) and ICD 503 Security Accreditation. Responsibilities include defining, creating, and maintaining Systems Security Plans (SSP) to support Accreditation and Authorization (A&amp;A) reviews and coordinating with customer security organizations as part of a delivery pipeline to achieve Authority to Operate (ATO). Additionally, ISSOs review systems to identify potential security weaknesses, recommend improvements to amend vulnerabilities, and assist with implementing changes and documenting upgrades.</div><div></div><div><b><br>
Responsibilities:</b></div><ul><li>
Developing and updating security authorization packages in accordance with the client&rsquo;s requirement and compliant with FISMA. Core documents that you will be responsible for are the System Security Plan (SSP), Risk Assessment Report, Security Assessment Plan and Report, Contingency Plan, Incident Response Plan (IRP), Standard Operating Procedures (SOP), Plan of Actions and Milestones (POA&amp;M), Remediation Plans, Configuration Management Plan (CMP), etc.</li><li>
Validate that protective measures for physical security are in place to support the system's security requirements</li><li>
Maintain an inventory of hardware and software for the information system</li><li>
Develop, coordinate, test, and train staff on Contingency Plans and Incident Response Plans</li><li>
Manage emerging and defined risks associated with the administration and use of assigned information systems</li><li>
Coordinate with the client's Cybersecurity Unit to achieve and maintain the information systems' compliance and authorization to operate (ATO)</li><li>
Perform risk analyses to determine cost-effective and essential safeguards</li><li>
Support Incident Response and Contingency activities</li><li>
Able to perform security control assessment using NIST 800-53A publication as well as OMB A-130 and OMB A-123 circulars</li><li>
Conduct Independent scans of the application, network, and database (where required)</li><li>
Provide continuous monitoring to enforce client security policy and procedures and create processes that will provide oversight into the following activities for the system owner</li><li>
Coordinate with multiple stakeholders to complete mandatory agency data calls in a timely manner</li></ul>
Qualifications:
<div><b>
Required:</b></div><ul><li>
Bachelor&rsquo;s Degree or equivalent combination of formal education and experience. Bachelor's Degree may be substituted for 8 additional years of relevant experience.</li><li>
Minimum of 10 years of general experience and 8 years of relevant functional experience as an ISSO or Security Controls Analyst.</li><li>
Familiarity with program security responsibilities to include, but not limited to the NIST RMF, audit log reviews, system monitoring, SPAA processes, FISMA requirements, vulnerability &amp; compliance scanning, continuous monitoring activities, security testing and evaluation, and security policies.</li><li>
Understanding of Cloud (Amazon Web Services (AWS) or Azure and FedRAMP is highly desired.</li><li>
Demonstrated an understanding of system administration in understanding permissions, event monitoring, and logging.</li><li>
Thorough understanding and knowledge of FISMA and SA&amp;A process</li><li>
Proficiency in writing technical analysis reports</li><li>
Strong written and oral communication skills</li><li>
Project management (ability to track detailed tasks and ensure timely delivery)</li><li>
Good business acumen</li><li>
Relationship management</li><li>
Ability to work quickly, efficiently and accurately in a dynamic and fluid environment</li></ul><div><b>
Desired:</b></div><ul><li>
Understanding and experience with CSAM or JCAM is a PLUS</li><li>
Balancing security requirements with mission needs</li></ul><div><b>
Clearance:</b></div><ul><li>
Secret Clearance to start</li></ul><div><b>
Location:</b></div><ul><li>
Remote</li></ul>
About Tyto Athene:
<div><b>
Compensation:</b></div><ul><li>
Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $125,000-$135,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.</li></ul><div><b>
Benefits:</b></div><ul><li>
Highlights of our benefits include Health/Dental/Vision, 401(k) match, Paid Time Off, STD/LTD/Life Insurance, Referral Bonuses, professional development reimbursement, and parental leave.</li></ul><div></div><div><br>
Tyto Athene is a trusted leader in IT services and solutions, delivering mission-focused digital transformation that drives measurable success. Our expertise spans four core technology domains&mdash;Network Modernization, Hybrid Cloud, Cybersecurity, and Enterprise IT&mdash;empowering our clients with cutting-edge solutions tailored to their evolving needs. With over 50 years of experience, Tyto Athene proudly support Defense, Intelligence, Space, National Security, Civilian, Health, and Public Safety clients across the United States and worldwide.</div><div>
</div><div>
At Tyto Athene, we believe that success starts with our people. We foster a collaborative, innovative, and mission-driven environment where every team member plays a critical role in shaping the future of technology. Are you ready to join #TeamTyto?</div><div>
</div><div>
Tyto Athene, LLC is an Equal Opportunity Employer; all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, [sexual orientation, gender identity,] national origin, disability, status as a protected veteran, or any characteristic protected by applicable law.</div></div>

Senior Information System Security Officer (ISSO) Support

Gunnison Consulting Group, Inc.

<div>Description:
<p><i>
Salary: $115,000 - $125,000/year</i></p><p>
We are seeking a knowledgeable and detail-oriented Cybersecurity Compliance Subject Matter Expert (SME) to support our Department of State client. This role will support the continued maturation of the customer&rsquo;s cybersecurity program by contributing expert guidance on cyber policy, compliance, risk management, and operational reporting. The ideal candidate combines deep compliance expertise with strong analytical and data visualization skills to support informed decision-making through metrics and dashboards.</p><p><b>
Duties and Responsibilities</b></p><ul><li>
Support the development, interpretation, and implementation of cybersecurity policies and procedures within a secure software development environment, ensuring alignment with applicable security framework series and federal requirements.</li><li>
Serve as a cybersecurity compliance SME for U.S. Government contracting environments, maintaining up-to-date knowledge of relevant regulations, standards, and policies and advising stakeholders on their application.</li><li>
Conduct risk assessments, identify security control gaps and vulnerabilities, and recommend mitigation strategies to strengthen security posture across development and operational environments.</li><li>
Support compliance monitoring activities, including preparation for audits, assessments, and inspections; assist in identifying findings and contributing to remediation planning and documentation.</li><li>
Collaborate with security, engineering, and program stakeholders to support the development and delivery of role-based cybersecurity training (e.g., SO, ISSO, ISSM) and security awareness initiatives.</li><li>
Develop, maintain, and analyze cybersecurity compliance metrics to measure program effectiveness, control performance, and risk trends.</li><li>
Design and produce cybersecurity dashboards and reports using Power BI, Excel, and related tools, translating complex compliance and risk data into clear, actionable visualizations for technical and non-technical audiences.</li><li>
Support continuous process improvement by identifying opportunities to streamline compliance tracking, reporting, and documentation within a dynamic software development environment.</li></ul>
Requirements:
<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Systems, Computer Science, or a related field; equivalent relevant experience may be considered in lieu of a degree.</li><li>
Minimum of 8 years of experience in cybersecurity compliance, with demonstrated experience supporting U.S. Government contracting and software development environments.</li><li>
Strong working knowledge of U.S. Government cybersecurity regulations and standards, including NIST, FISMA, FedRAMP, DFARS, and related frameworks.</li><li>
Experience supporting security audits, assessments, or compliance reviews within federal or government-regulated environments.</li><li>
Proven ability to analyze compliance and security data and translate findings into meaningful metrics, reports, and recommendations.</li><li>
Proficiency in Excel (data analysis, pivot tables, charts) and experience designing Power BI dashboards or similar data visualization solutions.</li><li>
Excellent written and verbal communication skills, with the ability to clearly explain cybersecurity risks, compliance requirements, and trends to diverse stakeholders.</li><li>
Detail-oriented and proactive mindset with a strong focus on accuracy, documentation quality, and continuous improvement.</li></ul><p><b>
Desired Qualifications:</b></p><ul><li>
Cybersecurity certifications such as CISSP, CISM, or equivalent.</li><li>
Experience with Department of State FAM/FAH, including integration of requirements into system documentation, processes, and compliance artifacts.</li><li>
Prior experience developing or maintaining executive-level or program-level cybersecurity dashboards.</li><li>
Familiarity with SDLC-related compliance artifacts (SSP, POA&amp;M, RA, CMF documentation, etc.).</li></ul><p><b>
Clearance Requirement</b>: Active Secret clearance required.</p><p><br>
The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.<br>
Gunnison Consulting Group's total compensation package also includes bonus and profit-sharing opportunities, depending on company and employee performance. Available employee benefits include:</p><ul><li>
3 weeks of Personal Leave your first year</li><li>
11 paid Holidays each year</li><li>
5 days of Flexible Time Off each year</li><li>
401(k) company match at 50% up to 10% of your salary</li><li>
Medical, Dental and Vision Insurance</li><li>
Life and Disability Insurance</li><li>
Public Transportation Subsidies</li><li>
Certifications and Training Allowance - $2,500/year!</li></ul><p><b>
Why Join Gunnison?</b></p><ul><li>
Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.</li><li>
Quality is our top priority.</li><li>
Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.</li><li>
There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.</li><li>
We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.</li><li>
We hire for careers at Gunnison, not to fill a position.</li></ul><p>
Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.<br>
In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects<b>.</b> <b><i>By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could</i></b><b>,</b> the company has thrived for over 25 years.</p></div>

Cybersecurity Compliance SME

Explore 61+ Cybersecurity specialist in Washington this April. Find roles across top companies and apply now to boost your career.

61 cybersecurity specialist jobs In Washington

Senior Cybersecurity Analyst

Senior Cybersecurity Analyst

IT Security Engineer

Software Enterprise Architect

Talent Network - All Locations

Senior Information System Security Officer (ISSO) Support

Cybersecurity Compliance SME