information security analyst

Arrowhead Pharmaceuticals

<div><div>Arrowhead Pharmaceuticals, Inc. (Nasdaq ARWR) is a commercial stage biopharmaceutical company that develops medicines that treat intractable diseases by silencing the genes that cause them. Using a broad portfolio of RNA chemistries and efficient modes of delivery, Arrowhead therapies trigger the RNA interference mechanism to induce rapid, deep, and durable knockdown of target genes. RNA interference, or RNAi, is a mechanism present in living cells that inhibits the expression of a specific gene, thereby affecting the production of a specific protein. Arrowhead's RNAi-based therapeutics leverage this natural pathway of gene silencing.

Arrowhead is focused on developing innovative drugs for diseases with a genetic basis, typically characterized by the overproduction of one or more proteins that are involved with disease. The depth and versatility of our RNAi technologies enables us to potentially address conditions in virtually any therapeutic area and pursue disease targets that are not otherwise addressable by small molecules and biologics. Arrowhead is leading the field in bringing the promise of RNAi to address diseases outside of the liver, and our clinical pipeline includes disease targets in the liver and lung with a promising pipeline of preclinical candidates.

Arrowhead's corporate headquarters is in Pasadena, CA with research and development teams in Madison, WI &amp; San Diego, CA, and a state of the art manufacturing facility in Verona, WI. Our employees are nimble, science-driven innovators who are collaborating to bring new therapies to patients in need.</div>
The Position

The Information Security Systems Analyst is responsible for the day-to-day administration, operation, and continuous improvement of the organization's Microsoft Purview platform, serving as the primary subject matter expert for data governance, data loss prevention (DLP), and information protection. This role operates at the intersection of information security, data governance, and regulatory compliance, ensuring that sensitive data - including intellectual property, clinical trial data, and personally identifiable information - is properly classified, protected, and governed in accordance with applicable regulations and internal policies. In addition to Purview-focused responsibilities, this analyst contributes to broader information security operations including troubleshooting endpoints, working in Microsoft 365, and Intune.

Responsibilities
<ul>
<li>The analyst will serve as the hands-on operational owner of Microsoft Purview, managing the platform on a daily basis across its core functional areas:</li>
<li>Information Protection &amp; Data Classification - Administer and maintain Microsoft Purview sensitivity labels, label policies, and auto-labeling configurations. Develop and refine classification taxonomies appropriate to pharmaceutical data types, including research data, regulatory submissions, and patient data. Review and tune auto-classification rules to minimize false positives and ensure accurate labeling across Microsoft 365 and connected data sources.</li>
<li>Data Loss Prevention - Build, maintain, and continuously tune DLP policies across Exchange, SharePoint, OneDrive, Teams, and endpoints. Investigate DLP policy matches and alerts, differentiate true policy violations from false positives, and work with business stakeholders to refine rules without disrupting legitimate business workflows. Document DLP incidents and escalate confirmed violations per the incident response process.</li>
<li>eDiscovery &amp; Content Search - Support legal hold requests and eDiscovery collections. Work with Legal and HR to scope, execute, and export content searches accurately and in accordance with chain-of-custody requirements.</li>
<li>Insider Risk Management - Administer Purview Insider Risk Management policies, review alerts, and coordinate with HR, Legal, and Security leadership on confirmed or suspected insider risk cases. Maintain strict confidentiality in handling all insider risk data.</li>
<li>Audit &amp; Reporting - Generate and interpret Purview audit logs, compliance reports, and dashboard analytics. Provide regular reporting to management on DLP incidents, label adoption rates, policy effectiveness, and compliance posture. Identify trends and recommend adjustments to policies and configurations.</li>
<li>Platform Administration &amp; Health Monitoring - Monitor the health and performance of the Purview platform, apply configuration changes and updates in alignment with change management processes, and stay current on Microsoft feature releases relevant to Purview. Manage connector integrations with third-party data sources as required.</li>
<li>Maintain clear documentation (runbooks, diagrams, standards, exceptions) and contribute to a knowledge base.</li>
<li>Triage security alerts and escalate as necessary.</li>
</ul>
Requirements
<ul>
<li>Bachelor's degree in Information Security, Information Technology, Computer Science, or a related field, or equivalent practical experience</li>
<li>3+ years of experience in Information Security, IT compliance, or data governance role</li>
<li>Demonstrated hands-on experience administering Microsoft Purview or its predecessor Microsoft 365 Compliance Center, including at least two of the following areas: sensitivity labels, DLP, retention policies, eDiscovery, or Insider Risk Management</li>
<li>Experience working within or supporting a regulated industry environment</li>
<li>Strong analytical and problem-solving skills with the ability to investigate alerts, interpret audit logs, and distinguish signal from noise</li>
<li>Effective written and verbal communication skills, with the ability to explain technical concepts to non-technical stakeholders</li>
</ul>
Preferred
<ul>
<li>Microsoft certifications relevant to security and compliance, such as SC-401</li>
<li>Experience with Microsoft Defender for Cloud Apps (MCAS) and its integration with Purview</li>
<li>Prior experience in the pharmaceutical, biotech, or life sciences sector</li>
<li>Experience supporting eDiscovery or legal hold workflows in collaboration with Legal teams</li>
<li>Exposure to SIEM tools, endpoint detection and response (EDR) platforms, or identity and access management systems</li>
<li>Comfortable working across functional teams including Legal, Compliance, HR, and IT, and possesses the judgment to handle sensitive data and insider risk information with appropriate discretion.</li>
</ul><div>
Arrowhead provides competitive salaries and an excellent benefit package.
Candidates must have current, valid authorization to work in the country where this role is located. 

California Applicant Privacy Policy</div></div>

Information Security Analyst II

IT Security C&T

<div>
 
 Company Description
 
 
 
 IT Security C&amp;T is an innovative, fast-growing security consulting and training company. Our management team combined with our consultants and engineers work together to deliver comprehensive security solutions to our customers around the MENA region.
 
 
 IT Security C&amp;T is continuously expanding its team of qualified professionals for a wide range of opportunities. Interested candidates are required to apply via our Career webpage on our website (www.itsecurityct.com)
 
 
 
 Job Description
 
 
 
 The Security Analyst will participate and be part of information security monitoring and incident handling team in order to monitor and manage all information security incidents and risks and solve them as per the business security requirements. The Security Analyst will work and follow-up with the IT Teams and other Business Units to develop action plans to mitigate identified vulnerabilities and promote security initiatives.
 
 
 Key Activities Include:
 
 
 <ul>
 <li>
 Work as part of 24x7 security operation team
 </li>
 <li>
 Monitor the Security Information and Event Management System (SIEM) and follow up all related security incidents and events.
 </li>
 <li>
 Follow the day-to-day operations related to own job to ensure continuity of work
 </li>
 <li>
 Respond to security incidents and report on incident handling and resolution.
 </li>
 <li>
 Participate in forensic analysis and data recovery, and penetration testing.
 </li>
 <li>
 Perform daily security analysis and scanning and assessment for information security risks, threats and vulnerabilities.
 </li>
 <li>
 Proactive research to identify and understand new threats, vulnerabilities, and exploits.
 </li>
 <li>
 Configuration and administration of security systems and tools.
 </li>
 <li>
 Define and evaluate security technologies required to ensure safe technology operation and detection of cyber-attack.
 </li>
 <li>
 Provide the security recommendations on actions which assist in improving security posture within CLIENT Environment.
 </li>
 <li>
 Follow all relevant departmental policies, processes, standard operating procedures and instructions so that work is carried out in a controlled and consistent manner
 </li>
 <li>
 Participating in reviewing and documenting computer security and emergency gate identified vulnerabilities and promote security initiatives.
 
 
 </li>
 </ul>
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in IT, Engineering
 </li>
 <li>
 4+ years of experience in IT/Security operations or SOC role.
 </li>
 <li>
 Network+, CCNA R&amp;S, Security +, Linux security, windows security or forensics training is plus.
 </li>
 <li>
 Professional Security certification preferred (CIHE, CEH, CPTE, or equivalent).
 </li>
 <li>
 Knowledge and experience in network switches, routers and firewalls
 </li>
 <li>
 Knowledge of Microsoft Word, Project, Excel, Access,
 
 
 </li>
 </ul>
 Additional Information
 
 
 
 Location
 
 : Manama-Bahrain
</div>

SOC Analyst L2- Bahrain

GSSTech Group

<div>We are looking for a talented and enthusiastic Emirati national to join our Security Operations Centre (SOC) team as a Security Analyst. If you have a strong knowledge and interest in network security, this position might be the right one for you. The Associate Security Analyst will be responsible for monitoring multiple security technologies and events using the Security Information Event Management (SIEM) tool in order to detect and identify IT security related incidents.
This role requires:<ul><li>
2 - 3 years of experience in information security, in areas such as security operations, intrusion detection, incident analysis, incident handling, log analysis, or firewall administration.</li><li>
2 - 3 years of experience in one of the following: Network operations or engineering or system administration on Unix, Linux, Windows.</li></ul>
Job requirements
Responsibilities:<ul><li>
Follow detailed operational process and procedures to appropriately analyse, escalate, and assist in remediation of critical information security incidents.</li><li>
Correlate and analyse events using the Splunk/Log Rhythm/Qradar SIEM tool to detect IT security incidents.</li><li>
Conduct analysis of log files, including forensic analysis of system resource access.</li><li>
Review customer reports to ensure quality and accuracy.</li><li>
Monitor multiple security technologies, such as SIEM, IDS/IPS, Firewalls, Switches, VPNs, and other security threat data sources.</li><li>
Respond to inbound requests via phone and other electronic means for technical assistance with managed services.</li><li>
Respond in a timely manner (within documented SLA) to support, threat, and other cases.</li><li>
Document actions in cases to effectively communicate information internally and to customers.</li><li>
Resolve problems independently and understand escalation procedure.</li><li>
Maintain a high degree of awareness of the current threat landscape.</li><li>
Participate in knowledge sharing with other analysts and writing technical articles for Internal Knowledge Bases.</li><li>
Perform other essential duties as assigned.</li><li>
Able to work in rotating shifts within a 24/7 operating environment.</li></ul>
Qualifications &amp; Skills<ul><li>
Emirati candidates with family book will be preferred for this role.</li><li>
A Degree in Computer Science, Information Systems, Electrical Engineering, or a closely related degree.</li><li>
An active interest in internet security, incident detection, network and systems security.</li><li>
A sound knowledge of IT security best practices, common attack types and detection/prevention methods.</li><li>
Demonstrable experience of analysing and interpreting system, security, and application logs.</li><li>
Knowledge of the type of events that both Firewalls, IDS/IPS, and other security related devices produce.</li><li>
Experience in using SIEM tools such as Splunk, Log Rhythm, Qradar, Alien Vault, NitroSecurity, etc.</li><li>
TCP/IP knowledge, networking, and security product experience.</li><li>
Knowledge of Cyber Kill Chain and MITRE ATT&amp;CK frameworks.</li><li>
Possible attack activities, such as scans, man in the middle, sniffing, DoS, DDoS, etc. and possible abnormal activities, such as worms, Trojans, viruses, etc.</li><li>
CCNA, CISSP, GCA, GCIA, GCIH, CEH certification would be preferable.</li><li>
Outstanding organizational skills.</li><li>
Exclusive focus and vast experience in IT.</li><li>
Strong analytical and problem-solving skills.</li><li>
A motivated, self-managed, individual who can demonstrate above average analytical skills and work professionally with peers and customers even under pressure.</li><li>
Very good communication skills.</li><li>
Strong written and verbal skills.</li><li>
Strong interpersonal skills with the ability to collaborate well with others.</li><li>
Ability to speak and write in English &amp; Arabic is mandatory.</li></ul> 
Benefits<ul><li>
Health insurance with one of the leading global providers for medical insurance.</li><li>
Career progression and growth through challenging projects and work.</li><li>
Employee engagement and wellness campaigns activities throughout the year.</li><li>
Excellent learning and development opportunities.</li><li>
Inclusive and diverse working environment.</li><li>
Flexible/Hybrid working environment.</li><li>
Open door policy.</li></ul></div>

Associate Security Analyst (UAE National)

Covenant Health

<div>Overview:<div></div><div> 
Cybersecurity Analyst Associate</div><div>
Full Time, 80 Hours Per Pay Period, Day Shift</div><div></div><div> 
Covenant Health Overview:</div><div>
Covenant Health is the region&rsquo;s top-performing healthcare network with 10 hospitals, outpatient and specialty services, and Covenant Medical Group, our area&rsquo;s fastest-growing physician practice division. Headquartered in Knoxville, Covenant Health is a community-owned integrated healthcare delivery system and the area&rsquo;s largest employer. Our more than 11,000 employees, volunteers, and 1,500 affiliated physicians are dedicated to improving the quality of life for the more than two million patients and families we serve every year. Covenant Health is the only healthcare system in East Tennessee to be named a Forbes &ldquo;Best Employer&rdquo; seven times.</div><div></div><div> 
Position Summary:</div><div>
Under close supervision, the Cybersecurity Analyst Associate is responsible for assisting in the protection of Covenant Health&rsquo;s information systems and data assets from cyber threats. This role involves monitoring security incidents, supporting the management of cybersecurity tools and platforms, and ensuring compliance with healthcare regulations such as HIPAA and HITECH, while adhering to frameworks such as NIST and HITRUST. The analyst will work closely with IT infrastructure, application teams, and clinical departments to implement security best practices and maintain a secure environment across the enterprise.</div>
Responsibilities:
<ul><li>Monitor security alerts and incidents using SIEM and EDR platforms.</li><li>
Assist in conducting vulnerability assessments and coordinating remediation efforts with system and network teams.</li><li>
Help develop and maintain security policies, procedures, and standards aligned with NIST and CIS frameworks.</li><li>
Support investigations of security breaches and coordinate incident response activities.</li><li>
Perform regular audits of access controls, user permissions, and privileged accounts.</li><li>
Collaborate with infrastructure and application teams to ensure secure system configurations and patch management.</li><li>
Support compliance initiatives including HIPAA, HITECH, PCI-DSS, and other regulatory requirements.</li><li>
Assist in conducting risk assessments and recommending mitigation strategies for new technologies and projects.</li><li>
Provide cybersecurity awareness training and guidance to staff across the organization.</li><li>
Participate in interdisciplinary IT projects to ensure security is embedded throughout the system lifecycle.</li><li>
Maintain current knowledge of emerging threats, vulnerabilities, and cybersecurity technologies.</li><li>
Document and report on security metrics, incidents, and risk posture to IT leadership.</li><li>
Assist with the implementation of continuous security monitoring and threat intelligence analysis.</li><li>
Support forensic investigations and digital evidence collection.</li><li>
Collaborate with legal and compliance teams during audits and regulatory reviews.</li><li>
Follows policies, procedures, and safety standards. Completes required education assignments annually. Works toward achieving goals and objectives, and participates in quality improvement initiatives as requested.</li><li>
Performs other duties as assigned.</li></ul>
Qualifications:
<div>
Minimum Education:
</div><div>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or a related field. Equivalent work experience and certifications (e.g. Security+, CvSA+, GSEC) will be considered.</div><div></div><div> 
Minimum Experience:
</div><div>Two (3) years of experience in IT, with at least one (1) year focused on cybersecurity in a large, complex environment.</div><div></div><div> 
Licensure Requirement:
</div><div>None</div></div>

CYBERSECURITY ANLST ASSOC

Audubon Companies

<div>JOB DESCRIPTION:
The IT Security Analyst II is responsible for monitoring, analyzing, and remediating security threats across the organization's IT environment. This role supports day-to-day security operations while also taking ownership of recurring security processes, incident investigation, control administration, compliance documentation, and security improvement initiatives. The analyst will work closely with IT, the Security Operations Center (SOC), business stakeholders, and external partners to strengthen email security, endpoint protection, identity and access management, cloud productivity platform security, security awareness, and audit readiness.

PRIMARY RESPONSIBILITIES:
<ul><li>Monitor, triage, and investigate reported phishing attempts, suspicious emails, account activity, endpoint events, and other user-reported or system-generated security incidents; coordinate containment, remediation, and escalation as required.</li>
<li>Review and analyze alerts from SOC services, SIEM platforms, endpoint protection tools, identity systems, Microsoft 365 security controls, and threat intelligence sources; identify trends, false positives, recurring risks, and opportunities for improved detection.</li>
<li>Tune and maintain email security controls, including spam, phishing, impersonation, and malware filtering; recommend and implement rule changes to reduce risk while minimizing business disruption.</li>
<li>Administer phishing simulation campaigns, security awareness training, user follow-up, and reporting; partner with IT and business leaders to improve user resilience against social engineering threats.</li>
<li>Administer and support endpoint protection, internet security, zero-trust desktop controls, and related security platforms; assist with configuration reviews, exception handling, policy updates, and troubleshooting.</li>
<li>Monitor Microsoft 365 user account security, email activity, conditional access signals, risky sign-ins, and related security posture indicators; support remediation of compromised or high-risk accounts.</li>
<li>Support vulnerability management and security hygiene activities by reviewing findings, coordinating remediation with IT teams, validating corrective actions, and documenting risk exceptions where appropriate.
</li><li>Maintain ISMS records, evidence repositories, control documentation, incident records, and audit support materials for ISO 27001 and other compliance or customer-driven security requirements.
</li><li>Participate in incident response activities, risk assessments, tabletop exercises, process improvement initiatives, and security projects; contribute practical recommendations that reduce operational risk and improve security maturity.
</li><li>Prepare recurring metrics, status updates, and management-level summaries related to security incidents, user awareness, control effectiveness, compliance activities, and open remediation items.
</li><li>Provide security guidance to IT staff and non-technical users, balancing risk reduction with business continuity and practical user support.</li>
</ul>
Health, Safety, and Environmental Responsibilities:
<ul>
<li>All employees are responsible for supporting Audubon Companies' Health, Safety, and Environmental (HSE) policies and procedures. This includes:</li>
<li>Performing duties in a manner that protects personal and team health and safety</li>
<li>Participating in required HSE training, meetings, and reporting activities</li>
<li>Identifying and reporting hazards, near misses, and unsafe conditions</li>
<li>Following safe work practices and complying with applicable regulatory requirements</li>
</ul>
EXPERIENCE AND SKILL REQUIREMENTS:
<ul>
<li>Bachelor's degree in Information Security, Computer Science, Engineering, Information Technology, or related field, or equivalent combination of education, training, and experience.</li>
<li>Three to five years of experience in IT security, cybersecurity operations, infrastructure security, identity administration, incident response, or a closely related IT role.</li>
<li>Hands-on experience with security tools and platforms such as SIEM, endpoint detection and response, endpoint protection, email security, identity and access management, vulnerability management, and Microsoft 365 security administration.</li>
<li>Working knowledge of phishing analysis, incident triage, endpoint investigation, identity-related threats, cloud productivity platform security, and common attack techniques.</li>
<li>Experience administering or supporting Okta, Microsoft 365, endpoint protection, internet security, and zero-trust or conditional access controls preferred.</li>
<li>Understanding of ISMS practices, security policies, risk management, audit evidence collection, and compliance frameworks such as ISO 27001.</li>
<li>Ability to analyze security events, document findings clearly, prioritize risk-based remediation activities, and communicate practical recommendations to technical and non-technical audiences.
</li><li>Strong written and verbal communication skills in English; Spanish proficiency is a plus but is not required.
</li><li>Ability to work independently, manage recurring security responsibilities, collaborate across teams, and support occasional after-hours incident response or planned security activities when business needs require.
</li><li>Relevant certifications such as CompTIA Security+, CySA+, SSCP, GSEC, CISSP, CISM, or Microsoft security certifications are preferred.</li>
</ul>
No Recruiters, please!

Equal Opportunity Employer/Veterans/Disabled</div>

IT Security Analyst II

U.S. Marine Corps

Marine Corps Community Services (MCCS) is looking for the best and brightest to join our Team! MCCS is a comprehensive program that supports and enhances the quality of life for Marines, their families, and others in the Marine Corps Community. We offer a team-oriented environment comprised of military personnel, civilian employees, contractors and volunteers who keep the organization functioning smoothly and effectively. As a service-oriented organization, we never waver in our commitment to our Corps.
 
This position is located at Headquarters (Quantico, VA). Candidates selected for this position will serve as a Cyber Security Analyst, NF3.
 
Major Duties
 
The position serves as a Cybersecurity Analyst for the Information Technology Directorate (MRI), NAF Business and Support Services Division (MR), Manpower and Reserve Affairs Department, Headquarters Marine Corps. The incumbent will provide vulnerability management, intrusion prevention, and security information and event management services to the Marine Corps installations worldwide.
 <ul>
<li>Assist senior analysts in collaborating with various teams within the MRI directorate to ensure security is embedded in all aspects of Marine Corps Community Services (MCCS) systems and networks.</li>
<li>Monitor MCCS network traffic and security dashboards to identify potential anomalies. Triage initial alerts and escalate verified incidents to senior analysts for remediation.</li>
<li>Assist senior analysts in identifying trends and emerging threats through real-time security monitoring and data analytics.</li>
<li>Assist senior analysts with identifying malicious activity to determine weaknesses exploited, exploitation methods, and effects on systems and information.</li>
<li>Monitor vulnerability scans across the MCCS network to confirm patch levels and remediation status. Assist senior analysts with researching and testing remediations for identified vulnerabilities and weaknesses.</li>
<li>Follow established procedures to conduct basic security testing and validation of IT systems to detect misconfigurations and potential threats.</li>
<li>Gather and organize security data to help track compliance metrics for MCCS network infrastructure. Maintain accurate records for audit readiness.</li>
<li>Provide professional support to MCCS users by responding to security-related inquiries and assisting with the implementation of security best practices.</li>
</ul>
Qualifications
 
Associates' Degree in Information Technology or Business related field appropriate to the work of position AND transcript with at least 9 hours of coursework in audit log analysis, vulnerability management, or cybersecurity (CY); OR an appropriate combination of education and experience that demonstrates possession of knowledge and skill equivalent to that gained in the above, OR appropriate experience that demonstrates the applicant has acquired the knowledge, skills, and abilities equivalent to that gained in the above.
 
Knowledge of specific operational impacts of cyber security lapses, cyber threats and vulnerabilities. Understand business continuity and disaster recovery continuity of operations plans. Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy. Understanding of risk management processes, secure configuration management techniques, encryption algorithms, host/network access control mechanisms, vulnerability information dissemination sources, Payment Card Industry (PCI) data security standards, Personally Identifiable Information (PII) data security standards, incident categories, incident responses, timelines for responses, intrusion detection methodologies, and techniques for detecting host and network-based intrusions.
 
Skill in preserving evidence integrity according to standard operating procedures or national standards, protecting a network against malware, using security event correlation tools, performing damage assessments, design incident response for cloud service models, identifying, capturing, containing and reporting malware, running Security Content Automation Protocol (SCAP) content, and Security Technical Implementation Guides (STIGS) based tools for benchmark and security configuration reviews.
 
Ability to identify systemic security issues based on the analysis of signatures and indicators from use cases, design incident response for cloud service models, apply cybersecurity and privacy principles to organizational requirements, conduct audit log analysis, and translate results into evaluative conclusions.
 
As an authorized and privileged user of Department of Defense Information Systems must fulfill the requirement to complete Cyberspace Workforce Qualification and Management Program (DoDM 8140.03) as a condition of access within six months of employment. This position has been determined as a Cybersecurity Analyst with proficiency level of Basic.
 
This position had been determined as Moderate Risk. As a condition of employment, the incumbent must be able to obtain and maintain an Access National Agency Check and Inquiries (ANACI/ Tier 3) Secret Clearance to access classified information.
 
How To Apply
 
All applications must be submitted online via the MCCS Careers website.
 
Resumes/applications emailed or mailed will not be considered for this vacancy announcement. Resumes with personal photographs will not be considered for this vacancy. To be considered for employment, the application or resume must be submitted online by 11:59 PM (ET) on the closing date of the announcement.
 
Note: To check the status of your application or return to a previous or incomplete application, log into your MCCS user account and review your application status.
 
Closing Statement
 
GENERAL INFORMATION: Applicants are assured of equal consideration regardless of race, age, color, religion, national origin, sex, GINA, political affiliation, membership or non-membership in an employee organization, marital status, physical handicap which has no bearing on the ability to perform the duties of the position. This agency provides reasonable accommodations to applicants with disabilities. If you need a reasonable accommodation for any part of the application and hiring process, please notify the agency. The decision on granting reasonable accommodation will be on a case-by-case basis.
 
It is Department of Navy (DON) policy to provide a workplace free of discrimination and retaliation. The DON No Fear Act policy link is provided for your review: https://www.secnav.navy.mil/donhr/Site/Pages/No-Fear-Act.aspx
 
As part of the employment process, Human Resources Division may obtain a Criminal Record Check and/or an Investigative Consumer Report. Employment is contingent upon the successful completion of a National Agency Check and Inquiries (NACI). For all positions requiring access to firearms or ammunition, the Federal Government is prohibited from employing individuals in these positions who have ever been convicted of a misdemeanor crime of domestic violence, or a felony crime of domestic violence adjudged on or after 27 November 2002. Selectees for such positions must submit a completed DD Form 2760, Qualification to Possess Firearms or Ammunition, before a final job offer can be made.
 
Direct Deposit of total NET pay is mandatory as a condition of employment for all appointments to positions within MCCS.
 
Required Documents: 
<ul>
<li>Education/certification certificate(s), if applicable.</li>
<li>If prior military, DD214 Member Copy</li>
</ul>
This activity is a Drug-free workplace. The use of illegal drugs by NAF employees, whether on or off duty, cannot and will not be tolerated. Federal employees have a right to a safe and secure workplace, and Marines, sailors, and their family members have a right to a reliable and productive Federal workforce.
 
Involuntarily separated members of the armed forces and eligible family members applying through the Transition Assistance Program must submit a written request/statement (may be obtained from the MCCS Human Resources Office) and present ID card with "TA" stamped in red on front of card.
 
INDIVIDUALS SELECTED FROM THIS ANNOUNCEMENT MAY BE CHANGED TO PART-TIME OR FULL-TIME AT MANAGEMENT'S DISCRETION WITHOUT FURTHER COMPETITION.
 
ALL ONLINE APPLICATIONS MUST BE RECEIVED BY 1159PM EASTERN TIME (ET) ON THE CLOSING DATE LISTED IN THE JOB POSTING.

CYBER SECURITY ANALYST

Concept Plus

<div>About Concept Plus 
 
Concept Plus is a mission-focused technology solutions provider that transforms IT concepts into impactful solutions for federal agencies. Headquartered in Fairfax, VA, we bring the agility, responsiveness, and customer intimacy of a small business combined with the quality and infrastructure of a larger firm. 
Recognized as an award-winning Oracle partner, we have delivered innovative solutions across Defense, Intelligence, Civilian, Health IT, and Tribal sectors. Our highly certified experts build systems that drive efficiency, accelerate modernization, and ensure mission outcomes with certainty. 
We offer competitive pay, comprehensive health, dental, and vision insurance, paid life insurance, paid time off, 11 paid holidays, performance bonuses, tuition reimbursement, unlimited training, and the opportunity to thrive in a collaborative, flexible, and innovative environment. 
For more information, visit www.conceptplus.com. 
About the role
Concept Plus is seeking a highly capable, self-driven Cyber Analyst to support a critical software modernization initiative for our client. This position plays a key role in analyzing mission-focused requirements, streamlining processes, and enhancing decision-making for operations.
As the strategic link between operational objectives and technology solutions, the Cyber Analyst will translate complex business needs into actionable insights and support the successful execution of priorities while ensuring alignment with client compliance standards.
This role operates within a collaborative Agile and DevSecOps framework to ensure secure, timely, and iterative delivery of capabilities. The ideal candidate thrives in a fast-paced, evolving environment and brings a deep understanding of both business processes and technological integration. 
What you'll do<ul><li>
Lead and maintain the full RMF/ATO lifecycle, managing security authorization packages and updating SSPs, POA&amp;Ms, risk assessments, and continuous monitoring artifacts.</li><li>
Ensure system confidentiality, integrity, and availability through compliance with NIST 800‑53, DoDI 8500.01, DoDI 8510.01, and related DoD cybersecurity policies.</li><li>
Support Agile/DevSecOps deployments, integrating cybersecurity requirements into sprints, CI/CD pipelines, release schedules, and system design reviews.</li><li>
Perform vulnerability scanning, assessment, and remediation&mdash;using Nessus, eMASS, SonarQube, Checkmarx, Trivy, Dependency Track&mdash;and ensure compliance with DISA STIGs.</li><li>
Perform cloud focused vulnerability scanning, assessment, and remediation using Nessus, eMASS, SonarQube, Checkmarx ensuring compliance with cloud security baselines.</li><li>
Provide security engineering support, including secure architecture input, SSO/SSL integration, secure configuration guidance, and API/cloud security reinforcement.</li><li>
Collaborate with technical teams, ISSMs, and AO representatives to support audits, inspections, security reviews, and risk mitigation activities.</li><li>
Track, report, and respond to cybersecurity incidents, ensuring timely coordination and recovery actions.</li><li>
Develop and maintain key cybersecurity documentation, including ISAs, MOAs, SoD matrices, architecture diagrams, and application/database security artifacts.</li><li>
Monitor project progress and deliver clear, actionable cybersecurity reports and risk insights to leadership and government stakeholders.</li><li>
Communicate effectively with internal teams, customers, and stakeholders in a clear, concise, and professional manner.</li></ul> 
Required Qualifications<ul><li>
US Citizen</li><li>
Ability to obtain and/or maintain a government clearance.</li><li>
Bachelor&rsquo;s Degree in an IT related field</li><li>
CISSP Certification (IAT Level 3 Certification)</li><li>
8+ years of experience as Cyber Analyst</li><li>
5+ years&rsquo; experience with ATO procurement in Cloud Environment</li><li>
5+ years in DoD Environment</li><li>
5+ Years Experience with the Risk Management Framework Process</li><li>
5+ Years Experience operating the Enterprise Mission Assurance Support Service Application (eMASS)</li></ul> 
Preferred Qualifications<ul><li>
DOD/Government contracting experience, Government IT systems experience.</li><li>
Able to work independently and report to a blended Cyber Team ISSM</li><li>
Good documentation skills</li><li>
Confident communicator with excellent verbal and written skills</li></ul> 
Concept Plus is an Equal Opportunity Employer. As such, we will give your application full consideration without regard to your race, color, religion, sex, age, national origin, disability, veteran status, sexual orientation, gender identity, or any other classification protected by federal, state, or local law.</div>

Cyber Analyst

Search 10000+ Information security analyst jobs near you this June. New roles added regularly across leading industries. Apply today.