security and compliance analyst

Google

<div>
 The application window will be open until at least May 21, 2026. This opportunity will remain online based on business needs which may be before or after the specified date.
 
 
 Note: Google's hybrid workplace includes remote roles. By applying to this position you will have an opportunity to share your preferred working location from the following:
 
 
 
 Remote locations: Utah, USA; United States.
 
 
 Minimum qualifications:
 
 
 
 <ul>
 <li>
 Bachelor's degree in Cybersecurity, Information Technology, a related technical field, or equivalent practical experience.
 </li>
 <li>
 2 years of experience in a SOC environment or information security role.
 </li>
 <li>
 Experience with one or more EDR tools (e.g., Trellix HX, etc.) or NDR tools (e.g., Trellix NX, etc.).
 </li>
 <li>
 Experience with malware triage (static and dynamic analysis) or script de-obfuscation.
 
 
 </li>
 </ul>
 
 Preferred qualifications:
 
 
 
 <ul>
 <li>
 Security certifications such as GCIH, GCFA, GCFR, or GREM.
 </li>
 <li>
 4 years of experience in a SOC environment or a specialized Information Security role.
 </li>
 <li>
 Experience leading investigations or participating in response operations for high-severity events.
 </li>
 <li>
 Experience in customer service, including the ability to clearly communicate technical findings to stakeholders.
 </li>
 <li>
 Proficiency in scripting (e.g., Python, JavaScript, PowerShell).
 </li>
 <li>
 Proficiency with AI productivity tools to accelerate incident investigation reporting, or code/script development.
 
 
 </li>
 </ul>
 
 About The Job
 
 
 
 In this role, your standard working hours will be 9 a.m. - 5 p.m. PT, Monday through Friday.
 
 
 Part of Google Cloud, Mandiant is a recognized leader in dynamic cyber defense, threat intelligence and incident response services. Mandiant's cybersecurity expertise has earned the trust of security professionals and company executives around the world. Our unique combination of renowned frontline experience responding to some of the most complex breaches, nation-state grade threat intelligence, machine intelligence, and the industry's best security validation ensures that Mandiant knows more about today's advanced threats than anyone.
 
 
 The US base salary range for this full-time position is $102,000-$145,000 + bonus + equity + benefits. Our salary ranges are determined by role, level, and location. Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience, and relevant education or training. Your recruiter can share more about the specific salary range for your preferred location during the hiring process.
 
 
 Please note that the compensation details listed in US role postings reflect the base salary only, and do not include bonus, equity, or benefits. Learn more about benefits at Google .
 
 
 
 Responsibilities
 
 
 
 <ul>
 <li>
 Analyze real-time security events across endpoint, network, and cloud environments using a centralized analyst console and SIEM/Google SecOps platform. Execute basic static and dynamic analysis of suspicious files to determine capabilities.
 </li>
 <li>
 Perform host and network forensic analysis to support incident response efforts, understand attacker activity, and assess customer impact.
 </li>
 <li>
 Determine the severity, impact, and scope of security incidents and compromises. Isolate compromised hosts and stop lateral movement or ransomware propagation.
 </li>
 <li>
 Identify benign patterns (e.g., breach simulations, authorized admin activity) and write logic to suppress them, freeing up the team to focus on threats.
 </li>
 <li>
 Contribute to the improvement of YARA-L rules and detection logic based on the changing Threat Landscape.
 
 
 
 </li>
 </ul>
 Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form .
</div>

Associate Security Analyst, Mandiant Threat Defense

Spell Engineering

Location: Murree Road, RawalpindiShift: Night ShiftEmployment Type: Full-TimeJob Overview:We are seeking a highly experienced and disciplined retired FIA or Cybercrime professional to oversee internal compliance, legal documentation, and operational security. The ideal candidate will bring strong knowledge of regulatory frameworks, investigative procedures, and enforcement protocols to ensure the company operates within legal boundaries and maintains a secure working environment.Key Responsibilities:<ul><li>Oversee and manage all legal documentation, compliance records, and regulatory requirements.</li><li>Ensure company operations align with local laws, cybercrime regulations, and compliance standards.</li><li>Monitor internal activities and implement security protocols to safeguard company assets and data.</li><li>Handle sensitive matters, investigations, and internal disputes with professionalism and confidentiality.</li><li>Coordinate with relevant authorities when required and manage legal communications.</li><li>Supervise staff conduct and ensure adherence to company policies and legal guidelines.</li><li>Maintain proper documentation, record-keeping, and reporting systems.</li><li>Provide guidance on risk management and preventive legal actions.</li><li>Take necessary actions in case of violations or irregularities.</li></ul>Requirements:<ul><li>Retired professional from FIA, Cybercrime Wing, or Law Enforcement Agency.</li><li>Strong understanding of Pakistan cyber laws, compliance procedures, and legal frameworks.</li><li>Proven experience in handling investigations, documentation, and enforcement.</li><li>High level of integrity, discipline, and confidentiality.</li><li>Ability to manage teams and enforce policies effectively.</li><li>Good communication and reporting skills.</li></ul>Preferred Skills:<ul><li>Experience in corporate compliance or private security management.</li><li>Familiarity with digital security, cyber investigations, and fraud prevention.</li><li>Strong decision-making and problem-solving abilities.</li></ul>Working Conditions:<ul><li>Night shift role based on-site at Murree Road, Rawalpindi.</li><li>Requires strong presence, authority, and accountability.</li></ul>Salary:Competitive, based on experience and background.Job Type: Full-timeWork Location: In person

Compliance & Security Officer (Ex-FIA / Cybercrime Professional)

Amazon.com

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
We are open to hiring candidates to work out of one of the following locations: 
 
Redmond, WA, USA | Arlington, VA, USA 
 
Amazon Leo (previously known as Project Kuiper) is an initiative to increase global broadband access through a constellation of over 3,000 Low Earth Orbit (LEO) satellites. Its mission is to bring fast, affordable broadband to unserved and underserved communities worldwide.
 
 
At Leo, we are obsessed with customer trust and are seeking an individual contributor who is creative, and passionate about delivering Governance, Risk and Compliance solutions to meet Leo's regulatory and external assurance needs. In this role, you will work collaboratively with various business and security teams across Amazon to identify compliance needs, assess the maturity of processes and controls, design, build, and execute high-impact security or compliance programs and liaise with external auditors and regulators. 
 
Export Control Requirement: 
 
Due to applicable export control laws and regulations, candidates must be a U.S. citizen or national, U.S. permanent resident (i.e., current Green Card holder), or lawfully admitted into the U.S. as a refugee or granted asylum. 
 
Key job responsibilities 
<ul><li>Design and drive scalable processes within a GRC (Governance, Risk, and Compliance) framework to ensure compliance with Leo's regulatory and contractual security and privacy requirements;</li><li>Building and maintaining compliance certifications such as ISO 27001, ISO 22301, NIST 800-53, ISO27701, SOC 2, GDPR, CCPA etc., identifying applicable security controls, assessing compliance gaps and readiness, developing remediation strategies, and driving remediation activities to completion;</li><li>Driving certifications and assurance programs by liaising with external auditors and other Amazon security teams, articulating control implementation and impact, and establishing considerations for applying security, and risk concepts to a highly technical and complex environment;</li><li>Communicating to key stakeholders and leadership on controls implementation, audit results, compliance program metrics, key risks and areas of program improvement, as well as, seek diverse opinions and coordinate improvement efforts;</li><li>Working closely with engineering, compliance, security, bizdev and Legal teams to identify future compliance and regulatory requirements and define compliance solutions;</li><li>Serving as an advisor on assurance issues;</li><li>Understand and manage cross-functional GRC requirements to translate them into GRC tool; and</li></ul>
- Be comfortable with hands-on day-to-day problem solving and implementing quick and effective action plans to meet short- and long-term priorities. 
 
A day in the life 
Have you wanted an opportunity to secure an advanced satellite based broadband telecom service? The Leo Security team owns the security of product and operations of Leo end-to-end. We provide the necessary infrastructure and mechanisms to ensure the security of our satellite constellation and provide assurance to our customers and regulators on our security, privacy and resiliency programs. Our team drives the implementation of compliance programs, owns the collaboration with external auditors and regulators. 
 
You will work in a start-up like environment, backed by Amazon&rsquo;s infrastructure to bootstrap security mechanisms, and help instill the security culture in the organization. 
 
About the team 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader"> 
BASIC QUALIFICATIONS</h2><ul><li>Bachelor's degree or above</li><li>3+ years of professional experience in governance, risk and compliance designing and implementing controls or experience performing audits over ISO 27001, NIST 800-53, SOC 1/ SOC 2 and other similar globally recognized compliance programs</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>CISSP, CISA, CISM or other security certification</li><li>Experience building strategic relationships with stakeholders, including communicating and collaborating across teams and functions</li><li>Experience working with ITAR and EAR controlled data</li><li>Demonstrate comprehensive understanding of compliance requirements for ISO 27001, ISO 22301, SOC 2, and US Government Compliance Frameworks/Programs (FedRAMP, NIST 800-53, NIST 800-171, NIST Risk Management Framework, FISMA).</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually 
USA, WA, Redmond - 102,000.00 - 178,400.00 USD annually</div>

Security Compliance Specialist, Amazon Leo Security Assurance

Amazon Web Services

<div><h2 class="jobSectionHeader">DESCRIPTION</h2><div>
At AWS, Security is priority zero. As part of the Amazon Web Services (AWS) Security team, we are looking for a technically deep Industry Specialist who is passionate about owning far-reaching projects to drive continuous improvement across AWS at unparalleled scale. As a part of AWS Compliance and Security Assurance you&rsquo;ll have an opportunity to operate in a constantly changing environment, working with AWS business and engineering teams on business-critical, security projects and programs. We work across AWS to drive strategic security initiatives, design and deliver tooling and automation, and continue to raise the bar on security at AWS. Our team also drives programs to enable customers that operate in regulated markets, such as Healthcare, Finance, Government, etc. 
 
Key job responsibilities 
In this role, you will: 
<ul><li>Develop a deep understanding of the operational services, processes, and controls in place that support AWS's security posture.</li><li>Understand our internal security control framework and how it relates to our compliance assessment processes.</li><li>Understand the risk profile of emerging AI platforms and integrate them into our assessment process.
</li><li>Perform service, feature, and other related assessment work for customer and audit requirements.</li><li>Work with service, infrastructure and administrative teams to develop and deliver tooling that improves AWS's security posture.</li><li>Identify process improvement opportunities and high-risk areas.</li><li>Work with service owners to develop innovative solutions to complex technical challenges.</li><li>Manage the build and deployment of new tooling to streamline and automate security-related initiatives.</li><li>Support process improvement and security-related projects in coordination with service teams.</li><li>Manage communications to service teams and stakeholders.</li></ul> 
A day in the life 
<ul><li>Dive deep into the AWS control environment to develop technical understanding of control implementation, and articulate compliance implications to internal and external audit functions.</li><li>Set strategic direction, improve documentation, track progress, coordinate improvement efforts, and monitor process improvement effectiveness.</li><li>Develop broad domain and technical knowledge in AWS security solutions including the operational processes and controls in place that support AWS compliance programs.</li><li>Monitor, evaluate, and continuously improve the organization by being a trusted advisor, facilitator and creative problem solver.</li><li>Develop and share program/project process frameworks, tools, and best practices that can be adopted throughout the organization.</li><li>Liaise with auditors, articulate control implementation and impact, and establish considerations for applying security, privacy and compliance concepts to a technical cloud environment.</li><li>Effectively communicate compliance program results, including assessment status, workflow, remediation, and reporting, to a broad audience including peers and senior leaders.</li></ul> 
About the team 
Diverse Experiences 
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn&rsquo;t followed a traditional path, or includes alternative experiences, don&rsquo;t let it stop you from applying. 
 
Why Amazon Security? 
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon&rsquo;s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. 
 
Inclusive Team Culture 
In Amazon Security, it&rsquo;s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. 
 
Training &amp; Career Growth 
We&rsquo;re continuously raising our performance bar as we strive to become Earth&rsquo;s Best Employer. That&rsquo;s why you&rsquo;ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. 
 
Work/Life Balance 
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there&rsquo;s nothing we can&rsquo;t achieve.</div><h2 class="jobSectionHeader">
BASIC QUALIFICATIONS</h2><ul><li>Bachelor&rsquo;s Degree in Computer Science, Information Systems Management, Mathematics, Accounting/Auditing, or other related fields or equivalent practical experience.</li><li>5+ years of experience in security, audits, customer trust, control assessments, or risk assessments.</li><li>3+ years of experience assessing complex technical processes</li></ul><h2 class="jobSectionHeader">
PREFERRED QUALIFICATIONS</h2><ul><li>Experience with audit or risk program design, control environment process documentation, and control mapping</li><li>Experience with monitoring and automating security controls.</li><li>Experience in third-party and/or internal audit examinations.</li><li>Demonstrates high judgement and risk decision making abilities.</li><li>Have experience in performing technical assessments and documentation of network, operating systems, application security, as well as auditing IT processes, including working knowledge of key controls across a number of industry best practices.</li><li>Experience understanding the risk profile of emerging AI technologies.</li></ul> 
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. 
 
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you&rsquo;re applying in isn&rsquo;t listed, please contact your Recruiting Partner. 
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life &amp; AD&amp;D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. 
USA, VA, Arlington - 102,000.00 - 178,400.00 USD annually 
USA, VA, Herndon - 102,000.00 - 178,400.00 USD annually 
USA, WA, Seattle - 102,000.00 - 178,400.00 USD annually</div>

Security Assurance Specialist , AWS Compliance & Security Assurance

Maverick Business Consultancy (Private) Limited

Role DescriptionWe are looking for a hands-on SECP &amp; FBR Compliance Specialist to manage corporate registration and tax compliance for our growing client portfolio. You will work directly on client cases from company incorporation on SECP e-Services to tax return filing on the IRIS portal and serve as a trusted point of contact for compliance-related matters.Key Responsibilities:<ul><li>Handle end-to-end SECP company registrations &mdash; Private Limited, SMC-Pvt Ltd, Partnerships, and NGOs</li><li>Manage post-incorporation SECP filings and annual compliance requirements</li><li>Process FBR registrations including NTN and STRN</li><li>File sales tax and income tax returns for individual and corporate clients</li><li>Operate and manage client accounts on the IRIS portal</li><li>Communicate professionally with clients on compliance timelines, requirements, and queries</li><li>Maintain accurate records and ensure filing deadlines are consistently met</li></ul>✅ QualificationsRequired:<ul><li>Minimum 2+ years of practical, hands-on experience in SECP &amp; FBR compliance</li><li>Proven proficiency with IRIS portal and SECP e-Services</li><li>Demonstrated ability to independently manage multiple client cases simultaneously</li><li>Strong working knowledge of Pakistani corporate law and tax regulations</li><li>Self-managed, deadline-driven, and able to work effectively in a remote setup</li></ul>Preferred:<ul><li>Prior experience in a consultancy or CA firm environment</li><li>Existing client portfolio or case history to reference</li><li>Professional written and verbal communication skills for direct client interaction</li><li>Familiarity with corporate secretarial work and legal documentation</li></ul>Compensation &amp; EngagementWe offer a flexible engagement model tailored to your experience and availability:<ul><li>Fixed Monthly Retainer, or</li><li>Per-Case Fee, or</li><li>Revenue Sharing Arrangement</li></ul>Job Type: Full-timePay: Rs45,000.00 - Rs60,000.00 per monthWork Location: In person

SECP & FBR Compliance Specialist

Tikal Group Doha

Job Opportunity: Cybersecurity AnalystLocation: Doha, Qatar Company: Tikal Group DohaAbout UsTikal Group Doha is a technology solutions provider specializing in secure systems integration, IT infrastructure, and digital transformation. We are committed to protecting businesses against evolving cyber threats and ensuring the highest standards of data security. As we expand, we are seeking a skilled Cybersecurity Analyst to strengthen our security operations and safeguard our digital assets.Role OverviewThe Cybersecurity Analyst will be responsible for monitoring, analyzing, and responding to security incidents, ensuring compliance with regulatory standards, and proactively identifying vulnerabilities. This role requires technical expertise, analytical skills, and the ability to collaborate across teams to maintain a secure IT environment.Key Responsibilities<ul><li>Monitor and analyze security alerts, logs, and incidents.</li><li>Conduct vulnerability assessments and penetration testing.</li><li>Investigate and respond to cybersecurity threats and breaches.</li><li>Implement and maintain security tools, firewalls, and intrusion detection systems.</li><li>Ensure compliance with Qatari regulations and international cybersecurity standards.</li><li>Collaborate with IT teams to strengthen system defenses and patch vulnerabilities.</li><li>Prepare reports and recommendations for management on security posture.</li><li>Stay updated on emerging threats, trends, and best practices in cybersecurity.</li></ul>Qualifications<ul><li>Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, or related field.</li><li>2&ndash;5 years of experience in cybersecurity analysis or IT security.</li><li>Strong knowledge of security frameworks (ISO 27001, NIST, CIS).</li><li>Proficiency in SIEM tools, firewalls, and endpoint protection systems.</li><li>Experience with incident response, vulnerability management, and risk assessment.</li><li>Excellent problem-solving, analytical, and communication skills.</li><li>Ability to thrive in a fast-paced, multicultural environment.</li></ul>Why Join Us?<ul><li>Be part of a growing cybersecurity team in Doha.</li><li>Play a key role in protecting Tikal Group Doha&rsquo;s digital infrastructure.</li><li>Competitive salary and benefits package.</li><li>Opportunities for professional development and career advancement.</li><li>Supportive, innovation-driven, and security-focused work culture.</li></ul>Pay: Up to QAR35,000.00 per monthWork Location: In person

Cybersecurity Analyst

cFocus Software Incorporated

<div><h1 class="jobSectionHeader">Vulnerability Analyst II &ndash; Job Description</h1>
Position Title: Vulnerability Analyst II 
Program: SBA Enterprise Cybersecurity Services (ECS)<h2 class="jobSectionHeader">
Position Summary</h2>
The Vulnerability Analyst II provides cybersecurity risk, vulnerability management, and compliance support services in alignment with the SBA Enterprise Cybersecurity Services (ECS) RFQ Task Area 3.5.2. The position supports the SBA Risk Management Framework (RMF), FISMA compliance initiatives, Information System Continuous Monitoring (ISCM), vulnerability management, controls assessment activities, audit support, and continuous monitoring operations across enterprise systems and cloud environments. The analyst performs vulnerability assessments, supports POA&amp;M development, validates security controls, coordinates remediation efforts, and assists Information System Security Officers (ISSOs) and system owners with maintaining compliant and secure systems.<h2 class="jobSectionHeader">
Essential Duties and Responsibilities</h2><ul><li>
Perform enterprise vulnerability assessments and compliance scans using SBA-approved tools such as Tenable Security Center (SC), Nessus, and Microsoft TVM.</li><li>
Review identified vulnerabilities, assess impact and risk, and provide remediation recommendations for operating systems, applications, network devices, and cloud environments.</li><li>
Support continuous monitoring and Risk Management Framework (RMF) activities in accordance with NIST SP 800-37, NIST SP 800-53 Rev. 5, and NIST SP 800-53A.</li><li>
Assist with the creation, maintenance, and review of cybersecurity documentation including System Security Plans (SSPs), Security Assessment Reports (SARs), Plans of Action and Milestones (POA&amp;Ms), Configuration Management Plans (CMPs), and contingency documentation.</li><li>
Support control assessments and validation activities by documenting NIST 800-53A Determine If Statements (DISs) and mapping vulnerabilities to applicable controls.</li><li>
Conduct vulnerability scanning activities every 72 hours across workstations, servers, routers, switches, and cloud-based assets in accordance with SBA requirements.</li><li>
Monitor CISA Known Exploited Vulnerabilities (KEV) listings and Binding Operational Directives (BODs) to identify and report emerging risks.</li><li>
Track zero-day vulnerabilities, coordinate remediation activities, and provide ad hoc reporting to leadership and stakeholders.</li><li>
Generate weekly vulnerability reports, dashboards, and briefing materials for ISSOs, system owners, and management.</li><li>
Assist with audit preparation and support activities involving IG, GAO, internal auditors, and external assessors.</li><li>
Maintain scanning infrastructure including scanner deployment, configuration, plugin updates, scan repositories, and vulnerability management SOPs.</li><li>
Support FedRAMP Continuous Monitoring (CONMON) activities by reviewing vulnerability reports and assessing vendor remediation activities.</li><li>
Participate in change management, security operations meetings, and enterprise cybersecurity coordination activities.</li><li>
Ensure all deliverables are complete, accurate, aligned with agency templates, and delivered within required timeframes.</li></ul><h2 class="jobSectionHeader">
Minimum Qualifications</h2><ul><li>
Bachelor&rsquo;s degree in Cybersecurity, Information Technology, Computer Science, Information Assurance, or related discipline. Additional years of experience may substitute for degree requirements.</li><li>
3&ndash;6 years of experience supporting vulnerability management, cybersecurity compliance, RMF, or information assurance activities in a federal environment.</li><li>
Experience performing vulnerability assessments and remediation activities using Tenable SC/Nessus or equivalent tools.</li><li>
Knowledge of FISMA, NIST RMF, NIST SP 800-53 Rev. 5, NIST SP 800-53A, NIST SP 800-137, and related federal cybersecurity standards.</li><li>
Experience supporting POA&amp;M management, security assessments, continuous monitoring, and audit response activities.</li><li>
Working knowledge of Windows, Linux/Unix, network infrastructure, cloud platforms, and enterprise security technologies.</li><li>
Strong written and verbal communication skills with the ability to produce technical documentation and executive-level reports.</li><li>
Ability to analyze security findings, prioritize risks, and coordinate remediation with technical stakeholders.</li></ul><h2 class="jobSectionHeader">
Preferred Certifications</h2><ul><li>
CompTIA Security+</li><li>
Certified Information Systems Security Professional (CISSP)</li><li>
Certified Ethical Hacker (CEH)</li><li>
GIAC Security Certifications (GSEC, GPEN, or similar)</li><li>
Tenable Certified Professional or equivalent vulnerability management certification</li></ul>
Gupkg0JOaj</div>

SBA - Vulnerability Analyst II

Search 10000+ Security and compliance analyst jobs near you this May. New roles added regularly across leading industries. Apply today.