<p>Description</p> <p>Position: Security Analyst II</p> <p>Location: Rosslyn, VA,</p> <p>Clearance: Secret</p> <p>The Security Analys II is responsible for monitoring, analyzing, and responding to cybersecurity threats to protect government IT systems and data. This role focuses on vulnerability assessments, incident response, and ensuring compliance with standards such as NIST 800-53 and FISMA. Working within RMF, the analyst conducts investigations, correlates security data, and collaborates with teams to strengthen defenses. Overall, the position supports proactive risk management and continuous improvement of the organization's security posture.</p> <ul> <li> <p>Analyze security events, vulnerabilities, and control effectiveness</p> </li><li> <p>Support incident response, RMF compliance, and continuous monitoring</p> </li><li> <p>Conduct moderately complex investigations and correlate logs across systems</p> </li><li> <p>Perform vulnerability assessments using tools such as Nessus or Qualys</p> </li><li> <p>Utilize SIEM platforms like Splunk or QRadar and endpoint protection tools</p> </li><li> <p>Develop SOPs and runbooks to improve operational efficiency</p> </li><li> <p>Contribute to POA&M tracking and remediation efforts</p> </li><li> <p>Ensure compliance with frameworks such as NIST 800-53, FISMA, and ISO 27001</p> </li><li> <p>Leverage 3-7 years of cybersecurity or IT security experience</p> </li><li></li></ul>