Job Title: Information Security Analysts
Location: Columbia, MD
Employer: 4Consulting, Inc
Position Type: Full Time
Worksite: Onsite
Position Summary
4Consulting, Inc is seeking a qualified Information Security Analysts to support technology consulting, application development, systems analysis, testing, data management, cybersecurity, infrastructure, or project delivery services for client projects. The selected candidate will perform duties consistent with the client’s project requirements and company delivery standards.
Essential Duties and Responsibilities
The candidate will be responsible for:
Conduct web application penetration testing to identify exploitable vulnerabilities, assess application security controls, and evaluate potential risks to systems and sensitive information.
Perform infrastructure and network penetration testing to identify security weaknesses, validate security configurations, and assess the effectiveness of existing defensive controls.
Execute vulnerability assessments, analyze test results, document findings, prioritize risks, and provide actionable recommendations to address identified security issues.
Support advanced security testing activities, including red team operations and adversary simulation where applicable, while following approved testing procedures, engagement rules, and security requirements.
Minimum Qualifications
The position requires:
Education:
Bachelor’s degree in Computer Science, Information Technology, Engineering, Business, or related field, or equivalent combination of education and experience.
Experience:
Experience conducting web application, infrastructure, and network penetration testing, performing vulnerability assessments, documenting security findings, and recommending remediation measures. Specific years of experience are not specified.
Technical Skills:
Web Application Penetration Testing, Penetration Testing, Vulnerability Assessments, Network Security Testing, Infrastructure Security Testing, Security Testing Methodologies, Vulnerability Analysis, Red Team Operations, Command-and-Control Frameworks, Security Reporting
Business / Domain Skills:
Experience assessing cybersecurity risks across enterprise applications, network infrastructure, and technology environments to identify vulnerabilities and strengthen organizational security.
Experience evaluating application and infrastructure security controls, assessing potential exploitation risks, and communicating findings to technical teams for remediation.
Experience supporting authorized security assessments within regulated or government environments, following established security procedures, access controls, and engagement requirements.
Experience documenting security findings, prioritizing remediation activities, and collaborating with system owners and security stakeholders to improve overall security posture.
Communication:
Ability to communicate with technical and business stakeholders.
Documentation:
Ability to prepare project documentation, status updates, and deliverables.
Work Authorization:
Must be legally authorized to work in the United States. Sponsorship may be considered where permitted by company policy and project requirements.
Certification Required
None
Travel Required
None
Supervisory Role
No
Preferred Qualifications
Experience with red team operations, command-and-control (C2) frameworks, and malware development or simulation is preferred.
Strong analytical, problem-solving, technical documentation, and communication skills, with the ability to explain security findings and remediation recommendations clearly.
Equal Employment Opportunity Statement
4Consulting, Inc is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, sex, national origin, age, disability, veteran status, citizenship status, immigration status where protected by law, or any other legally protected status. All candidates will be evaluated based on job-related qualifications, experience, skills, availability, and ability to perform the essential duties of the position.
