Senior Cybersecurity Operations Analyst

SAIC

Washington, District of Columbia • Today

Full-time

USD 120,001.00 - 160,000.00 per year

Senior Cyber Security Analyst

Leidos

Adelphi, Maryland • Today

Full-time

USD 87,100.00 - 157,450.00 per year

MANTECH

Springfield, Virginia • Today

Full-time

Kearney & Company

Alexandria, Virginia • Today

Full-time

USD 75,000.00 - 90,000.00 per year

Cybersecurity SOC Analyst II

Technomics, Inc.

Arlington, Virginia • Today

Full-time

USD 105,000.00 - 200,000.00 per year

CHAOS Industries

Washington, District of Columbia • Today

Full-time

USD 110,000.00 - 160,000.00 per year

SPA

Alexandria, Virginia • Today

Full-time

USD 90,000.00 per year

JCS Solutions LLC

Bethesda, Maryland • Today

Full-time

USD 90,000.00 - 130,000.00 per year

CACI International, Inc.

Chantilly, Virginia • Today

Full-time

USD 113,200.00 - 237,800.00 per year

Cyber Security Operations Engineer

System One

Remote • 11d ago

Easy Apply

Contract

$62.12

Conduent

Remote or Utah • Today

Full-time

USD 76,076.00 - 98,800.00 per year

Cybersecurity Analyst [JOB ID 20260910]

NET2ASPIRE LLC

Remote • 4d ago

Easy Apply

Contract

30000 - 37000

Phoenix Cyber

Remote or Phoenix, Arizona • Today

Full-time

Milestone Technologies, Inc.

Remote • Today

Full-time

Robert Half

Remote or Los Angeles, California • Today

Easy Apply

Contract

USD 35.63 - 41.25 per hour

Lead Cyber Security Analyst

Lumen Solutions Group Inc.

Remote • Today

Easy Apply

Contract

Depends on Experience

University of Washington

Remote or Seattle, Washington • Today

Full-time

USD 135,000.00 per year

Senior Cyber-Security Operations Analyst, Product AppSec

Veeam Software Corporation

Remote • Today

Full-time

USD 174,960.00 - 324,960.00 per year

Cybersecurity Operations Specialist -SIEM Services (Evergreen)

General Dynamics

Springfield, Virginia • Today

Full-time

USD 128,039.00 - 173,229.00 per year

Lead, Cybersecurity Operations

Ritchie Bros.

Remote or Chester, Illinois • Today

Full-time

USD 123,950.00 - 154,880.00 per year

Cybersecurity Analyst I

American Systems Corporation

Manassas, Virginia • Today

Full-time

USD 85,000.00 per year

Senior Offensive Cyber Analyst

Cornerstone Defense

Arlington, Virginia • Today

Full-time

USD 185,000.00 - 205,000.00 per year

Job Details

Skills

Program Management
Information System Security
ISSM
Inventory
Clinical Data Management
BigFix
System Documentation
Accountability
Training
Risk Analysis
Collaboration
IT Operations
Technical Writing
Research
Analytical Skill
Communication
Privacy
NIST SP 800 Series
FIPS
Incident Management
Authorization
GSA
FedRAMP
Cloud Computing
Continuous Monitoring
Vulnerability Scanning
Standard Operating Procedure
Security Architecture
Application Development
Testing
Software Security
Database Security
Network Security
Identity Management
Network Protocols
Authentication
Firewall
Data Loss Prevention
Intrusion Detection
Intrusion Prevention
Microsoft Windows Server
Microsoft Operating Systems
Linux
Unix
Active Directory
Operating Systems
Auditing
Reporting
Network
Vulnerability Assessment
Backup
Recovery
Contingency Plan
Risk Management
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
Microsoft Visio
Tableau
Microsoft SharePoint
Management
Documentation
Security Operations
Screening
Security Clearance
Information Systems
Microsoft Azure
Cloud Security
ITIL
SANS
Microsoft
Cisco
Information Security
Cyber Security
Information Assurance
Regulatory Compliance
CISSP
Risk Management Framework
RMF
FISMA
Vulnerability Management
DevSecOps
Legal
Law

Program Management
Information System Security
ISSM
Inventory
Clinical Data Management
BigFix
System Documentation
Accountability
Training
Risk Analysis
Collaboration
IT Operations
Technical Writing
Research
Analytical Skill
Communication
Privacy
NIST SP 800 Series
FIPS
Incident Management
Authorization
GSA
FedRAMP
Cloud Computing
Continuous Monitoring
Vulnerability Scanning
Standard Operating Procedure
Security Architecture
Application Development
Testing
Software Security
Database Security
Network Security
Identity Management
Network Protocols
Authentication
Firewall
Data Loss Prevention
Intrusion Detection
Intrusion Prevention
Microsoft Windows Server
Microsoft Operating Systems
Linux
Unix
Active Directory
Operating Systems
Auditing
Reporting
Network
Vulnerability Assessment
Backup
Recovery
Contingency Plan
Risk Management
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
Microsoft Visio
Tableau
Microsoft SharePoint
Management
Documentation
Security Operations
Screening
Security Clearance
Information Systems
Microsoft Azure
Cloud Security
ITIL
SANS
Microsoft
Cisco
Information Security
Cyber Security
Information Assurance
Regulatory Compliance
CISSP
Risk Management Framework
RMF
FISMA
Vulnerability Management
DevSecOps
Legal
Law

Summary

Job Description

The Senior Cybersecurity Operations Analyst

The Senior Cybersecurity Operations Analyst provides program management and technical cybersecurity support for the Department of Transportation (DOT) Federal Highway Administration (FHWA) Cyber Security Management Support program. Under the oversight of the FHWA Information System Security Manager (ISSM), this position plans, implements, operates, monitors, and reports on cybersecurity activities that strengthen the security posture of FHWA information systems.

Pay commensurate with experience-$145000- $155000

Key Responsibilities

Provide cybersecurity and Information Assurance expertise in support of the Agency's Security Program.
Support cybersecurity incident-handling activities.
Assist with vulnerability detection and development of vulnerability-remediation strategies.
Provide expertise regarding secure application-development techniques.
Support secure baseline configuration validation, security audit-log monitoring activities and integration and management of static-code vulnerability scanners.
Support the security portion of DevSecOps implementation.
Develop and maintain cybersecurity architecture diagrams.
Develop processes, procedures, and Standard Operating Procedures supporting DevSecOps and cybersecurity activities.
Maintain a current inventory of network ranges, assets, groups, and custom groups within the DOT CDM BigFix tool.
Assist with remediation of cybersecurity issues identified through applicable security reports.
Provide cybersecurity subject-matter expertise in incident handling, vulnerability detection, remediation planning, secure application development, cloud environments, and cloud services
Maintain core system documentation using standardized templates, technical guides, baseline-management documentation, and supporting checklists.
Maintain and update the organization's Cybersecurity Handbook, Verify Secure Configuration Procedures, Incident Handling Procedures, Threat, Vulnerability, and Risk Monitoring Standard Operating Procedures and Continuous Monitoring Risk Management Plan.
Coordinate with functional teams to collect supporting documentation and artifacts for audits and evaluations.
Draft responses supporting FISMA, CFO, Office of Inspector General (OIG), Government Accountability Office (GAO), and other applicable audits or evaluations. Track and report OIG and GAO Notices of Findings and Recommendations.
Support Government suspense dates associated with audits, evaluations, findings, and data calls.
Support responses to cybersecurity data calls and other Government inquiries.
Provide programmatic cybersecurity assistance and guidance to system owners as requested.
Execute information-system contingency-plan testing in accordance with applicable NIST guidance. Provide information-system contingency training to personnel with contingency-plan responsibilities. Capture lessons learned and corrective actions resulting from contingency exercises.
Support updates to information-system contingency plans based on testing results.
Review logs using suspicious log-activity queries to identify, investigate, and support response to cybersecurity incidents.
Help personnel understand ISCP roles and the skills necessary to perform system-recovery responsibilities.
Support risk analysis and mitigation activities as directed and approved by authorized Government officials.
Provide recommendations addressing cybersecurity threats, vulnerabilities, and risks.
Perform other job-related duties as assigned within the scope of the program.
Assists with the development and delivery of cybersecurity awareness communications and outreach efforts in coordination with internal stakeholders

Required Knowledge, Skills, and Experience

Ability to communicate technical cybersecurity findings and recommendations, cybersecurity guidance and programmatic assistance to system owners, business sponsors, developers, infrastructure teams, and IT operations personnel.
Ability to communicate effectively with technical and nontechnical stakeholders.
Possess strong technical writing, research, analytical, organizational, and communication skills. Expert knowledge of Federal cybersecurity and privacy laws, regulations, policies, procedures, and implementation standards.
Expert experience supporting compliance with NIST SP 800-18, NIST SP 800-30, NIST SP 800-34, NIST SP 800-37, NIST SP 800-53 Rev. 4, NIST SP 800-53A Rev. 4, NIST SP 800-60, NIST SP 800-66 Rev. 1, NIST SP 800-137, FIPS 199, and FIPS 200.
Knowledge of incident handling, vulnerability detection, vulnerability management, and remediation.
Understanding of the FISMA assessment and authorization process, GSA FedRAMP processes, and current cloud-service technologies.
Experience applying Federal Information Security Continuous Monitoring and Continuous Diagnostics and Mitigation program technologies.
Understanding of static-code vulnerability scanning and vulnerability-management tools.
Experience or knowledge related to security audit-log monitoring.
Support DevSecOps implementation, including architecture diagrams, process documentation, standard operating procedures, and the integration and management of static code vulnerability scanners.
Expert experience with enterprise security architecture methodologies, concepts, procedures, principles, and tools.
Knowledge of secure configuration and baseline-validation practices.
Knowledge of secure application-development concepts, dynamic and static application-security testing tools, scan results, and remediation practices.
Experience conducting vulnerability, application-security, database-security, and network-security assessments and interpreting assessment results.
Understanding of Identity, Credential, and Access Management implementation.
Knowledge of domain structures, network protocols, user authentication, digital signatures, firewalls, data-loss-prevention technologies, intrusion-detection and intrusion-prevention systems, and security best practices.
Knowledge of Windows Server, Linux/Unix, Active Directory, and related operating-system services.
Knowledge of Federal cybersecurity audits and evaluations, including FISMA, OIG, and GAO activities.
Ability to plan, execute, document, and report on internal and external application and network vulnerability analyses and provide technical recommendations that improve mission functionality and security.
At least three years of experience in contingency planning, backup and recovery best practices, and NIST contingency-planning guidance.
Experience with risk-management tools, including JCAM (formerly CSAM).
Proficiency with Microsoft Word, Excel, PowerPoint, Visio, Teams, Tableau, and SharePoint.
Ability to manage multiple concurrent priorities, including developing documentation for new systems while supporting updates to systems in production.

Education, Certifications, and Clearance

Bachelor's degree in Cybersecurity or a related technical field.
6+ years in security operations, vulnerability management, or offensive security domains, including experience in a senior or lead capacity.
Must satisfy all applicable Cherokee Federal, Government and DOT personnel-security and background-screening requirements.
Must possess or be able to obtain a DOT Public Trust clearance.
Current, verifiable Certified Information Systems Security Professional (CISSP) certification.
Current, verifiable Certificate of Cloud Security Knowledge, Microsoft Azure certification, or another recognized cloud-security certification.
Desired certifications include ITIL v3 or later, and relevant certifications from ISC2, SANS, EC-Council, Microsoft, Cisco, or similar organizations.

##CherokeeFederal #LI-SM2 #AppC

Similar job titles:

Senior Cybersecurity Analyst
Senior Information Security Analyst
Cybersecurity Operations Specialist
Information Assurance Analyst
Senior Security Compliance Analyst

Keywords:

CISSP
NIST Risk Management Framework (RMF)
FISMA
Vulnerability Management
DevSecOps

Legal disclaimer:

Cherokee Federal is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to protected veteran status, disability, or any other status protected under applicable federal, state, or local law.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 80183373
Position Id: 7750f9fa902b749070f3a959d65a4eab
Posted 27 days ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Bethesda, Maryland

•

Today

Grow, innovate, and generate progress: Harness your expertise to solve challenges and celebrate success! Job Summary JCS Solutions is seeking a Cybersecurity Analyst and help protect critical federal systems. In this hands-on role, you'll support vulnerability management, threat monitoring, endpoint security, incident response, and remediation efforts. Working alongside cybersecurity and IT teams, you'll identify risks, investigate security events, and drive corrective actions. We're looking for

Full-time

USD 90,000.00 - 130,000.00 per year

Senior Information System Security Officer (ISSO)

Washington, District of Columbia

•

Today

Job ID: 2616506 Location: Washington, DC, US Date Posted: 2026-09-03 Category: Cyber Subcategory: Cyber Engineer Schedule: Full-Time Shift: Day Job Travel: No Minimum Clearance Required: None Clearance Level Must Be Able to Obtain: Public Trust Potential for Remote Work: ORA_HYBRID Description SAIC is looking for a Senior Cybersecurity Analyst supports Security Operations functions while helping establish and mature the organization's offensive security capability in support of a criti

Full-time

USD 120,001.00 - 160,000.00 per year

Washington, District of Columbia

•

Today

**CONTINGENT UPON CONTRACT AWARD** Overview: Job Title: Senior Information System Security Officer (ISSO) Security Clearance: Ability to Obtain Tier 4 High-Risk Public Trust Location: Washington, D.C. (Due to the nature of the work and contract requirements, U.S. Citizenship is required.) Description: C3EL is seeking a Senior Information System Security Officer (ISSO) to provide on-site cybersecurity and Risk Management Framework (RMF) sustainment support in Washington, D.C., for a new con

Full-time

Lead Information System Security Officer (ISSO) - CISSP

Silver Spring, Maryland

•

Today

Job Title: Lead Information System Security Officer (ISSO) - CISSP Location: Silver Spring, MD (downtown) Clearance Required: Must be able to obtain a Public Trust Clearance Salary Range: $140K-$150K (based on experience) Application Deadline: October 31, 2026 To apply, please follow these steps: Visit ;/li> Select the position you are interested in Review the job details, then click Apply Now Complete and submit your application Description: The Lead Information System Security Officer (Lead

Full-time

USD 140,000.00 - 150,000.00 per year

Job Details

Skills

Program Management
Information System Security
ISSM
Inventory
Clinical Data Management
BigFix
System Documentation
Accountability
Training
Risk Analysis
Collaboration
IT Operations
Technical Writing
Research
Analytical Skill
Communication
Privacy
NIST SP 800 Series
FIPS
Incident Management
Authorization
GSA
FedRAMP
Cloud Computing
Continuous Monitoring
Vulnerability Scanning
Standard Operating Procedure
Security Architecture
Application Development
Testing
Software Security
Database Security
Network Security
Identity Management
Network Protocols
Authentication
Firewall
Data Loss Prevention
Intrusion Detection
Intrusion Prevention
Microsoft Windows Server
Microsoft Operating Systems
Linux
Unix
Active Directory
Operating Systems
Auditing
Reporting
Network
Vulnerability Assessment
Backup
Recovery
Contingency Plan
Risk Management
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
Microsoft Visio
Tableau
Microsoft SharePoint
Management
Documentation
Security Operations
Screening
Security Clearance
Information Systems
Microsoft Azure
Cloud Security
ITIL
SANS
Microsoft
Cisco
Information Security
Cyber Security
Information Assurance
Regulatory Compliance
CISSP
Risk Management Framework
RMF
FISMA
Vulnerability Management
DevSecOps
Legal
Law

Program Management
Information System Security
ISSM
Inventory
Clinical Data Management
BigFix
System Documentation
Accountability
Training
Risk Analysis
Collaboration
IT Operations
Technical Writing
Research
Analytical Skill
Communication
Privacy
NIST SP 800 Series
FIPS
Incident Management
Authorization
GSA
FedRAMP
Cloud Computing
Continuous Monitoring
Vulnerability Scanning
Standard Operating Procedure
Security Architecture
Application Development
Testing
Software Security
Database Security
Network Security
Identity Management
Network Protocols
Authentication
Firewall
Data Loss Prevention
Intrusion Detection
Intrusion Prevention
Microsoft Windows Server
Microsoft Operating Systems
Linux
Unix
Active Directory
Operating Systems
Auditing
Reporting
Network
Vulnerability Assessment
Backup
Recovery
Contingency Plan
Risk Management
Microsoft Word
Microsoft Excel
Microsoft PowerPoint
Microsoft Visio
Tableau
Microsoft SharePoint
Management
Documentation
Security Operations
Screening
Security Clearance
Information Systems
Microsoft Azure
Cloud Security
ITIL
SANS
Microsoft
Cisco
Information Security
Cyber Security
Information Assurance
Regulatory Compliance
CISSP
Risk Management Framework
RMF
FISMA
Vulnerability Management
DevSecOps
Legal
Law

Summary

Provide cybersecurity and Information Assurance expertise in support of the Agency's Security Program.
Support cybersecurity incident-handling activities.
Assist with vulnerability detection and development of vulnerability-remediation strategies.
Provide expertise regarding secure application-development techniques.
Support secure baseline configuration validation, security audit-log monitoring activities and integration and management of static-code vulnerability scanners.
Support the security portion of DevSecOps implementation.
Develop and maintain cybersecurity architecture diagrams.
Develop processes, procedures, and Standard Operating Procedures supporting DevSecOps and cybersecurity activities.
Maintain a current inventory of network ranges, assets, groups, and custom groups within the DOT CDM BigFix tool.
Assist with remediation of cybersecurity issues identified through applicable security reports.
Provide cybersecurity subject-matter expertise in incident handling, vulnerability detection, remediation planning, secure application development, cloud environments, and cloud services
Maintain core system documentation using standardized templates, technical guides, baseline-management documentation, and supporting checklists.
Maintain and update the organization's Cybersecurity Handbook, Verify Secure Configuration Procedures, Incident Handling Procedures, Threat, Vulnerability, and Risk Monitoring Standard Operating Procedures and Continuous Monitoring Risk Management Plan.
Coordinate with functional teams to collect supporting documentation and artifacts for audits and evaluations.
Draft responses supporting FISMA, CFO, Office of Inspector General (OIG), Government Accountability Office (GAO), and other applicable audits or evaluations. Track and report OIG and GAO Notices of Findings and Recommendations.
Support Government suspense dates associated with audits, evaluations, findings, and data calls.
Support responses to cybersecurity data calls and other Government inquiries.
Provide programmatic cybersecurity assistance and guidance to system owners as requested.
Execute information-system contingency-plan testing in accordance with applicable NIST guidance. Provide information-system contingency training to personnel with contingency-plan responsibilities. Capture lessons learned and corrective actions resulting from contingency exercises.
Support updates to information-system contingency plans based on testing results.
Review logs using suspicious log-activity queries to identify, investigate, and support response to cybersecurity incidents.
Help personnel understand ISCP roles and the skills necessary to perform system-recovery responsibilities.
Support risk analysis and mitigation activities as directed and approved by authorized Government officials.
Provide recommendations addressing cybersecurity threats, vulnerabilities, and risks.
Perform other job-related duties as assigned within the scope of the program.
Assists with the development and delivery of cybersecurity awareness communications and outreach efforts in coordination with internal stakeholders

Required Knowledge, Skills, and Experience

Ability to communicate technical cybersecurity findings and recommendations, cybersecurity guidance and programmatic assistance to system owners, business sponsors, developers, infrastructure teams, and IT operations personnel.
Ability to communicate effectively with technical and nontechnical stakeholders.
Possess strong technical writing, research, analytical, organizational, and communication skills. Expert knowledge of Federal cybersecurity and privacy laws, regulations, policies, procedures, and implementation standards.
Expert experience supporting compliance with NIST SP 800-18, NIST SP 800-30, NIST SP 800-34, NIST SP 800-37, NIST SP 800-53 Rev. 4, NIST SP 800-53A Rev. 4, NIST SP 800-60, NIST SP 800-66 Rev. 1, NIST SP 800-137, FIPS 199, and FIPS 200.
Knowledge of incident handling, vulnerability detection, vulnerability management, and remediation.
Understanding of the FISMA assessment and authorization process, GSA FedRAMP processes, and current cloud-service technologies.
Experience applying Federal Information Security Continuous Monitoring and Continuous Diagnostics and Mitigation program technologies.
Understanding of static-code vulnerability scanning and vulnerability-management tools.
Experience or knowledge related to security audit-log monitoring.
Support DevSecOps implementation, including architecture diagrams, process documentation, standard operating procedures, and the integration and management of static code vulnerability scanners.
Expert experience with enterprise security architecture methodologies, concepts, procedures, principles, and tools.
Knowledge of secure configuration and baseline-validation practices.
Knowledge of secure application-development concepts, dynamic and static application-security testing tools, scan results, and remediation practices.
Experience conducting vulnerability, application-security, database-security, and network-security assessments and interpreting assessment results.
Understanding of Identity, Credential, and Access Management implementation.
Knowledge of domain structures, network protocols, user authentication, digital signatures, firewalls, data-loss-prevention technologies, intrusion-detection and intrusion-prevention systems, and security best practices.
Knowledge of Windows Server, Linux/Unix, Active Directory, and related operating-system services.
Knowledge of Federal cybersecurity audits and evaluations, including FISMA, OIG, and GAO activities.
Ability to plan, execute, document, and report on internal and external application and network vulnerability analyses and provide technical recommendations that improve mission functionality and security.
At least three years of experience in contingency planning, backup and recovery best practices, and NIST contingency-planning guidance.
Experience with risk-management tools, including JCAM (formerly CSAM).
Proficiency with Microsoft Word, Excel, PowerPoint, Visio, Teams, Tableau, and SharePoint.
Ability to manage multiple concurrent priorities, including developing documentation for new systems while supporting updates to systems in production.

Education, Certifications, and Clearance

Bachelor's degree in Cybersecurity or a related technical field.
6+ years in security operations, vulnerability management, or offensive security domains, including experience in a senior or lead capacity.
Must satisfy all applicable Cherokee Federal, Government and DOT personnel-security and background-screening requirements.
Must possess or be able to obtain a DOT Public Trust clearance.
Current, verifiable Certified Information Systems Security Professional (CISSP) certification.
Current, verifiable Certificate of Cloud Security Knowledge, Microsoft Azure certification, or another recognized cloud-security certification.
Desired certifications include ITIL v3 or later, and relevant certifications from ISC2, SANS, EC-Council, Microsoft, Cisco, or similar organizations.

##CherokeeFederal #LI-SM2 #AppC

Similar job titles:

Senior Cybersecurity Analyst
Senior Information Security Analyst
Cybersecurity Operations Specialist
Information Assurance Analyst
Senior Security Compliance Analyst

Keywords:

CISSP
NIST Risk Management Framework (RMF)
FISMA
Vulnerability Management
DevSecOps

Dice Id: 80183373
Position Id: 7750f9fa902b749070f3a959d65a4eab
Posted 27 days ago

Fitment

Dice Job Match Score™

To see how well you match this job, please log in or create an account.

Once logged in, be sure to complete your profile to get the most accurate match score.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Bethesda, Maryland

•

Today

Full-time

USD 90,000.00 - 130,000.00 per year