Technical Security and Compliance Analyst

• Lead technical security validation, including vulnerability assessments and penetration testing, for highly regulated cloud and Linux-based environments.
• Drive Security Assessment and Authorization (SA&A) processes to secure Authorities to Operate (ATO) by translating complex security frameworks into actionable technical engineering requirements.
• Automate routine security tasks and vulnerability management workflows using scripting languages and modern configuration assessment tools.
• Partner with cross-functional teams—including product, engineering, and operations—to guide security architecture, threat modeling, and software supply-chain security.
• Analyze complex technical security data to deliver clear, actionable mitigation recommendations to both technical and non-technical stakeholders.

Minimum qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, a related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity, security engineering, pen testing, cloud security, or technical vulnerability assessment.
• Experience performing technical security validation, with Linux operating systems, networking concepts, and access controls.
• Candidates must hold or be eligible to obtain a valid Personnel Security Clearance as a condition of employment.

Preferred qualifications:

• Experience navigating security frameworks and leading Security Assessment and Authorization (SA&A) or Authority to Operate (ATO) processes in defense, government, or highly regulated environments.
• Experience assessing and securing modern infrastructure, including cloud platforms, Kubernetes, containers, and distributed systems.
• Experience with threat modeling (e.g., MITRE ATT&CK), manual pen testing, security assessment tooling, and automating security workflows using Python, Bash, or Ansible.
• Knowledge of software supply-chain security, including Software Bill of Materials (SBOMs), Static Application Security Testing (SAST), and vulnerability management.
• Excellent communication and cross-functional collaboration skills, complemented by industry-recognized security certifications (e.g., CISSP, OSCP, GCIH, or equivalent).

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, a related technical field, or equivalent practical experience.
• 5 years of experience in cybersecurity, security engineering, pen testing, cloud security, or technical vulnerability assessment.
• Experience performing technical security validation, with Linux operating systems, networking concepts, and access controls.
• Candidates must hold or be eligible to obtain a valid Personnel Security Clearance as a condition of employment.