Cyber Security Analyst

Hi, 

We have a direct client requirement (Oil & Gas domain company) located in Arlington, VA that is currently looking to fill an open full-time (PERM) Cyber Security Analyst position. 

This role will require 100% onsite support in Arlington, VA.

The budgeted salary in place for this role is $145,000 (full health benefits and bonus plan also included).

Position:  Cyber Security Analyst

Location:  Arlington, VA

Role:  Responsible for assisting with designing, implementing, and maintaining security architecture and controls that protect the organization’s information systems, operational technology (OT), and cloud infrastructure. Provide technical leadership and architectural guidance across a complex environment consisting of multi-cloud platforms, enterprise applications, and industrial control systems.

Help develop secure design patterns, perform architecture and threat assessments, and ensure cybersecurity best practices are embedded into enterprise platforms and technology initiatives.

Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field.

• 10+ years of experience in cybersecurity, information security engineering, or security architecture. 
• At least 10 years in Active Directory, Exchange Online and Azure Cloud (NOT LOOKING for less experienced candidates for this role)
• 5+ years of experience performing security risk assessments and implementing security frameworks such as NIST 800 series, ISO 27000 series, or IT General Controls.
• Experience designing and implementing security controls within cloud environments (Azure and AWS).
• Experience supporting multi-cloud or hybrid infrastructure environments.
• Experience implementing or supporting NIST 800-53, FISMA, or FedRAMP Moderate/High security controls.
• Strong knowledge of Identity and Access Management (IAM) and authentication protocols including SAML, OAuth, OIDC, and Multi-Factor Authentication.
• Experience with cryptography, key management, and secrets management platforms.
• Deep understanding of network security, data protection, encryption technologies, and secure access controls.
• Familiarity with DevSecOps principles and security automation frameworks.
• Experience securing enterprise applications, cloud services, and infrastructure platforms.

Once again, this is a 100% fully onsite position.   Please forward qualified candidate for review and don’t hesitate advising if any questions.