Lead Security AnalystA Lead Security Analyst is sought to join a team of qualified, diverse professionals. This role will lead security analysis, compliance oversight, and risk management efforts across a complex environment. The position is pivotal in ensuring secure and compliant solutions, guiding vulnerability management activities, and supporting modernization efforts for federal programs.
The Lead Security Analyst will help shape and maintain a robust security posture, ensuring that all program capabilities adhere to Federal security standards.Key ResponsibilitiesLeading all security analysis, compliance, and oversight activities for the program.Conducting comprehensive security assessments, including evaluation of system architecture, data flows, interfaces, and inherited controls.Developing, maintaining, and enforcing program-wide security policies, procedures, and documentation consistent with Federal security requirements.Managing the program's vulnerability assessment program, including vulnerability scanning, analysis, reporting, and coordination of remediation activities.Leading the development of risk mitigation strategies and providing recommendations to address findings from scans, assessments, and audits.Preparing and supporting all security audits, reviews, and checkpoints.Ensuring security requirements are integrated into Agile development workflows, providing direct guidance to Scrum teams, architects, and developers.Reviewing technical designs, user stories, and system enhancements for security impacts and compliance alignment.Monitoring regulatory and security updates to ensure program compliance remains current and accurate.Collaborating with cross-functional stakeholders including engineering, operations, compliance, and program leadership to ensure secure-by-design solution delivery.Developing and delivering security awareness and compliance training tailored to program needs.Maintaining accurate and up-to-date security documentation, dashboards, and metrics reporting for program leadership.Required QualificationsEducation & Experience:Minimum of 8 years of experience with a BS/BA degree; or a minimum of 6 years with an MS/MA degree; or a minimum of 3 years with a PhD.Skills & Qualifications:Demonstrated experience leading security analysis, compliance, and risk management activities for large-scale Federal programs.Understanding of Federal information security standards and frameworks such as FISMA, NIST SP 800-53, and NIST RMF.Hands-on experience conducting or managing vulnerability assessments, security scanning, and risk mitigation planning.Experience preparing for and supporting Federal security audits and assessments.Ability to review system designs, data flows, and architecture diagrams for security considerations and compliance alignment.Experience working directly with Agile teams and integrating security requirements into Agile SDLC processes.Written and verbal communication skills, with the ability to communicate with both technical and non-technical stakeholders.Must be a U.S. Citizen.Must be able to work in alignment with the program's hybrid work expectations.Preferred Qualifications:Experience supporting programs with similar governance expectations.Relevant security certifications such as CISSP, CISM, Security+, or CEH.Experience with vulnerability management platforms, SIEM tools, and security automation technologies.Prior experience in healthcare IT and knowledge of compliance requirements such as HIPAA.Experience integrating or modernizing systems in environments with legacy system dependencies.Experience supporting large-scale, multi-team modernization or transformation initiatives.