Security Analyst

Computer World Services

Morrisville, North Carolina

Apply

JOB DETAILS

SKILLS

Analysis Skills, Applications Security, Artificial Intelligence (AI), Authentication, CISA - Certified Information Systems Auditor, Cisco Network Systems, CompTIA Security+, Computer Science, Computer Security, Computer Services, Computer Workstations, Corrective Action, Department of Health and Human Services, Documentation, Establish Priorities, FISMA - Federal Information Security Management Act, Firewall Administration, Firewalls, ITIL (IT Infrastructure Library), Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Intrusion Detection Systems, Intrusion Prevention Systems, Mac Operating System, Maintain Compliance, Metrics, Microsoft Windows Server, National Institutes of Health (NIH), Nessus, Network Operations Center, Network Security, Operating Systems, Operational Support, Organizational Development/Management, Organizational Skills, Penetration Testing, Red Hat Linux Operating System, Reporting Dashboards, Risk, Risk Management Framework (RMF), Security Analysis, Security Consulting, Security Monitoring, Software Development, Software Development Lifecycle (SDLC), Splunk, Status Reports, Systems Engineering, TCP (Transmission Control Protocol), Technical Writing, Test Plan/Schedule, Time Management, U.S. National Institute of Standards and Technology (NIST), Vulnerability Scanners

LOCATION

Morrisville, North Carolina

POSTED

3 days ago

Computer World Services (CWS) is seeking an experienced Security Analyst to support enterprise cybersecurity operations within a Federal IT environment. The Security Analyst will be responsible for administering and maintaining security technologies, identifying and mitigating vulnerabilities, supporting vulnerability management initiatives, and serving as a technical advisor to infrastructure and application teams.

The successful candidate will possess strong experience with vulnerability management, firewall administration, security monitoring, and Federal cybersecurity compliance. This individual will work closely with infrastructure engineers, application developers, and security stakeholders to improve the organization's security posture while ensuring compliance with NIST, FISMA, NIH/HHS, and other Federal security requirements.

Key Tasks & Responsibilities

Essential Duties and Responsibilities

Vulnerability Management

Serve as the primary administrator for Tenable Security Center (SC) and Nessus vulnerability scanners.
Perform authenticated and unauthenticated vulnerability scans across enterprise systems.
Analyze scan results and prioritize remediation activities using CVSS scores, CISA Known Exploited Vulnerabilities (KEV), and organizational risk criteria.
Produce recurring vulnerability reports for management, system owners, and compliance activities.
Track remediation progress and validate vulnerability closures.
Manage vulnerability waivers, risk acceptance documentation, and exception tracking.
Monitor End-of-Life (EOL), End-of-Support (EOS), and Binding Operational Directive (BOD) vulnerability requirements.
Coordinate with stakeholders across technical teams to drive timely vulnerability remediation efforts.

Security Operations

Experience with:
- Firewall Management
- - Cisco
  - Checkpoint
- IDS/IPS technologies
- Log aggregation systems (Splunk)
- File integrity monitoring solutions
- Red Hat Linux
- Windows workstation and server OS
- MacOS
Participate in incident investigations and support cybersecurity response activities.
Assist with security assessments and continuous monitoring activities.

Application & Infrastructure Security

Perform application vulnerability scanning.
Coordinate vulnerability remediation with application owners.
Support troubleshooting for application security issues.
Partner with the Application Development team to identify security improvements throughout the software lifecycle.

Compliance & Reporting

Support organizational compliance initiatives including:

NIST 800-53
FISMA
NIH/HHS cybersecurity policies
CISA Binding Operational Directives (BODs)
Continuous Monitoring (ConMon)

Prepare:

Executive vulnerability reports
Compliance dashboards
Monthly security metrics
Remediation status reports

Penetration Testing Remediation Support

Serve as the primary coordinator for annual penetration testing activities.

Responsibilities include:

Coordinating testing schedules
Supporting external penetration testing teams
Managing findings
Tracking remediation efforts
Validating corrective actions
Producing final response documentation

Operational Support

Provide day-to-day operational cybersecurity support including:

Customer requests
Security consultations
Incident investigations
Security engineering support
Technical documentation

Security Frameworks

Working knowledge of:

NIST 800-53
NIST Cybersecurity Framework (CSF)
Risk Management Framework (RMF)
FISMA
CISA Binding Operational Directives (BODs)
Continuous Monitoring (ConMon)

Education & Experience

Education

Bachelor’s degree in Computer Science, Information Systems, Engineering, or related field. Equivalent experience.

Experience

5–8 years of experience in information security, network security, or related fields.

Experience working in Data Center or hybrid infrastructure environments

Certifications

One or more of the following preferred:

CompTIA Security+

Tenable Certified Professional (TCP)
ITIL certification preferred.

Security Clearance

Applicants must be able to obtain a Public Trust clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [email protected].

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Security Analyst

Computer World Services

Morrisville, North Carolina

Key Tasks & Responsibilities

Education & Experience

Certifications

Security Clearance

About the Company

Computer World Services

Similar Job Searches