Cybersecurity and Risk Analyst

NTT DATA, Inc.; Arlington (VA); On-site; USD 110,000 - 184,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) with company match

Life and AD&D insurance

Paid time off and EAP

Job summary

NTT DATA in Arlington, VA is seeking a Cybersecurity and Risk Analyst to join the Vulnerability Assessment and Penetration Testing team. You will evaluate vulnerabilities, apply threat intelligence, and support compliance to protect information confidentiality, integrity and availability.

The role covers vulnerability assessments, risk evaluations, and red-team activities aligned with NIST SP 800-53, FISMA and ISO/IEC 27001, delivering actionable leadership reporting and cross-team collaboration

Qualifications

• Master’s degree in IT, Cybersecurity, Data Science, Information Systems or Computer Science.
• 8+ years of IT and/or information security experience.
• DoD 8140 certification or ability to obtain within 6 months.
• Active Secret or higher clearance; eligible for Top-Secret if requested.

Responsibilities

• Identify, analyze and mitigate cybersecurity risks across systems, networks and applications.
• Conduct vulnerability assessments and risk evaluations using NIST/ISO frameworks.
• Support audits by mapping findings to compliance requirements (FISMA, HIPAA, PCI-DSS).
• Prepare detailed technical and executive risk reports for leadership.
• Collaborate with engineers, SOC, and owners to remediate threats.

Skills

Vulnerability assessment

Threat analysis

Compliance familiarity

Leadership communication

Education

Master’s degree in IT/CS

Education Equivalency: 1.5 years

Tools

NIST SP 800-53

ISO 27001

CIS Controls

FISMA

Job description

Req ID: 391662 NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization. We are currently seeking a Cybersecurity and Risk Analyst to join our team in Arlington, Virginia (US-VA), United States (US).

Job Summary

The Cybersecurity and Risk Analyst is a critical member of the Vulnerability Assessment and Penetration Testing (VAPT) team, responsible for identifying, analyzing, and mitigating cybersecurity risks across enterprise systems, networks, and applications. This role focuses on evaluating vulnerabilities, integrating threat intelligence, and supporting compliance efforts to ensure confidentiality, integrity, and availability of organizational data and services. The analyst conducts vulnerability assessments, risk evaluations, and red team/threat simulation activities in alignment with federal security frameworks such as NIST SP 800-53, FISMA, and ISO/IEC 27001. They provide actionable reporting to leadership, enabling risk-based decision-making, and collaborate with cross-functional teams to improve security posture, mitigate threats, and ensure adherence to federal directives and policies.

Job Duties

• Vulnerability Assessment & Risk Evaluation
• Conduct vulnerability assessments across systems, applications, OT assets, and cloud environments using commercial and open-source tools.
• Analyze, validate, and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Perform risk assessments on systems, applications, and ATO packages using frameworks such as NIST SP 800-30 and ISO 27005.
• Maintain risk registers and communicate risk likelihood and impact to system owners and leadership.
• Threat Analysis & Simulation
• Monitor and apply threat intelligence feeds to assess emerging threats and vulnerabilities.
• Participate in red team operations, adversary emulation, and penetration testing exercises.
• Correlate vulnerability threat data (e.g., CVEs, MITRE ATT&CK) to determine real-world exploitability.
• Provide analysis of zero-day vulnerabilities, advanced attack techniques, and potential organizational impacts.
• Policy, Compliance, & Governance Support
• Ensure vulnerability management practices align with NIST SP 800-53, NIST SP 800-115, CIS Controls, and ISO 27001.
• Support internal and external audits by mapping findings to compliance frameworks (FISMA, HIPAA, PCI-DSS).
• Contribute to incident response readiness, business continuity, and disaster recovery planning.
• Review and provide input on system change requests, patching compliance, and binding operational directives.
• Reporting & Documentation
• Prepare detailed technical reports and executive summaries highlighting risks, vulnerabilities, and mitigations.
• Document risk mitigation strategies, vulnerability management processes, and audit support artifacts.
• Provide risk-related training and awareness to stakeholders, communicating technical risks in business terms.
• Collaboration & Continuous Improvement
• Partner with security engineers, SOC analysts, developers, and system owners to coordinate remediation.
• Participate in Change Control Boards (CCBs) to assess security impact of system changes.
• Recommend improvements to vulnerability, risk, and threat management processes.
• Stay current on evolving threat landscapes, vulnerability trends, and cybersecurity technologies.

Basic Qualifications

• Master’s degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science.
• Education Equivalency: One-and-one- half (1.5) years of additional experience can substitute for one (1) year of a typical degree program.
• Minimum 8 years of experience in Information Technology (IT) and/or Information Security (IS).
• DoD 8140 certification for respective area or the ability to obtain certification within six (6) months of onboarding.
• Active Secret or higher security clearance holder and must be eligible for a Top-Secret clearance if requested.

Preferred Qualifications

• DCWF Role 541 - Vulnerability Assessment Analyst / 622 – Secure Software Assessor intermediate and advanced certifications:
• CompTIA: Cloud+, Pentest+, Security+
• EC-Council: CEH
• GIAC: GCED, GCIH, GCSA, GICSP, GSEC

NTT DATA provides a reasonable range of compensation for specific roles. The starting pay range for this role is $110,179 - $183,631. Actual compensation will depend on a number of factors, including the candidate’s relevant experience, technical skills, and other qualifications. This position may also be eligible for incentive compensation based on individual and/or company performance. If the position offered in temporary, the position will not be eligible for incentive compensation. This position is eligible for company benefits including medical, dental, and vision insurance with an employer contribution, flexible spending or health savings account, life and AD&D insurance, short and long term disability coverage, paid time off, employee assistance, participation in a 401k program with company match, and additional voluntary or legally-required benefits.

About NTT DATA

NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.

NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.