DoD Security Compliance Analyst (TS/SCI) – On-Site

Base-2 Solutions; Town of Florida (NY); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) with match

Job summary

Base-2 Solutions is seeking a Security Compliance Analyst to support security governance and compliance initiatives, aligning with DoD identity governance policies and multiple security frameworks.

The role focuses on assessing, implementing, and monitoring compliance across cloud and hybrid environments, with emphasis on risk assessment, reporting, and remediation strategies. Strong tool experience is required for credible delivery.

Qualifications

• Bachelor's degree in Cybersecurity, Information Assurance, or a related field OR a minimum of 5 years of equivalent experience in security compliance analysis.
• Experience conducting security assessments, preparing compliance documentation (SSPs, POA&Ms), and ensuring regulatory adherence for cloud and hybrid infrastructures.
• Proficiency with compliance tools such as Microsoft Purview, AWS Security Hub, Nessus, or Splunk Enterprise Security.

Responsibilities

• Ensure adherence to DoD identity governance policies and compliance frameworks.
• Assess, implement, and monitor security compliance frameworks across cloud and hybrid environments, ensuring adherence to FedRAMP, NIST 800-53 Rev. 5, DoD RMF, and Zero Trust security principles.
• Perform security risk assessment, compliance reporting, and vulnerability remediation strategies.

Skills

Security assessments

Regulatory compliance

Documentation (SSP/POA&M)

Cloud security

Hybrid environments

Education

Bachelor's degree in Cybersecurity/Information Assurance

Tools

Microsoft Purview

AWS Security Hub

Nessus

Splunk Enterprise Security

Job description

Base-2 Solutions is seeking a Security Compliance Analyst to support security governance and compliance initiatives, aligning with DoD identity governance policies and multiple security frameworks.

The role focuses on assessing, implementing, and monitoring compliance across cloud and hybrid environments, with emphasis on risk assessment, reporting, and remediation strategies. Strong tool experience is required for credible delivery.