Information Security Analyst (Vulnerability Management)

Blue Yonder; Dallas (TX); Hybrid; USD 98,000 - 124,000; Full time

Benefits offered by this job

Medical/Dental/Vision

401K Matching

Flexible Time Off

Fitness Program

Voluntary benefits

Job summary

Blue Yonder Defense Solutions (BYDS) seeks an Information Security Analyst to drive vulnerability management across cloud and on‑prem environments, ensuring compliance with DoD and government standards.

You will work with Azure, OCI, and Microsoft 365, supporting ISO 27001, CMMC Level 2, NIST SP 800‑171/53. This role requires local Dallas presence with bi-monthly onsite visits, in a hybrid model.

Qualifications

• Bachelor's degree in cybersecurity, IT, CS or related field; equivalent experience considered.
• 5+ years of cybersecurity or vulnerability management experience.
• Experience supporting government/defense contractor environments.
• Hands-on with vulnerability scanning tools and remediation.

Responsibilities

• Conduct regular vulnerability scans across cloud and on-prem assets.
• Analyze findings, assess risk, and prioritize remediation by business impact.
• Collaborate with IT, infrastructure, and development teams to remediate vulnerabilities.
• Develop automation scripts and reporting for vulnerability management.
• Support incident response with vulnerability context and remediation guidance.
• Document vulnerability management processes and security recommendations.
• Support ISO 27001, CMMC Level 2, NIST 800-171/800-53 compliance efforts.
• Stay current with threats and industry best practices.
• Strengthen BYDS security posture across cloud and enterprise.

Skills

Cybersecurity basics

Vulnerability management

Cloud security

Communication

Compliance knowledge

Education

Bachelors in Cybersecurity/IT/CS

Tools

CrowdStrike

Splunk

Elastic Stack

Azure

OCI

Microsoft 365

Job description

Role: Information Security Analyst (VTM/Vulnerability Management)

Location: Dallas, TX (Must be local to Dallas and able to come onsite to the Dallas office twice per month – hybrid/work from home)

Synonymous Business Title (s): Lead SIEM Analyst, Lead Security Administrator

Requirement

US Citizen (Must Hold OR Be Willing to Obtain a Government Clearance)

About BY Defense Solutions

Blue Yonder Defense Solutions, LLC., a Blue Yonder company, is the leader in supply chain autonomous planning. Our innovative solutions empower businesses to optimize their supply chains, enhance customer experiences, and drive sustainable growth. We are committed to delivering cutting‑edge technology and unparalleled expertise to help our defense and humanitarian‑aid clients navigate the complexities of the modern supply chain.

Overview

Blue Yonder Defense Solutions (BYDS) is seeking an Information Security Analyst to support the organization's cybersecurity operations, vulnerability management program, compliance initiatives, and risk management activities. This role plays a critical part in identifying, analyzing, and remediating security vulnerabilities across cloud and on‑premises environments while helping maintain compliance with government and industry security requirements.

The successful candidate will support compliance with ISO/IEC 27001, the Department of Defense Cybersecurity Maturity Model Certification (CMMC) Level 2, NIST Special Publication 800-171 and Special Publication 800-53, along with other cybersecurity standards applicable to U.S. Government contractors. The role supports a cloud‑first environment utilizing Microsoft Azure, Oracle Cloud Infrastructure (OCI), and Microsoft 365 and will work closely with IT, engineering, and business stakeholders to strengthen Blue Yonder Defense Solutions overall security posture.

Security Tech Stack/Tools

Cloud & Identity Platforms

• Azure AD / Entra ID, AWS IAM, Oracle IAM
• Federation & SSO: SAML, OAuth, OIDC, SCIM

Security, Monitoring & Scanning

• SIEM/EDR/XDR (CrowdStrike, Splunk, Elastic etc.)
• Defender for Endpoint, Defender for Cloud, Oracle Vulnerability Manager, Amazon Inspector, Tenable, OpenVAS
• Identity threat analytics and access risk tooling

Automation & Dev Integration

PowerShell, Python, REST / SCIM / Graph / SOAP APIs

Security Compliance

• NIST (National Institute of Standards and Technology) SP 800-171 and SP 800-53
• Cybersecurity Maturity Model Certification (CMMC) Level 2
• ISO/IEC 27001 Information Security Management Standard
• CIS (Center for Internet Security) Benchmarks
• FedRAMP (Federal Risk and Authorization Management Program) fundamentals

What You’ll Be Doing

• Conduct regular vulnerability scans across cloud and on‑premises assets using industry‑standard tools.
• Analyze scan results, assess risk, prioritize findings, and recommend remediation activities based on business impact.
• Collaborate with IT, infrastructure, and development teams to track, prioritize, and remediate security vulnerabilities.
• Develop and maintain automation scripts and reporting processes to support vulnerability management activities.
• Support incident response efforts by providing vulnerability context, risk analysis, and remediation guidance.
• Document vulnerability management processes, findings, remediation activities, and security recommendations.
• Assist with compliance initiatives by providing evidence, reporting, and support for ISO 27001, CMMC Level 2, NIST 800-171, and NIST 800-53 requirements.
• Stay current with emerging threats, vulnerability trends, cybersecurity technologies, and industry best practices.
• Participate in ongoing efforts to strengthen BYDS's security posture across cloud and enterprise environments

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related field; equivalent professional experience considered in lieu of degree.
• 5+ years of cybersecurity, vulnerability management, security operations, or information security experience.
• Experience supporting government, defense contractor, or Defense Industrial Base (DIB) environments.
• Working knowledge of Cybersecurity Maturity Model Certification (CMMC) Level 2 and NIST SP 800-171 and/or NIST SP 800-53 frameworks.
• Hands‑on experience with vulnerability scanning tools, vulnerability assessment, remediation, and risk prioritization.
• Experience securing cloud‑based environments, including Microsoft Azure, Oracle Cloud Infrastructure (OCI), AWS, and/or Microsoft 365.
• Strong communication, documentation, and cross‑functional collaboration skills.

Preferred Qualifications

• Experience supporting ISO/IEC 27001 compliance programs and audits.
• Familiarity with vulnerability management solutions such as Tenable, OpenVAS, Qualys, Rapid7, Amazon Inspector, Microsoft Defender, or similar tools.
• Experience supporting incident response and security investigations.
• Experience working within highly regulated environments subject to government or defense cybersecurity requirements.
• Industry certifications such as Security+, CySA+, SSCP, GSEC, SC-200, AZ‑500, or equivalent cybersecurity certifications.

Preferred Certifications

• One or more industry-recognized cybersecurity certifications such as Security+, CySA+, SSCP, GSEC, Microsoft Security (SC-200/AZ-500), or equivalent.
• Certifications or training related to ISO 27001, NIST SP 800-171, or NIST SP 800-53 are a plus.

Soft Skills

• Strong analytical, troubleshooting, and problem‑solving skills.
• Excellent written, verbal, and technical documentation skills.
• Ability to manage multiple priorities while maintaining attention to detail.
• Ability to communicate effectively with both technical and non‑technical stakeholders.
• Collaborative mindset with a commitment to continuous learning and professional growth.

The annual salary range for this position is $98,234.50 - $123,765.49

The salary range information provided, reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Individual salary will be commensurate with skills, experience, certifications or licenses and other relevant factors. In addition, this role will be eligible to participate in either the annual performance bonus or commission program, determined by the nature of the position.

Benefits

• Comprehensive Medical, Dental and Vision
• 401K with Matching
• Flexible Time Off
• Corporate Fitness Program
• A variety of voluntary benefits such as; Legal Plans, Accident and Hospital Indemnity, Pet Insurance and much more

At Blue Yonder, we care about the wellbeing of our employees and those most important to them. This is reflected in our robust benefits package and options that includes:

At Blue Yonder, we are committed to a workplace that genuinely fosters inclusion and belonging in which everyone can share their unique voices and talents in a safe space. We continue to be guided by our core values and are proud of our diverse culture as an equal opportunity employer. We understand that your career search may look different than others, and embrace the professional, personal, educational, and volunteer opportunities through which people gain experience.

Our Values

If you want to know the heart of a company, take a look at their values. Ours unite us. They are what drive our success – and the success of our customers. Does your heart beat like ours? Find out here: Core Values

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.