IT - Cybersecurity Solution Security Analyst

Apex Systems; McLean (VA); Hybrid; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

401K plan

ESPP (employee stock purchase program)

Job summary

Everforth Apex Systems is seeking an IT - Cybersecurity Solution Security Analyst in McLean, VA (Hybrid) to assess proposed technologies, cloud platforms, and third‑party vendors before production use. This role focuses on security reviews rather than hands‑on engineering, and requires strong knowledge of application and cloud security and secure SDLC.

The ideal candidate will analyze data flows, communicate findings to both technical and non‑technical stakeholders, and collaborate with

Qualifications

• Bachelor's degree in Computer Science, Information Security, Engineering, or related field, or equivalent experience.
• 5–7+ years of experience in cybersecurity, technology, software engineering, solution architecture, risk assessment, or related discipline.
• Strong understanding of modern application security, cloud security practices, and secure software development lifecycles.

Responsibilities

• Perform comprehensive cybersecurity reviews and provide security guidance for business and technology initiatives to ensure alignment with security standards.
• Assess internal and external applications, vendor solutions, APIs, integrations, cloud services, identity architectures, and data flows throughout the solution lifecycle.
• Develop and maintain solution security artifacts, including architecture reviews, data flow diagrams, security requirements, and implementation guidance.
• Communicate security risks, trade-offs, and mitigation strategies to technical and non-technical stakeholders to enable informed business decisions.
• Coordinate assessments with the governance, risk, and compliance team, which manages formal risk registry functions.
• Define review scope, identify security requirements, and ensure necessary validation activities are completed.
• Evaluate architecture artifacts, including network diagrams, data flow diagrams, integration patterns, API designs, vulnerability assessments, and assessment documentation.
• Identify security gaps, document risks, identify compensating controls, and support remediation efforts prior to production release.
• Contribute to the evolution of security standards, reference architectures, secure development practices, and governance processes.

Skills

Application security

Cloud security

Secure SDLC

Networking concepts

Architecture/diagrams

Education

Bachelor's degree

Tools

AuditBoard

ServiceNow

Job description

Job Description

IT - Cybersecurity Solution Security Analyst

Job #

3058980

Location

McLean, Virginia (Hybrid)

Alternate Locations

Dallas, Texas; Memphis, Tennessee

Role Overview

An established organization seeks a technically grounded cybersecurity professional to assess proposed technologies, enterprise applications, artificial intelligence solutions, cloud platforms, and third‑party vendors prior to production use. This position serves in a technical advisory and assessment capacity, focusing on security reviews rather than hands‑on engineering, security operations center operations, audit, or traditional governance, risk, and compliance. The successful candidate will leverage technical breadth to evaluate how systems are constructed, analyze data exchange mechanisms, identify potential vulnerabilities, formulate evidence requests, and communicate findings clearly to both technical and non‑technical stakeholders.

Key Responsibilities

• Perform comprehensive cybersecurity reviews and provide security guidance for business and technology initiatives to ensure alignment with security standards.
• Assess internal and external applications, vendor solutions, APIs, integrations, cloud services, identity architectures, and data flows throughout the solution lifecycle.
• Develop and maintain solution security artifacts, including architecture reviews, data flow diagrams, security requirements, and implementation guidance.
• Communicate security risks, trade‑offs, and mitigation strategies to technical and non‑technical stakeholders to enable informed business decisions.
• Coordinate assessments with the governance, risk, and compliance team, which manages formal risk registry functions.
• Define review scope, identify security requirements, and ensure necessary validation activities are completed.
• Evaluate architecture artifacts, including network diagrams, data flow diagrams, integration patterns, API designs, vulnerability assessments, and assessment documentation.
• Identify security gaps, document risks, identify compensating controls, and support remediation efforts prior to production release.
• Contribute to the evolution of security standards, reference architectures, secure development practices, and governance processes.

Required Qualifications

Education: Bachelor's degree in Computer Science, Information Security, Engineering, or a related field, or equivalent experience.

Experience: Approximately 5 to 7+ years of experience in cybersecurity, technology, software engineering, solution architecture, risk assessment, or a related discipline, with at least 5 years assessing or delivering applications, cloud services, integrations, APIs, or enterprise technology solutions.

Technical Skills: Strong understanding of modern application security, cloud security practices, and secure software development lifecycles. Working knowledge of networking concepts and controls, including TCP/IP, DNS, routing, and network segmentation. Proven ability to interpret network, architecture, and data‑flow diagrams to identify potential security issues.

Preferred Qualifications

• Experience evaluating security risks in artificial intelligence and generative artificial intelligence systems, including model integration and data governance.
• Prior experience supporting hospitality, travel, e‑commerce, payments, financial services, or other large‑scale customer‑facing platforms.
• Industry certifications such as CISSP, CISM, CCSP, AWS Certified Security - Specialty, or AWS Certified Solutions Architect.
• Familiarity with regulatory and industry frameworks, including PCI DSS, GDPR, CCPA, NIST 800‑53, SOC 2, and ISO 27001.
• Experience utilizing AuditBoard or ServiceNow workflow platforms.

Benefits Overview

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.

Equal Opportunity Statement

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

Accommodations for ADA

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

Transparency in Coverage

UnitedHealthcare creates and publishes the Transparency in Coverage Machine‑Readable Files on behalf of Everforth Apex Systems.

Corporate Information

© 2026 Everforth, Inc. All rights reserved.

Everforth Apex Systems is part of the Commercial Segment of Everforth, Inc.

NYSE: EFOR

4400 Cox Road

Suite 200

Glen Allen, Virginia 23060

Everforth Apex is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law. If you have visited our website in search of information on employment opportunities or to apply for a position, and you require an accommodation in using our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. (Do not submit resumes or solicit consultants to this email address). UnitedHealthcare creates and publishes the Transparency in Coverage Machine‑Readable Files on behalf of Everforth Apex.