Senior Cybersecurity Analyst

IntoneCCM; Arlington (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

Intone Inc is seeking a Senior Cybersecurity Analyst in Arlington, VA for a full-time contract. The role anchors security architecture across on-premises, multi-cloud, and hybrid environments, collaborating with IT, engineering, and vendors to embed security into systems from design through deployment.

The ideal candidate has a decade of cybersecurity experience, strong IAM and cloud controls knowledge (Azure/AWS), and a track record in risk assessments, security automation, and standards

Qualifications

• Bachelor's degree or equivalent professional experience.
• Minimum 10 years of experience in cybersecurity, information security engineering, or security architecture.
• At least 5 years of experience performing security risk assessments and implementing security frameworks such as NIST 800 series, ISO 27000 series, or IT General Controls.
• Experience designing and implementing security controls within cloud environments (Azure and AWS).
• Experience supporting multi-cloud or hybrid infrastructure environments.
• Experience implementing or supporting NIST 800-53, FISMA, or FedRAMP Moderate/High security controls.
• Strong knowledge of IAM and authentication protocols (SAML, OAuth, OIDC, MFA).
• Experience with cryptography, key management, and secrets management platforms.

Responsibilities

• Design, implement, and maintain enterprise security architectures across on-premises and cloud platforms.
• Develop security reference architectures and secure design patterns for scalable deployments.
• Conduct architecture and security design reviews for multi-cloud environments.
• Ensure cybersecurity controls are integrated into system design, development, and deployment processes.
• Support the enterprise cybersecurity program's ongoing maturity.
• Lead threat modeling and collaborate with teams to embed security controls.
• Conduct security risk assessments and align with enterprise risk management.
• Identify vulnerabilities and provide remediation strategies to reduce risk.
• Develop and maintain security standards, policies, and procedures.
• Document security architecture decisions and compliance artifacts.
• Collaborate with IT, OT, and vendors to embed security into initiatives.
• Work with cloud providers to ensure secure system integrations.
• Provide security guidance during platform implementations and upgrades.

Skills

Security architecture

Cloud security

Threat modeling

DevSecOps

IAM

Risk assessment

NIST 800-53

ISO 27000

FedRAMP

FISMA

Encryption

Key management

SAML

OAuth

OIDC

Education

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or related field

Tools

Azure

AWS

Job description

We are seeking a Senior Cybersecurity Analyst for a full-time contract position based in Arlington, Virginia. In this role, you will provide technical leadership in designing, implementing, and maintaining security architecture and controls that protect information systems, operational technology, and cloud infrastructure across a complex multi-cloud and hybrid environment. You will collaborate with IT, engineering, operations, and third-party vendors to embed security into system design, deployment, and ongoing operations.

Responsibilities

• Design, implement, and maintain enterprise security architectures that protect IT and OT environments across on-premises and cloud platforms.
• Develop and maintain security reference architectures and secure design patterns to support repeatable and scalable implementation of cybersecurity controls.
• Conduct architecture and security design reviews for enterprise platforms, applications, and infrastructure in multi-cloud and hybrid environments.
• Ensure cybersecurity controls are integrated into system design, development, and deployment processes.
• Support the implementation and ongoing maturity of the organization's enterprise cybersecurity program.
• Lead threat modeling exercises and collaborate with technical teams to integrate security controls into system architecture and solution design.
• Conduct security risk assessments and ensure alignment with enterprise risk management strategies.
• Identify potential vulnerabilities and provide remediation strategies to reduce organizational risk exposure.
• Develop and maintain security standards, policies, and procedures aligned with regulatory frameworks and industry best practices.
• Ensure security assessments and architecture reviews are documented and executed consistently to deliver high-quality security outcomes.
• Design and implement security controls for cloud environments (Azure and AWS) including identity, network segmentation, encryption, monitoring, and compliance capabilities.
• Support secure deployment practices across DevOps pipelines through DevSecOps integration and automation.
• Research and implement innovative approaches for security automation and security-as-code capabilities.
• Ensure alignment with recognized cybersecurity frameworks including NIST 800-53, FISMA, FedRAMP, and ISO 27000 series.
• Support internal and external security audits, compliance reviews, and control validation activities.
• Maintain documentation of security architecture decisions, assessments, and compliance artifacts.
• Partner with IT, infrastructure, application development, and operational technology teams to embed security into technology initiatives.
• Work closely with vendors, cloud providers, and third-party partners to ensure secure system integrations.
• Provide technical guidance and security expertise during platform implementations and system upgrades.

Qualifications

• Required
• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, or equivalent professional experience.
• Minimum 10 years of experience in cybersecurity, information security engineering, or security architecture, preferably within the energy, utilities, or industrial sectors.
• At least 5 years of experience performing security risk assessments and implementing security frameworks such as NIST 800 series, ISO 27000 series, or IT General Controls.
• Experience designing and implementing security controls within cloud environments (Azure and AWS).
• Experience supporting multi-cloud or hybrid infrastructure environments.
• Experience implementing or supporting NIST 800-53, FISMA, or FedRAMP Moderate/High security controls.
• Strong knowledge of Identity and Access Management (IAM) and authentication protocols including SAML, OAuth, OIDC, and Multi-Factor Authentication.
• Experience with cryptography, key management, and secrets management platforms.
• Deep understanding of network security, data protection, encryption technologies, and secure access controls.
• Familiarity with DevSecOps principles and security automation frameworks.
• Experience securing enterprise applications, cloud services, and infrastructure platforms.