Senior Security Analyst

Blu Omega Inc.; Ashburn, Northern (VA, KY); Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

401(k) with company match

Life and AD&D insurance

Short-term and long-term disability

EAP and mental health resources

Telehealth and virtual care

Pet insurance and identity protection

PTO and federal holidays

Job summary

Blu Omega is seeking a Senior Security Analyst to protect enterprise systems and data for mission‑critical federal programs. This remote role supports Windows, Linux, cloud, and enterprise environments from Ashburn, VA with a Public Trust eligibility requirement.

Responsibilities include vulnerability management, system hardening, SA&A, incident response, threat modeling, and security governance. Collaboration with engineering, compliance, and program teams is essential to strengthen security

Qualifications

• 5+ years of experience in cybersecurity operations, vulnerability management, security assessment, or risk mitigation within regulated environments.
• Hands‑on experience with vulnerability scanning tools such as Nessus, AppScan, Fortify, WebInspect, or Squirrel.
• Experience analyzing vulnerability scan results and mapping findings to NIST SP 800-53 security controls.
• Experience performing system security assessments, SA&A activities, POA&M management, and compliance documentation.
• Strong understanding of system hardening, vulnerability remediation, security controls, and risk management.
• Ability to analyze complex technical security issues and develop actionable mitigation strategies.
• Strong written communication skills for developing security reports, policies, procedures, and audit documentation.
• Ability to collaborate effectively with engineering, compliance, program, and leadership teams.
• Active CDC badge/credentials.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• U.S. Citizen or Lawful Permanent Resident (Green Card Holder).

Responsibilities

• Perform system hardening, vulnerability assessments, STIG remediation, and POA&M tracking across Windows, Linux, and cloud environments.
• Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, Squirrel, or similar technologies.
• Analyze vulnerability scan results, translating technical findings into security risks, remediation actions, and mapping to NIST SP 800-53 security controls.
• Monitor endpoint security, identity and access management, privileged access management, and other enterprise security tools.
• Support system SA&A activities, security control assessments, compliance reviews, and audits.
• Lead or support incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement.
• Conduct risk assessments and threat modeling to identify security weaknesses and recommend mitigation strategies.
• Develop and maintain security governance documentation, including policies, standards, operational procedures, security reports, business continuity materials, and authorization artifacts.
• Partner with system owners, engineers, and technical teams to validate remediation activities and ensure vulnerabilities are properly addressed.
• Support secure configuration management, least‑privilege access controls, system authorization, and continuous monitoring activities.
• Identify opportunities to reduce attack surface, improve detection and response capabilities, and strengthen overall security posture.

Skills

Vulnerability management

Security assessment

Risk mitigation

SA&A coordination

Tools

Nessus

AppScan

Fortify

WebInspect

Squirrel

Job description

Back Senior Security Analyst Cloud/Infrastructure Ashburn , VA Oct 5, 2026

Senior Security Analyst

Remote

Blu Omega is seeking a Senior Security Analyst to support public health data modernization and advanced analytics initiatives for mission‑critical federal programs. This role is responsible for protecting enterprise systems, applications, and data by identifying security risks, managing vulnerabilities, supporting system authorization activities, and ensuring compliance with federal security requirements. You will work closely with engineering, infrastructure, compliance, and program teams to enhance security across Windows, Linux, cloud, and enterprise technology environments.

Program Overview

Supporting federal public health modernization efforts to improve data security and analytics capabilities.

Key Details

Location: Remote

Clearance / Suitability: Public Trust eligibility required

Responsibilities

• Perform system hardening, vulnerability assessments, STIG remediation, and POA&M tracking across Windows, Linux, and cloud environments.
• Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, Squirrel, or similar technologies.
• Analyze vulnerability scan results, translating technical findings into security risks, remediation actions, and mapping to NIST SP 800-53 security controls.
• Monitor endpoint security, identity and access management, privileged access management, and other enterprise security tools.
• Support system Security Assessment and Authorization (SA&A) activities, security control assessments, compliance reviews, and audits.
• Lead or support incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement.
• Conduct risk assessments and threat modeling to identify security weaknesses and recommend mitigation strategies.
• Develop and maintain security governance documentation, including policies, standards, operational procedures, security reports, business continuity materials, and authorization artifacts.
• Partner with system owners, engineers, and technical teams to validate remediation activities and ensure vulnerabilities are properly addressed.
• Support secure configuration management, least‑privilege access controls, system authorization, and continuous monitoring activities.
• Identify opportunities to reduce attack surface, improve detection and response capabilities, and strengthen overall security posture.

Required Qualifications

• 5+ years of experience in cybersecurity operations, vulnerability management, security assessment, or risk mitigation within regulated environments.
• Hands‑on experience with vulnerability scanning tools such as Nessus, AppScan, Fortify, WebInspect, or Squirrel.
• Experience analyzing vulnerability scan results and mapping findings to NIST SP 800-53 security controls.
• Experience performing system security assessments, SA&A activities, POA&M management, and compliance documentation.
• Strong understanding of system hardening, vulnerability remediation, security controls, and risk management.
• Ability to analyze complex technical security issues and develop actionable mitigation strategies.
• Strong written communication skills for developing security reports, policies, procedures, and audit documentation.
• Ability to collaborate effectively with engineering, compliance, program, and leadership teams.
• Active CDC badge/credentials.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• U.S. Citizen or Lawful Permanent Resident (Green Card Holder).

Salary Range

$150,000.00 - $165,000.00

Blu Omega Benefits & Perks

• Medical, Dental, and Vision coverage through national providers
• 401(k) with company match (eligible after 6 months; vesting applies)
• Company-paid Life and AD&D insurance with additional voluntary options
• Short-term disability (company-paid) and long-term disability options
• Employee Assistance Program (EAP) with 24/7 confidential support and mental health resources
• Telehealth and virtual care options
• Pet insurance, legal services, and identity theft protection options
• Paid Time Off (PTO) and paid federal holidays
• Access to wellness programs, discounts, and lifestyle benefits

Benefits eligibility and offerings may vary based on role, employment status, and program requirements.

Company Overview

Blu Omega is a Woman‑Owned Small Business (WOSB) delivering technology and cybersecurity solutions to federal agencies and enterprise clients nationwide. Headquartered in Ashburn, VA, we support mission‑critical programs across civilian and defense sectors, including health, national security, and regulatory environments. We partner with government agencies and large integrators to provide expertise in cybersecurity operations, cloud and infrastructure modernization, data and analytics, and enterprise IT support.

Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability.

#CJ #LI-Remote