Senior Security Analyst

Kelly Services; Herndon (VA); Hybrid; USD 96,000 - 103,000; Full time

Job summary

Motion Recruitment Partners (MRP) is hiring a hybrid Security Analyst in Herndon, VA for a 12-month contract-to-hire with a focus on FedRAMP compliance and cloud security. The role emphasizes automation, vulnerability management, and collaboration with Cloud Operations and cybersecurity teams.

The candidate will work on FedRAMP documentation, vulnerability remediation, and risk-based security improvements across government and enterprise environments using Red Hat Linux, Windows Servers, and

Qualifications

• Deep understanding and documentation of information system specs and security controls (diagrams, data flow).
• Application of enterprise security frameworks including FISMA/NIST SP 800 for cloud.
• Knowledge of Risk-Based Vulnerability Framework and remediation prioritization.
• Ability to create automation scripts (Python, Bash, Java, PowerShell).
• Experience analyzing container vulnerabilities and remediation paths.
• Familiarity with FedRAMP, DoD, and NIST controls including vulnerability management.

Responsibilities

• Create, update, and maintain FedRAMP security documentation and compliance artifacts.
• Assist with continuous compliance monitoring and POA&M management.
• Advise stakeholders on evolving government and cloud security policies.
• Identify, prioritize, and remediate vulnerabilities across cloud and enterprise environments.
• Automate cybersecurity processes with scripting (Python, Bash, PowerShell).
• Collaborate with Cloud Operations and cybersecurity teams to ensure ongoing compliance.

Skills

Security controls

FISMA/NIST SP 800

Vulnerability management

Automation scripting

Container vulnerabilities

FedRAMP/DoD/NIST controls

Tools

Python

Bash

PowerShell

CI/CD pipelines

AWS ECR

Job description

$70 - $75

Our client is a software company based in Herndon, VA that provides secure cloud enterprise software and data solutions for the US government, defense, and intelligence community. They are hiring for a hybrid Security Analyst (3 days on-site) to maintain cybersecurity and regulatory compliance within their cloud enterprise environments using FedRAMP. The technology stack includes Red Hat Linux, Windows Servers, containerization, and automation.

This is an opportunity to build secure cloud environments for government and defense clients. You’ll work with advanced technologies, support critical compliance initiatives, and collaborate with teams. They’re looking for someone with experience in federal compliance, automation scripting, and vulnerability management in cloud environments.

Contract Duration: 12 Month contract-to-hire

Required Skills & Experience

• Deep understanding and documentation of information system specifications and security controls (logical/physical diagrams, data flow)

• Application of enterprise security frameworks, including FISMA and NIST SP 800, especially for cloud environments

• Knowledge of Risk-Based Vulnerability Framework and vulnerability prioritization/remediation

• Ability to create automation scripts to minimize manual workload (Python, Bash, Java, PowerShell)

• Experience analyzing container vulnerabilities and remediation paths (OS and App level)

• Familiarity with current FedRAMP, DoD, and NIST controls, including vulnerability management

Desired Skills & Experience

• Experience creating automation scripts (Python, Bash, Java, PowerShell)

• Knowledge of container scanning tools, CI/CD pipelines, AWS ECR, Container Image Mirroring

• Understanding attack vectors and vulnerability exploitability in complex environments

• Strong knowledge of Federal/DoD policies and risk methodologies: FedRAMP, NIST SPs, RMF overlays

• Hands-on experience with DISA STIGs and SRGs, CNSSI, NIST RMF

• Experience drafting/executing security documentation, ATO packages, POA&Ms, policies

What You Will Be Doing

• Creating, updating, and maintaining FedRAMP-required security documentation and compliance artifacts

• Assisting with continuous compliance monitoring, including POA&M management and corrective actions

• Advising stakeholders on evolving government and cloud security policies and requirements

• Identifying, prioritizing, and remediating system vulnerabilities across cloud and enterprise environments

• Automating cybersecurity processes with scripting (Python, Bash, PowerShell, etc.)

• Collaborating with Cloud Operations and cybersecurity teams to ensure ongoing compliance and security maturity

#LI-EG1

Motion Recruitment Partners (MRP) is an Equal Opportunity Employer. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Employment is subject to the successful completion of a pre-employment screening. Accommodation will be provided in all parts of the hiring process as required under MRP’s Employment Accommodation policy. Applicants need to make their needs known in advance.