Senior Security Analyst, Remote — Federal Security

Blu Omega Inc.; Ashburn, Northern (VA, KY); Hybrid; USD 150,000 - 165,000; Full time

Benefits offered by this job

Medical, Dental, Vision coverage

401(k) with company match

Life and AD&D insurance

Short-term and long-term disability

EAP and mental health resources

Telehealth and virtual care

Pet insurance and identity protection

PTO and federal holidays

Job summary

Blu Omega is seeking a Senior Security Analyst to protect enterprise systems and data for mission‑critical federal programs. This remote role supports Windows, Linux, cloud, and enterprise environments from Ashburn, VA with a Public Trust eligibility requirement.

Responsibilities include vulnerability management, system hardening, SA&A, incident response, threat modeling, and security governance. Collaboration with engineering, compliance, and program teams is essential to strengthen security

Qualifications

• 5+ years of experience in cybersecurity operations, vulnerability management, security assessment, or risk mitigation within regulated environments.
• Hands‑on experience with vulnerability scanning tools such as Nessus, AppScan, Fortify, WebInspect, or Squirrel.
• Experience analyzing vulnerability scan results and mapping findings to NIST SP 800-53 security controls.
• Experience performing system security assessments, SA&A activities, POA&M management, and compliance documentation.
• Strong understanding of system hardening, vulnerability remediation, security controls, and risk management.
• Ability to analyze complex technical security issues and develop actionable mitigation strategies.
• Strong written communication skills for developing security reports, policies, procedures, and audit documentation.
• Ability to collaborate effectively with engineering, compliance, program, and leadership teams.
• Active CDC badge/credentials.
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination.
• U.S. Citizen or Lawful Permanent Resident (Green Card Holder).

Responsibilities

• Perform system hardening, vulnerability assessments, STIG remediation, and POA&M tracking across Windows, Linux, and cloud environments.
• Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, Squirrel, or similar technologies.
• Analyze vulnerability scan results, translating technical findings into security risks, remediation actions, and mapping to NIST SP 800-53 security controls.
• Monitor endpoint security, identity and access management, privileged access management, and other enterprise security tools.
• Support system SA&A activities, security control assessments, compliance reviews, and audits.
• Lead or support incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement.
• Conduct risk assessments and threat modeling to identify security weaknesses and recommend mitigation strategies.
• Develop and maintain security governance documentation, including policies, standards, operational procedures, security reports, business continuity materials, and authorization artifacts.
• Partner with system owners, engineers, and technical teams to validate remediation activities and ensure vulnerabilities are properly addressed.
• Support secure configuration management, least‑privilege access controls, system authorization, and continuous monitoring activities.
• Identify opportunities to reduce attack surface, improve detection and response capabilities, and strengthen overall security posture.

Skills

Vulnerability management

Security assessment

Risk mitigation

SA&A coordination

Tools

Nessus

AppScan

Fortify

WebInspect

Squirrel

Job description

Blu Omega is seeking a Senior Security Analyst to protect enterprise systems and data for mission‑critical federal programs. This remote role supports Windows, Linux, cloud, and enterprise environments from Ashburn, VA with a Public Trust eligibility requirement.

Responsibilities include vulnerability management, system hardening, SA&A, incident response, threat modeling, and security governance. Collaboration with engineering, compliance, and program teams is essential to strengthen security