Senior Security Analyst (TS/SCI with Polygraph)

GetHired, Inc.; Corridor North (MD); On-site; USD 140,000 - 200,000; Full time

Job summary

Yellow Duck Technologies is seeking a Senior Security Analyst to ensure secure software development across the lifecycle and to support DevSecOps implementations compliant with RMF and DoD standards.

The role requires a TS/SCI clearance with polygraph, 10+ years in information security, and deep knowledge of DoD requirements (NIST 800-53, RMF) along with SAST/DAST/SCA tooling. Experience with containerization and Kubernetes security is essential.

Qualifications

• Active TS/SCI clearance with polygraph is required.
• Bachelor's degree in Cybersecurity, Computer Science, or related field; 4 years can substitute for a degree.
• 10+ years of information security experience.
• Strong knowledge of DoD security requirements (NIST 800-53, RMF).
• Experience with security testing tools (SAST, DAST, SCA).
• Understanding of secure software development lifecycle.
• Knowledge of containerization security and Kubernetes security.
• Experience with security compliance and authorization processes.
• Security+ or equivalent certification required; CISSP/GIAC or similar preferred.

Responsibilities

• Implement security controls and best practices.
• Support DevSecOps pipeline security integration.
• Conduct security assessments and vulnerability analysis.
• Manage security findings and POA&M.
• Support RMF activities and security documentation.
• Coordinate security scans and remediation efforts.
• Review code for security vulnerabilities.
• Implement secure coding practices and guidelines.
• Support incident response and security investigations.
• Maintain security documentation and compliance records.

Skills

DevSecOps

RMF

SAST

DAST

SCA

Container security

Kubernetes security

Education

Bachelor's degree in Cybersecurity/CS/related field

Tools

SAST

DAST

SCA

Kubernetes

Job description

Yellow Duck Technologies is seeking a cleared Senior Security Analyst to ensure that all development activities comply with security requirements and implements security best practices throughout the software lifecycle. This position supports DevSecOps implementation, conducts security assessments, and ensures the unified solution meets all DoD security standards and Risk Management Framework (RMF) requirements.

Responsibilities

• Implement security controls and best practices.
• Support DevSecOps pipeline security integration.
• Conduct security assessments and vulnerability analysis.
• Manage security findings and Plan of Action & Milestones (POA&M).
• Support RMF activities and security documentation.
• Coordinate security scans and remediation efforts.
• Review code for security vulnerabilities.
• Implement secure coding practices and guidelines.
• Support incident response and security investigations.
• Maintain security documentation and compliance records.

Requirements

• Must have an active TS/SCI clearance with polygraph.
• Bachelor's degree in Cybersecurity, Computer Science, or related field.An additional 4 years of experience may substitute for a Bachelor’s degree.
• 10+ years of information security experience.
• Strong knowledge of DoD security requirements (NIST 800-53, RMF, etc.).
• Experience with security testing tools (SAST, DAST, SCA).
• Understanding of secure software development lifecycle.
• Knowledge of containerization security and Kubernetes security.
• Experience with security compliance and authorization processes.
• Security+ or equivalent certification (required).
• CISSP, GIAC, or similar advanced security certification (preferred).

Yellow Duck Technologies provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, ethnicity, religion, sex, sexual orientation, gender identity and expression, national origin, disability, genetic information, veteran status, or any other protected characteristic or class.