Strategic Cyber Risk & Threat Analyst

NTT DATA, Inc.; Arlington (VA); On-site; USD 110,000 - 184,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

401(k) with company match

Life and AD&D insurance

Paid time off and EAP

Job summary

NTT DATA in Arlington, VA is seeking a Cybersecurity and Risk Analyst to join the Vulnerability Assessment and Penetration Testing team. You will evaluate vulnerabilities, apply threat intelligence, and support compliance to protect information confidentiality, integrity and availability.

The role covers vulnerability assessments, risk evaluations, and red-team activities aligned with NIST SP 800-53, FISMA and ISO/IEC 27001, delivering actionable leadership reporting and cross-team collaboration

Qualifications

• Master’s degree in IT, Cybersecurity, Data Science, Information Systems or Computer Science.
• 8+ years of IT and/or information security experience.
• DoD 8140 certification or ability to obtain within 6 months.
• Active Secret or higher clearance; eligible for Top-Secret if requested.

Responsibilities

• Identify, analyze and mitigate cybersecurity risks across systems, networks and applications.
• Conduct vulnerability assessments and risk evaluations using NIST/ISO frameworks.
• Support audits by mapping findings to compliance requirements (FISMA, HIPAA, PCI-DSS).
• Prepare detailed technical and executive risk reports for leadership.
• Collaborate with engineers, SOC, and owners to remediate threats.

Skills

Vulnerability assessment

Threat analysis

Compliance familiarity

Leadership communication

Education

Master’s degree in IT/CS

Education Equivalency: 1.5 years

Tools

NIST SP 800-53

ISO 27001

CIS Controls

FISMA

Job description

NTT DATA in Arlington, VA is seeking a Cybersecurity and Risk Analyst to join the Vulnerability Assessment and Penetration Testing team. You will evaluate vulnerabilities, apply threat intelligence, and support compliance to protect information confidentiality, integrity and availability.

The role covers vulnerability assessments, risk evaluations, and red-team activities aligned with NIST SP 800-53, FISMA and ISO/IEC 27001, delivering actionable leadership reporting and cross-team collaboration