Systems Security Analyst

ADG Tech Consulting, LLC; Vienna (VA); Hybrid; USD 90,000 - 120,000; Full time

Job summary

ADG Tech Consulting, LLC is seeking a Systems Security Analyst to improve government client missions. In this hybrid role, you will lead a security team, ensuring compliance with stringent federal cybersecurity standards.

The ideal candidate will have a Bachelor's in Computer Science and be knowledgeable in vulnerability management and security audits. Proficiency in tools like Tenable, Jira, and Excel is essential for this position.

US citizenship is required for obtaining a US government Public Trust clearance.

Qualifications

• Extensive knowledge of federal cybersecurity governance and continuous monitoring processes.
• Proficient in interpreting security hardening standards and compliance baselines.
• Skilled in vulnerability management workflows and remediation.

Responsibilities

• Serve as the security technical SME and lead a security team.
• Oversee handling of identified security weaknesses and management processes.
• Support development team in enhancing the DevSecOps process.

Skills

Federal cybersecurity governance

Security hardening standards

Vulnerability management workflows

Documentation skills

Generative AI tools

Education

Bachelor's Degree in Computer Science or similar

Tools

Tenable/Nessus

Jira

Excel

ServiceNow

CSAM/GRC

Job description

We are seeking Systems Security Analyst to join our team. In this role, you will have the opportunity to work on modernization and technology transformation projects that will positively impact the critical missions of our government clients and solve challenges that aim to improve millions of lives across the globe.

Responsibilities

• Serve as the security technical SME, collaborating with the delivery team project manager and leading a security team of approximately five members
• Act as the security technical SME in interactions with government project customers, ISSOs, and ISMs
• Define, implement, and manage security team processes and procedures, ensuring team understanding and compliance
• Oversee technical aspects of handling identified security weaknesses and POA&Ms from intake through remediation
• Support the development team in executing and enhancing the DevSecOps process, aligning with the customer’s “security to the left” requirement

Experience and Skills

• Extensive knowledge of federal cybersecurity governance, risk management, and continuous monitoring processes, including RMF, NIST SP 800-53, NIST CSF, A&A/C&A, POA&M management, and control validation
• Proficient in interpreting and applying security hardening standards and compliance baselines (DISA STIGs, CIS Benchmarks, CVEs), and assessing technical findings against organizational security requirements
• Skilled invulnerability management workflows, including Tenable/Nessus scan analysis, validation of findings, identification of false positives, and translating vulnerabilities into remediation or POA&M actions
• Experienced inweakness and POA&M remediation through review of SSPs, assessment results, scans, remediation artifacts, and risk analysis in accordance with NIST and federal standards
• Capable of updating and maintaining SSP documentation for enterprise and cloud environments, including control tailoring, inheritance documentation, and alignment with RMF, FedRAMP, and federal requirements
• Proficient in managing vulnerability and POA&M workflows across CSAM/GRC, WTT/ServiceNow, Jira, and Excel, ensuring data alignment, traceability, and closure readiness
• Able to participate in security audits and assessments, interpret findings, and coordinate remediation and evidence collection for compliance and operational requirements
• Strong documentation skills, translating complex workflows into clear process diagrams, SOPs, and management-ready summaries for cross-functional teams
• Experienced in leveraging Generative AI tools to enhance cybersecurity workflows, research, documentation, and decision support, with careful attention to information sensitivity and validation

Education

Bachelors Degree in Computer Science or similar required

Work Authorization

US citizenship required in order to obtain a US government Public Trust clearance

Location/Remote

Hybrid, candidate must be local to DC Metro and ready to come 3 days onsite a week.