20 information security risk analyst jobs at 17 companies in Laurel, MD
4w
Save
Mark Applied
Hide
Senior Information Security Risk Analyst
Washington, District of Columbia, United States
$103k-$191k/yr HybridFull Time
3+ YOEBS/BA required, 3+ years information security experience with at least 1 year in third‑party risk management; knowledge of network, access control and encryption; strong communication and analytical skills.
3mo
Save
Mark Applied
Hide
Sr Information Security Analyst II - IT
Washington, District of Columbia, United States
$141k-$243k/yr OnsiteFull Time
6+ YOESenior information security analyst with 6+ years of experience, bachelor's degree or equivalent, strong risk management, governance, and compliance knowledge.
1mo
Save
Mark Applied
Hide
Security Governance Risk & Compliance (GRC) Analyst
Washington, District of Columbia, United States
$130k-$170k/yr RemoteFull Time
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
Kubernetes, GCP, AWS, Terraform, GitHub, Okta, Hyperproof, Vanta, Drata, Datadog, Splunk
1w
Save
Mark Applied
Hide
Security Analyst, Third-Party Ecosystem Risk Management
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam or United States or Canada or United Kingdom or Europe
$119k-$176k/yr HybridFull Time
4+ YOERequires 4+ years in vendor risk management, third-party security assessments, risk lifecycle management, security frameworks, program maturation, documentation, communication, and AI-assisted tooling.
SOC 2, ISO 27001, NIST CSF, OneTrust, ProcessUnity, Whistic, SecurityScorecard
5h
Save
Mark Applied
Hide
Principal Technical Risk Analyst
Vienna, Virginia, United States
$150k-$206k/yr HybridFull Time
5+ YOERequires a bachelor's or master's degree or equivalent experience, significant risk assessment and information security experience, Lines of Defense expertise, stakeholder leadership, risk-control knowledge, and Lean Six Sigma experience.
Lean Six Sigma
1w
Save
Mark Applied
Hide
Analyst, Risk Analytics
London or New York City or Reston
OnsiteFull Time
2+ YOERequires statistics and data analysis expertise, SQL and Python or R, data modeling, information security knowledge, and typically 2 years of relevant experience. Bachelor's degree preferred.
SQL, Python, R, Git, GitHub, GitLab, Microsoft Power BI, Tableau, Looker, Domo, CMDB, SIEM
3mo
Save
Mark Applied
Hide
IT Security Analyst
Baltimore, Maryland, United States
$90k-$100k/yr OnsiteFull Time
2+ YOEBachelor’s in cybersecurity or IT; 2–5+ years in cybersecurity; strong analytical skills; knowledge of risk, resilience, and security tooling; on-site role.
SIEM, EDR, Vulnerability Scanning, Incident Response Tools
2mo
Save
Mark Applied
Hide
UAS Security Analyst
Washington, District of Columbia, United States
$50k-$175k/yr OnsiteFull Time
2+ YOEExperience in security analysis, risk assessment, or related analytical role; strong security principles, controls, and vulnerability management; ability to communicate findings clearly; strong written/verbal communication; ability to work independently and collaboratively.
3w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOEBachelor's in Cybersecurity/IT (or 4 years' extra experience), 8+ years in security operations/vulnerability management (reduced with advanced degrees), hands-on ISVM and API scanning experience, automation and compliance familiarity, U.S. citizenship.
ISVM, API scanning
4w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOE8+ years in security operations or vulnerability management; Bachelor in Cybersecurity/IT (or 4 years additional experience); hands-on vulnerability scanning, cloud compliance, ISVM, API scanning; Secret clearance and U.S. citizenship required.
ISVM, DHS 4300A, NIST SP 800-115, CISA BOD 23-01
2mo
Save
Mark Applied
Hide
Risk and Vulnerability Analyst II
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3–5 years security experience performing vulnerability assessments and scanning across OS, databases, web apps and cloud; troubleshooting scan tools; automation and ISVM experience; Bachelor's degree; Secret clearance eligible.
Information System Vulnerability Management (ISVM)
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst #1809720
Washington, District of Columbia, United States
$114k-$127k/yr OnsiteFull Time
8+ YOEU.S. citizen with active TS clearance and ability to obtain SCI and pass CI polygraph; Bachelor's in CS/IT/business; 8+ years cybersecurity/risk/supply chain experience; Network+ and Security+ preferred.
2w
Save
Mark Applied
Hide
Cybersecurity Analyst
Arlington, Virginia, United States
$130k-$155k/yr OnsiteFull Time
10+ YOEBachelor's degree or equivalent experience; 10+ years in cybersecurity, information security engineering, or security architecture; cloud, multi-cloud, risk assessment, security frameworks, IAM, cryptography, and DevSecOps expertise.
Azure, AWS, NIST 800-53, FISMA, FedRAMP, ISO 27000, SAML, OAuth, OIDC, Multi-Factor Authentication, DevSecOps
2w
Save
Mark Applied
Hide
Senior Security Governance and Policy Analyst
Washington, District of Columbia, United States
$145k-$168k/yr OnsiteFull Time
10+ YOEBachelor's degree or equivalent experience, 10+ years of progressive cybersecurity experience, federal and intelligence community program experience, governance, policy, risk, compliance, cloud and on-premises expertise.
NIST Cybersecurity Framework (CSF), NIST Special Publications (800 Series), Risk Management Framework (RMF), FISMA, CNSS, Intelligence Community Directives (ICDs), Zero Trust Architecture
3w
Save
Mark Applied
Hide
Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph
Annapolis Junction or Sterling
$128k-$173k/yr OnsiteFull Time
6+ YOEActive TS/SCI with polygraph, 6+ years related experience, DoD 8570 IAT Level II cert (e.g., Security+ CE, CND, SSCP, GSEC, GICSP, CySA+, CCNA Security), bachelor’s or equivalent, 3+ years IC RMF A&A, 1+ year Xacta experience, NIST 800-53 knowledge.
Xacta
3w
Save
Mark Applied
Hide
Cybersecurity Analyst (Risk Management Framework) – TS/SCI w/ Polygraph
Annapolis Junction or Sterling
$128k-$173k/yr OnsiteFull Time
General Dynamics Information TechnologyNYSE: GD: Provides mission-critical IT services to government and defense organizations.
6+ YOEActive TS/SCI with Polygraph, 6+ years related experience, 3+ years IC RMF A&A experience, bachelor’s in technical field or equivalent, DoD 8570 IAT Level II cert (e.g., Security+ CE) and 1+ year Xacta experience.
Xacta
3w
Save
Mark Applied
Hide
Cybersecurity Analyst
Annapolis Junction, Maryland, United States
OnsiteFull Time
7+ YOERequires active Secret clearance, US citizenship, 7+ years in cybersecurity, and 4+ years managing POA&Ms, federal security frameworks, vulnerability and risk management. Daily onsite work and 24x7x365 on-call availability required.
NIST 800-53, Risk Management Framework (RMF), Federal Information Security Modernization Act (FISMA), antivirus software, vulnerability scanners, access control, endpoint protection, Public Key Infrastructure (PKI), Security Information and Event Management (SIEM), Data Loss Prevention (DLP)
1mo
Save
Mark Applied
Hide
Critical Infrastructure Analyst
Washington, District of Columbia, United States
$135k-$279k/yr HybridFull Time
3+ YOE3+ years cyber experience with OT/ICS security, risk assessment, and familiarity with critical infrastructure sectors and threat actor TTPs.
PLC, SCADA, IEC 62443, NIST SP 800-82, Purdue Model, DMZ, Dragos, Nozomi, Claroty
1mo
Save
Mark Applied
Hide
System Vulnerability Analyst
Annapolis Junction, Maryland, United States
$50k-$290k/yr OnsiteFull Time
The Swift Group: Providing engineering and cybersecurity services for national security missions.
2+ YOEPerform vulnerability assessments and security analysis of systems, networks, hardware and software; recommend mitigations. Requires OS/network knowledge, risk analysis skills, and active TS/SCI with Polygraph and U.S. citizenship.
2mo
Save
Mark Applied
Hide
Post-Quantum Cryptography (PQC) Program Analyst / Cryptographic Modernization Specialist
Alexandria, Virginia, United States
OnsiteFull Time
10+ YOEBachelor's degree and 10+ years experience in cybersecurity/cryptography, PKI, security architecture, and risk management; experience with DoD cryptographic modernization, migration planning, and executive briefings; active Top Secret/SCI clearance required.
PKI, KMI, COMSEC, Risk Management Framework (RMF), Zero Trust Architecture, Microsoft Office Suite
Explore Jobs