36 security risk analyst jobs at 28 companies in Brambleton, VA
3w
Save
Mark Applied
Hide
Senior Information Security Risk Analyst
Washington, District of Columbia, United States
$103k-$191k/yr HybridFull Time
3+ YOEBS/BA required, 3+ years information security experience with at least 1 year in third‑party risk management; knowledge of network, access control and encryption; strong communication and analytical skills.
1w
Save
Mark Applied
Hide
Security Analyst, Third-Party Ecosystem Risk Management
New York City or Seattle or Raleigh or San Francisco or Washington or London or Amsterdam or United States or Canada or United Kingdom or Europe
$119k-$176k/yr HybridFull Time
4+ YOERequires 4+ years in vendor risk management, third-party security assessments, risk lifecycle management, security frameworks, program maturation, documentation, communication, and AI-assisted tooling.
SOC 2, ISO 27001, NIST CSF, OneTrust, ProcessUnity, Whistic, SecurityScorecard
1w
Save
Mark Applied
Hide
Senior Risk Analyst-CBRNE
Washington, District of Columbia, United States
HybridFull Time
5+ YOEBachelor's degree and 5–7 years in risk or intelligence analysis, national security, or a related field. Requires strong research, analytical, writing, communication, and collaboration skills.
Tableau
1mo
Save
Mark Applied
Hide
Security Governance Risk & Compliance (GRC) Analyst
Washington, District of Columbia, United States
$130k-$170k/yr RemoteFull Time
5+ YOE5+ years in information security/GRC or IT audit, deep knowledge of CMMC/NIST/FedRAMP/SOC2/PCI, cloud and GRC tool experience, strong communication and risk assessment skills.
Kubernetes, GCP, AWS, Terraform, GitHub, Okta, Hyperproof, Vanta, Drata, Datadog, Splunk
1d
Save
Mark Applied
Hide
Risk and Compliance Analyst
United States or Washington
RemoteFull Time
7+ YOERequires 7+ years of information security experience, including 5+ years in risk and compliance, a bachelor's degree, qualifying Level III security certification, U.S. citizenship, and Public Trust High Risk clearance.
1w
Save
Mark Applied
Hide
Analyst, Risk Analytics
London or New York City or Reston
OnsiteFull Time
2+ YOERequires statistics and data analysis expertise, SQL and Python or R, data modeling, information security knowledge, and typically 2 years of relevant experience. Bachelor's degree preferred.
SQL, Python, R, Git, GitHub, GitLab, Microsoft Power BI, Tableau, Looker, Domo, CMDB, SIEM
3mo
Save
Mark Applied
Hide
Sr Information Security Analyst II - IT
Washington, District of Columbia, United States
$141k-$243k/yr OnsiteFull Time
6+ YOESenior information security analyst with 6+ years of experience, bachelor's degree or equivalent, strong risk management, governance, and compliance knowledge.
1w
Save
Mark Applied
Hide
AWS Assurance Delivery Analyst, Operational Effectiveness & Quality - Security Assurance
Arlington or New York City
$74k-$143k/yr OnsiteFull Time
4+ YOEBachelor's degree or equivalent and 4+ years in compliance, audit, risk, governance, or related work. Requires IT security, AWS or cloud computing, process documentation, and cross-functional coordination experience.
AWS, SQL, Microsoft Excel
2mo
Save
Mark Applied
Hide
UAS Security Analyst
Washington, District of Columbia, United States
$50k-$175k/yr OnsiteFull Time
2+ YOEExperience in security analysis, risk assessment, or related analytical role; strong security principles, controls, and vulnerability management; ability to communicate findings clearly; strong written/verbal communication; ability to work independently and collaboratively.
2w
Save
Mark Applied
Hide
SCRM/Emerging Technology Security Analyst
Washington, District of Columbia, United States
OnsiteContract
4+ YOEBachelor's degree or equivalent experience, 4+ years in cybersecurity, third-party/vendor risk, or compliance analysis, and experience producing security risk assessments and mitigation recommendations.
NIST SP 800-218, NIST AI Risk Management Framework and Playbook
1mo
Save
Mark Applied
Hide
Physical Security Analyst
Arlington or United States
OnsiteFull Time
5+ YOETS/SCI and U.S. citizenship required. Bachelor's in security-related discipline plus 5+ years (or 10 years experience). Experience in physical access control, credential/identity management, risk methodologies, security engineering, and government databases; intermediate Microsoft Office skills.
Microsoft Office, Microsoft Word, Microsoft Access, Microsoft Excel, Microsoft PowerPoint, DOD365, SharePoint, Adobe Acrobat, MPICAM, ISMS, Modified Infrastructure Survey Tool (MIST), Interagency Security Committee - Compliance System (ISC-CS), Homeland Security Information Network (HSIN)
2w
Save
Mark Applied
Hide
NAESOC/Industrial Security Analyst - Top Secret
Hanover, Maryland, United States
HybridFull Time
3+ YOERequires 3+ years in industrial security risk identification, data systems, NISPOM, metrics, and analysis; experience with FSO duties, risk mitigation strategies, and security instruction.
NISPOM, NISS, ISFD, eFCL, DISS
3w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOEBachelor's in Cybersecurity/IT (or 4 years' extra experience), 8+ years in security operations/vulnerability management (reduced with advanced degrees), hands-on ISVM and API scanning experience, automation and compliance familiarity, U.S. citizenship.
ISVM, API scanning
3w
Save
Mark Applied
Hide
Senior Risk and Vulnerability Analyst
Chandler or Washington
$104k-$166k/yr OnsiteFull Time
8+ YOE8+ years in security operations or vulnerability management; Bachelor in Cybersecurity/IT (or 4 years additional experience); hands-on vulnerability scanning, cloud compliance, ISVM, API scanning; Secret clearance and U.S. citizenship required.
ISVM, DHS 4300A, NIST SP 800-115, CISA BOD 23-01
2mo
Save
Mark Applied
Hide
Risk and Vulnerability Analyst II
Washington, District of Columbia, United States
HybridFull Time
3+ YOE3–5 years security experience performing vulnerability assessments and scanning across OS, databases, web apps and cloud; troubleshooting scan tools; automation and ISVM experience; Bachelor's degree; Secret clearance eligible.
Information System Vulnerability Management (ISVM)
1mo
Save
Mark Applied
Hide
Senior Cybersecurity Supply Chain Risk Management (SCRM) Analyst #1809720
Washington, District of Columbia, United States
$114k-$127k/yr OnsiteFull Time
8+ YOEU.S. citizen with active TS clearance and ability to obtain SCI and pass CI polygraph; Bachelor's in CS/IT/business; 8+ years cybersecurity/risk/supply chain experience; Network+ and Security+ preferred.
5d
Save
Mark Applied
Hide
Intelligence Analyst - Security Operations Center
Leesburg, Virginia, United States
$34-$35/hr OnsiteFull Time
5+ YOERequires 5+ years in intelligence analysis, threat monitoring, or security operations; structured analytic and OSINT skills; risk assessment, reporting, communication, and availability for 24/7 shifts.
Aurix, open-source intelligence, geospatial and mapping tools, mass notification systems, case management platforms
1w
Save
Mark Applied
Hide
Senior Security Governance and Policy Analyst
Washington, District of Columbia, United States
$145k-$168k/yr OnsiteFull Time
10+ YOEBachelor's degree or equivalent experience, 10+ years of progressive cybersecurity experience, federal and intelligence community program experience, governance, policy, risk, compliance, cloud and on-premises expertise.
NIST Cybersecurity Framework (CSF), NIST Special Publications (800 Series), Risk Management Framework (RMF), FISMA, CNSS, Intelligence Community Directives (ICDs), Zero Trust Architecture
1mo
Save
Mark Applied
Hide
Vendor Management and Risk Analyst - Remote
Eden Prairie or Minneapolis or Washington or United States
$73k-$130k/yr RemoteFull Time
3+ YOE3+ years vendor management in financial services, 2+ years audit/GRC and regulatory experience (FDIC/CFPB/SOC/HITRUST), knowledge of PII/PCI/PHI security, strong communication and stakeholder collaboration skills.
1w
Save
Mark Applied
Hide
Cybersecurity Analyst
Arlington, Virginia, United States
$130k-$155k/yr OnsiteFull Time
10+ YOEBachelor's degree or equivalent experience; 10+ years in cybersecurity, information security engineering, or security architecture; cloud, multi-cloud, risk assessment, security frameworks, IAM, cryptography, and DevSecOps expertise.
Azure, AWS, NIST 800-53, FISMA, FedRAMP, ISO 27000, SAML, OAuth, OIDC, Multi-Factor Authentication, DevSecOps
Explore Jobs