Job description

Senior Security Analyst Atlanta, GA or Washington DC - Hybrid Blu Omega is seeking a Senior Security Analyst to support CDC mission needs. This role is responsible for vulnerability management, security assessments, risk mitigation, and continuous security monitoring within federal and regulated technology environments. Program Overview Blu Omega supports CDC modernization efforts to help advance public health outcomes through secure, reliable technology solutions. Key Details Location: Hybrid Clearance / Suitability: Public Trust eligibility required Responsibilities • Perform system hardening, vulnerability assessments, Security Technical Implementation Guide (STIG) remediation, and POA&M tracking across Windows, Linux, and cloud environments. • Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, SQuirreL, or similar security assessment technologies. • Analyze vulnerability scan results, document security findings, and map identified risks and deficiencies to NIST SP 800-53 security controls. • Monitor and support enterprise security tools, including endpoint protection and Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms. • Support security incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement. • Conduct system security assessments, threat modeling, risk assessments, compliance reviews, and security audits aligned with federal and industry standards. • Develop and maintain security governance documentation, including policies, standards, operational procedures, business continuity materials, SA&A artifacts, and compliance reports. • Partner with system owners, engineers, DevSecOps teams, and stakeholders to validate remediation activities, strengthen access controls, and maintain secure system configurations. • Support system authorization, continuous monitoring, and ongoing compliance activities to ensure alignment with federal security requirements and organizational objectives. Required Qualifications • 5+ years of experience in cybersecurity operations, vulnerability management, security assessments, and risk mitigation within federal or similarly regulated environments. • Hands-on experience with vulnerability scanning and security assessment tools such as Nessus, AppScan, Fortify, WebInspect, SQuirreL, or similar technologies. • Experience analyzing vulnerability scan results, identifying security deficiencies, and mapping findings to NIST SP 800-53 security controls. • Experience performing system security assessments, supporting Security Assessment and Authorization (SA&A) processes, managing POA&Ms, and maintaining security compliance documentation. • Knowledge of system hardening, STIG remediation, security configuration management, and vulnerability remediation across enterprise environments. • Understanding of cybersecurity risk management, incident response, threat identification, and security monitoring practices. • Strong written and verbal communication skills, including experience developing security reports, policies, audit documentation, and technical guidance. • Bachelor's degree. • Active CDC badge/credentials required. Preferred Qualifications • 3+ years of experience supporting federal information security requirements under the Federal Information Security Modernization Act (FISMA). • Experience supporting federal agencies, particularly CDC, NIH, CMS, VA, DoD, or DHS. • Knowledge of DevSecOps practices, container security, cloud security architecture, and secure software development workflows. • Experience supporting enterprise data platforms, large-scale modernization initiatives, or federal digital transformation programs. • Exposure to AI/ML security applications, including anomaly detection, automated security assessments, or AI-driven threat intelligence. • Familiarity with AI governance, responsible AI, privacy-preserving technologies, and emerging AI security risks. • Experience mentoring junior security analysts or contributing to security strategy and operational improvements. • DoD 8570/8140-aligned cybersecurity certification, with CISSP preferred. Compensation Salary Range: $150,000 - $165,000 Final compensation is based on technical skills, experience, education, certifications, and clearance. Blu Omega Benefits & Perks • Medical, Dental, and Vision coverage through national providers • 401(k) with company match (eligible after 6 months; vesting applies) • Company-paid Life and AD&D insurance with additional voluntary options • Short-term disability (company-paid) and long-term disability options • Employee Assistance Program (EAP) with 24/7 confidential support and mental health resources • Telehealth and virtual care options available through medical plans • Pet insurance, legal services, and identity theft protection options • Paid Time Off (PTO) for eligible employees • Paid federal holidays for salaried employees • Access to wellness programs, discounts, and lifestyle benefits • Benefits eligibility and offerings may vary based on role, employment status, and program requirements. Company Overview Blu Omega is a Woman-Owned Small Business (WOSB) delivering technology and cybersecurity solutions to federal agencies and enterprise clients nationwide. Headquartered in Ashburn, VA, we support mission-critical programs across civilian and defense sectors, including health, national security, and regulatory environments. We partner with government agencies and large integrators to provide expertise in cybersecurity operations, cloud and infrastructure modernization, data and analytics, and enterprise IT support. Equal Opportunity Employer All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran status, or disability. #CJ #LI-Hybrid

Requirements

Must-haves

Senior Security Analyst
Atlanta, GA or Washington DC - Hybrid
Program Overview
Blu Omega supports CDC modernization efforts to help advance public health outcomes through secure, reliable technology solutions.
Location: Hybrid
Clearance / Suitability: Public Trust eligibility required
Perform system hardening, vulnerability assessments, Security Technical Implementation Guide (STIG) remediation, and POA&M tracking across Windows, Linux, and cloud environments.
Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, SQuirreL, or similar security assessment technologies.
Analyze vulnerability scan results, document security findings, and map identified risks and deficiencies to NIST SP 800-53 security controls.
Monitor and support enterprise security tools, including endpoint protection and Identity and Access Management (IAM) and Privileged Access Management (PAM) platforms.
Support security incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement.
Conduct system security assessments, threat modeling, risk assessments, compliance reviews, and security audits aligned with federal and industry standards.
Develop and maintain security governance documentation, including policies, standards, operational procedures, business continuity materials, SA&A artifacts, and compliance reports.
Partner with system owners, engineers, DevSecOps teams, and stakeholders to validate remediation activities, strengthen access controls, and maintain secure system configurations.
Support system authorization, continuous monitoring, and ongoing compliance activities to ensure alignment with federal security requirements and organizational objectives.
5+ years of experience in cybersecurity operations, vulnerability management, security assessments, and risk mitigation within federal or similarly regulated environments.
Hands-on experience with vulnerability scanning and security assessment tools such as Nessus, AppScan, Fortify, WebInspect, SQuirreL, or similar technologies.

Nice-to-haves

Experience supporting federal agencies, particularly CDC, NIH, CMS, VA, DoD, or DHS.
Knowledge of DevSecOps practices, container security, cloud security architecture, and secure software development workflows.
Experience supporting enterprise data platforms, large-scale modernization initiatives, or federal digital transformation programs.
Exposure to AI/ML security applications, including anomaly detection, automated security assessments, or AI-driven threat intelligence.
Familiarity with AI governance, responsible AI, privacy-preserving technologies, and emerging AI security risks.
Experience mentoring junior security analysts or contributing to security strategy and operational improvements.
DoD 8570/8140-aligned cybersecurity certification, with CISSP preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

aiml

Platform: bullhorn
Effort: medium

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Wellness