Security Analyst

🔥 15 hours ago

🇺🇸 United States – Remote

💵 $100k - $120k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

🔐 Security Analyst

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sprezzatura

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2009

🏛️ Government

💼 Consulting

🏥 Healthcare

Government • Consulting • Healthcare

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that provides secure, scalable, and human-centered digital solutions to federal agencies. It specializes in DevSecOps, health IT modernization, intelligent automation, benefits delivery and claims processing, digital communications, data analytics/business intelligence, and organizational change management. Sprezzatura focuses on end-to-end IT and professional services across the product lifecycle—helping government clients modernize systems, improve delivery through Agile and DevSecOps practices, and translate strategy into measurable execution.

📋 Description

• Support the ongoing VA.gov Platform Authority to Operate (ATO) and associated continuous monitoring activities • Develop, maintain, and coordinate security and privacy artifacts required to support the Platform authorization boundary • Support updates to Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), Business Impact Analyses (BIAs), system boundary diagrams, architecture diagrams, threat models, and related security documentation • Support creation and maintenance of Memoranda of Understanding/Interconnection Security Agreements (MOU/ISAs) for system-to-system integrations • Evaluate proposed system and architecture changes to determine potential security and ATO impacts • Coordinate with government security stakeholders and Authorizing Official Designated Representatives (AODRs) to validate security requirements and determine when additional security review is required • Support security assessments, audits, evidence collection, and remediation activities • Maintain accurate documentation and evidence demonstrating implementation of applicable security controls • Serve as a security resource for engineers, product teams, and Platform stakeholders • Translate complex federal security requirements into clear, actionable engineering guidance • Collaborate with government security stakeholders, engineering teams, and other security SMEs to resolve security and compliance issues • Maintain clear and accurate security documentation, decision records, procedures, and implementation guidance • Participate in Agile ceremonies, security planning activities, architecture reviews, and cross-team Platform initiatives

🎯 Requirements

• U.S. Citizen or Permanent Resident (Required) • Ability to obtain and maintain a Public Trust clearance • Bachelor’s Degree • 4+ years of experience in cybersecurity, information security, security engineering, security compliance, or a related technical field • Strong understanding of federal cybersecurity requirements and risk-management principles • Experience supporting security assessments, authorization activities, compliance reviews, or continuous monitoring • Working knowledge of NIST security controls and federal security frameworks • Experience assessing technical architectures, system integrations, data flows, and security risks • Understanding of Identity and Access Management concepts including authentication, authorization, identity lifecycle, roles, least privilege, separation of duties, and access management • Experience reviewing, tracking, and supporting remediation of security vulnerabilities • Familiarity with cloud environments and modern software development practices • Ability to work directly with engineers to translate security requirements into technical implementation guidance • Strong technical documentation and requirements-definition skills • Excellent written and verbal communication skills • Ability to operate independently as a security subject matter expert while collaborating effectively across engineering and product teams • Must have reliable internet service that allows for effective telecommuting

🏖️ Benefits

• Medical, Dental, and Vision • Health Saving Account (when enrolled in eligible plan) with Company contribution • Company paid Life, Accidental Death, Short-term & Long-term Disability • Voluntary Accident, Hospital Indemnity, & Critical Care Insurance • Voluntary Medical & Dependent Care Flexible Spending Accounts • Accrued Paid Time Off & Company Paid Holidays • 401(k) Retirement Plan with Company match