Security Analyst

Youve stumbled upon the rare B Corp government contractor!

At TCG we aim to prove that businesses can be good to their employees and responsible to their community while being profitable. Were an award-winning IT solutions provider to the Federal government seeking a Security Analyst to join our project team at a major Federal agency.

US Citizenship is required for this addition the selected applicant must submit to a government background investigation and be favorably adjudicated before their first day.

While primarily remote this position may require occasional on-site meetings. The selected candidate must live within commuting distance of Washington D.C.

The Security Analyst will collaborate with operational teams and the Chief Information Officer (CIO) to uphold the security posture and ensure the implementation and maintenance of security controls in compliance with security plans and regulations. This role offers the unique opportunity to develop both Information Security Officer and Systems Engineering skills eventually transitioning into a mid-level engineering position with a focus on technical work.

RESPONSIBILITIES:

• Prepares vital documentation such as System Security Plans (SSPs) Risk Assessment Reports Certification and Accreditation (C&A) packages and System Requirements Traceability Matrices (SRTMs) ensuring adherence to NIST standards.
• Implements and maintains security controls in line with NIST 800-53 Rev. 5 conducts regular security assessments and performs vulnerability scans to identify and mitigate risks as per NIST guidelines.
• Monitors security logs and events identifies potential security incidents and reports them while utilizing NIST incident handling guidelines.
• Supports information assurance programs within the organization.
• Proposes coordinates implements and enforces information systems security policies standards and methodologies in alignment with regulatory requirements.
• Tracks reports on and provides recommendations regarding the Plan of Action & Milestones (POA&M) to ensure compliance with security controls.
• Conducts security impact analyses (SIA) for planned changes and/or deployments evaluating their implications on the existing security posture.
• Maintains Federal Information Security Modernization Act (FISMA) inventory records and ensures up-to-date status reporting.
• Develops and implements technical control statements in collaboration with engineering teams to support system architecture designs configurations and security integrations.
• Creates documentation for ongoing system management ensuring traceability of controls back to their original requirements.

REQUIRED SKILLS & EXPERIENCE:

• A minimum of 7 years of experience in an IT Security team with at least 2 years working as an ISSO.
• Familiarity with security assessment tools and techniques for validating compliance with NIST security controls.
• Strong understanding of NIST 800-61 NIST 800-171 and experience with SIEM systems and log analysis.
• Demonstrated capability to create customized reports and dashboards.
• Proven ability to learn new technologies and skills quickly.
• Excellent communication skills both written and verbal capable of engaging with clients at all organizational levels.
• Independent problem-solving abilities analytical strength creativity and empathy towards end customer requirements.
• IT security implementation expertise in a Federal government context.
• One to two years of experience working directly with monitoring tools and systems.
• Proficiency in MS Excel MS Word and other MS Office applications.

PREFERRED SKILLS & EXPERIENCE:

• Experience working with Fortinet firewalls and related products Tenable SC/IO/Nessus or equivalent security tools.
• Certifications such as CISSP CISM or equivalent.
• Experience within government or regulated environments.
• Knowledge of FedRAMP and its relationship to NIST publications.
• Familiarity with Atlassian tools particularly Jira.
• Working knowledge of Risk Management Framework (RMF)
• Hands-on expertise implementing and monitoring security controls as per NIST 800-53 Rev. 5
• Understanding of web security best practices.
• Programming/development experience using Python or a comparable language.
• Ability to produce detailed system documentation for ongoing management and integration.

EDUCATION:

• Bachelors degree preferred preferably in Computer Science Information Technology or a related field. Experience may be substituted in the absence of a degree

TCG does not discriminate based on race sex color religion national origin age disability caste or veteran status.

Our B Corp mission is reflected in our benefits including offerings like health care 401K parental leave adoption assistance financial planning services student loan repayment assistance and training budget. Theres more; see for yourself.

TCG is recognized for treating employees fact in 2025 The Washington Post named TCG as a Top Workplace for the eleventh straight year based on how our employees feel about the company the benefits TCG offers and the work/life balance that our staff the Washington Post Top Workplace survey our CEO was ranked best by TCG employees votes among all midsize companies.

Try us ... well make you happy.

Internal title/grade: System Administrator E2
Salary Range: $95000 - $120000

Required Experience:

IC