> Markdown version of [/jobs/ext/1157431-security-compliance-analyst-data-transformation](https://www.wearedevelopers.com/jobs/ext/1157431-security-compliance-analyst-data-transformation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security & Compliance Analyst (Data Transformation)

- **Company:** S O S I Inc
- **Location:** Doral, FL, United States
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Audit Trail, Cloud Computing, Cyber Security, Data Transformation, Identity and Access Management, Information Systems Security Architecture Professional, Role-Based Access Control, Zero Trust Network Access, Security Information and Event Management, Data Logging, SARS Software Products, Data Layers, Data Lakes, Kubernetes, Information Technology, Splunk, Security Orchestration, Automation & Response, Vulnerability Analysis
- **Published:** July 1, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9006204/security-compliance-analyst-data-transformation

## About the Role

* Active TS/SCI clearance.
 * Bachelor's degree in Cybersecurity, Information Assurance, Computer Science, or a related field, or five (5) years of equivalent experience in security and compliance roles.
 * Knowledge and capability to implement, monitor, and enforce security policies, frameworks, and compliance controls across cloud-based and on-premises environments.
 * Proficient in NIST 800-53, FedRAMP, DoD IL-4/5 security policies, and risk assessment methodologies.
 * Strong understanding of identity and access management (IAM), security monitoring tools (Splunk, SIEM solutions), zero-trust architecture, and vulnerability assessment frameworks is required.
 * Demonstrated experience in conducting security audits, assessing system compliance with DoD cybersecurity policies, and implementing security controls in cloud and hybrid environments.
 * Experience with security automation, endpoint protection, and incident response processes is required., * Desirable but not required certifications include Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or AWS Certified Security - Specialty.

## Description

* Monitor and validate Kubernetes and data lake deployments for compliance with RMF, NIST 800-53, and DoD IL4/IL5 requirements, in collaboration with agency cybersecurity teams.
 * Maintain continuous monitoring dashboards and conduct vulnerability scans of deployed infrastructure and workloads, supporting the agency's ATO process and risk posture.
 * Prepare and update system security documentation-including SSPs, SARs, POA&Ms-to reflect changes to architecture, controls, or risk conditions under other work orders.
 * Enforce encryption, logging, and identity access policies (IAM, RBAC, audit logging) to maintain traceability and accountability across the Kubernetes-based data layer.
 * Submit the Security & Compliance Assessment Report, providing a summary of control effectiveness, findings, and recommended remediation actions.


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Empowering Retail Through Applied Machine Learning](https://www.wearedevelopers.com/videos/976-empowering-retail-through-applied-machine-learning)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [The Data Mesh as the end of the Datalake as we know it](https://www.wearedevelopers.com/videos/156-the-data-mesh-as-the-end-of-the-datalake-as-we-know-it)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)