> Markdown version of [/jobs/ext/192900-senior-cybersecurity-analyst-onsite-us-citizen](https://www.wearedevelopers.com/jobs/ext/192900-senior-cybersecurity-analyst-onsite-us-citizen). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cybersecurity Analyst - ONSITE - US Citizen - **Company:** SOLUTIONS ETCETERA - **Location:** Washington, DC, United States - **Experience:** Expert - **Salary:** $145,000.0 - $160,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, IT Management, Python (Programming Language), Network Protocols, Windows PowerShell, Phishing, Zero Trust Network Access, Security Information and Event Management, Scripting, Mitre Att&ck, QRadar, Information Technology, Cybercrime, Tenable Nessus, Splunk, SentinelOne Expertise, Security Orchestration, Automation & Response, Vulnerability Analysis - **Published:** May 27, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=c46a2c3ecb002167 ## About the Role Do you have experience in Zero Trust security?, Do you have a Bachelor's degree?, * Bachelor's degree in Cybersecurity, Computer Science, or a related field (or equivalent experience). * 7+ years of progressive cybersecurity experience, including hands-on incident response and SIEM operations. * Deep knowledge of NIST 800-53, NIST 800-171, FISMA, and the Risk Management Framework (RMF). * Hands-on experience with SIEM (Splunk, Sentinel, or QRadar) and EDR (CrowdStrike, Defender, SentinelOne). * Strong understanding of network protocols, common attack vectors, and the MITRE ATT&CK framework. * Experience conducting vulnerability scans and producing remediation plans. * DoD 8570 / 8140 IAT Level II baseline certification (Security+, CySA+, CISSP, or equivalent). * US citizenship and ability to obtain a Public Trust clearance. * Strong written and verbal communication skills, including the ability to brief executive stakeholders. Preferred Qualifications * CISSP, CISM, GCIH, or GCIA certification. * Experience with federal civilian agency security operations. * Familiarity with cloud security (Azure, AWS) and zero-trust architecture. * Scripting experience (Python, PowerShell) for security automation. * Active Public Trust or higher clearance. * Experience with continuous monitoring (ConMon) reporting and FISMA audits. ## Description We are seeking a Senior Cybersecurity Analyst to support the National Transportation Safety Board (NTSB) at their headquarters in Washington, DC. You will lead security monitoring, incident response, and risk-management activities, helping protect the agency's sensitive data and IT infrastructure from evolving threats., * Monitor SIEM and EDR platforms (Splunk, Sentinel, CrowdStrike, or Defender) for security events and anomalies. * Lead incident response activities including triage, containment, eradication, and post-incident reporting. * Conduct vulnerability assessments using Tenable Nessus, Rapid7, or similar tools and coordinate remediation with system owners. * Support FISMA / RMF compliance activities including system categorization, control selection, assessment, and continuous monitoring. * Develop and maintain security policies, procedures, and standard operating procedures aligned with NIST 800-53 and 800-171. * Perform threat hunting and analysis of indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs). * Lead phishing simulation campaigns and security awareness training. * Coordinate with the CISO and IT leadership on security strategy, audits, and reporting. * Mentor junior analysts and serve as technical escalation point for the security operations team. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Skynet wants your Passwords! The Role of AI in Automating Social Engineering](https://www.wearedevelopers.com/videos/770-skynet-wants-your-passwords-the-role-of-ai-in-automating-social-engineering) - [MFA? Game over! Watch your protection collapse – live](https://www.wearedevelopers.com/videos/100322-mfa-game-over-watch-your-protection-collapse-live) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)