> Markdown version of [/jobs/ext/2072787-sr-security-test-evaluation-analyst](https://www.wearedevelopers.com/jobs/ext/2072787-sr-security-test-evaluation-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr Security Test & Evaluation Analyst

- **Company:** Expert Technology Services
- **Location:** Washington, DC, United States
- **Experience:** Expert
- **Salary:** $92,300.0 - $166,850.0
- **Contract:** Permanent contract
- **Skills:** Artificial Intelligence, Amazon Web Services, Microsoft Azure, Cloud Computing, Code Review, Cyber Security, Kali Linux, Network Protocols, Fortify (Software), Systems Architecture, Cloud Platform System, Gitlab, Nessus, Servicenow, Vulnerability Analysis
- **Published:** August 15, 2026
- **Apply:** https://www.careerjet.com/jobad/us84ea0a715ca27a2b680153d831fcfa9f

## About the Role

5+ years hands-on security test and evaluation experience with industry tools (e.g., Nessus, GitLab, Fortify, Invicti, Mandiant MSV, Kali Linux, Wiz).

 - 3+ years security testing experience with cloud platforms (AWS, Azure, ServiceNow, etc.).
 - Direct experience implementing AI-driven solutions for security testing and evaluation.
 - Strong analytical, problem-solving, communication, and documentation skills.
 - Deep knowledge of network protocols, security technologies, vulnerabilities, and attack vectors.
 - Familiarity with government security standards (NIST, FISMA, FedRAMP, OMB) is a plus.

## Description

Lead and implement comprehensive security testing, including all phases of ethical hacking (reconnaissance, footprinting, scanning, exploitation, and post-exploitation) for on-premises and cloud environments.

 - Conduct static and dynamic code reviews, system architecture assessments, and security control evaluations.
 - Design and execute AI-enabled solutions to enhance security test and evaluation processes and integrate AI capabilities into standard security operations.
 - Provide input and documentation to support the development and adoption of AI technologies for security testing and evaluation programs.
 - Perform scenario-based and functional security assessments using both authenticated and unauthenticated approaches, leveraging AI where possible.
 - Analyze AI model outputs to identify vulnerabilities in hardware, software, and cloud systems; recommend remediation strategies to reduce risk.
 - Ensure compliance with all governance, standards, and regulatory requirements when implementing AI-driven security solutions.
 - Develop analytic products, metrics, and technical reports to demonstrate the effectiveness of AI-enabled security practices.
 - Collaborate with stakeholders to prioritize and address identified security gaps and vulnerabilities.
 - Stay current on emerging AI technologies and security testing methodologies to maintain robust and effective security evaluation practices.


## Related Videos

- [Securing Your Web Application Pipeline From Intruders](https://www.wearedevelopers.com/videos/53-securing-your-web-application-pipeline-from-intruders)
- [WeAreDevelopers LIVE - Modern DevOps for IoT Devices and More](https://www.wearedevelopers.com/videos/1805-wearedevelopers-live-modern-devops-for-iot-devices-and-more)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)
- [Are Code Reviews Worth It? Insights from 16 Years of Review Data](https://www.wearedevelopers.com/videos/1135-are-code-reviews-worth-it-insights-from-16-years-of-review-data)

## Related Articles

- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [The 8 Best Code Testing Tools](https://www.wearedevelopers.com/magazine/402-the-8-best-code-testing-tools)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)