> Markdown version of [/jobs/ext/2479095-cybersecurity-analyst-iii](https://www.wearedevelopers.com/jobs/ext/2479095-cybersecurity-analyst-iii). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst III

- **Company:** THARROS LLC
- **Location:** Fulton, MD, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Information Systems Security Architecture Professional, Zero Trust Network Access, Infrastructure as Code (IaC), Information Technology, Devsecops
- **Published:** August 20, 2026
- **Apply:** https://jobs.localjobnetwork.com/apply/add/88087407/1

## About the Role

The ideal candidate brings senior-level experience in cybersecurity architecture, Zero Trust, RMF/risk management, acquisition cybersecurity, and DevSecOps, with the ability to lead complex security initiatives across diverse environments. This individual will oversee key acquisition security documentation, including Program Protection Plans and Cybersecurity Strategies, while architecting secure DevSecOps pipelines incorporating security gates, automated Infrastructure as Code (IaC) scanning, and Software Bill of Materials (SBOM) integrity., * Bachelor's Degree from an accredited institution in Cybersecurity, Computer Science, Information Technology, or a related technical field, and 8 years of relevant experience

 + Or High School Diploma and 10 years of relevant experience
 * IAT Level III (CISSP, CASP+/SecurityX, CSSLP or Equivalent)

## Description

Tharros is seeking a Senior Cybersecurity Analyst to serve as a senior technical authority supporting a Department of Defense customer, providing leadership across cybersecurity strategy, architecture, risk, and compliance. This role will lead cybersecurity personnel, advise government leadership, and drive the development of secure architectures aligned with the DoD Zero Trust Strategy, while overseeing Mission-Based Cyber Risk Assessments (MBCRAs) and translating technical cyber risks into operational mission impacts., * Serves as the senior technical authority for cybersecurity, responsible for leading security strategy, architecture, and compliance for systems across all environments. The Lead Analyst shall oversee the work of the cybersecurity team and provide expert guidance to government leadership. Duties include:

 * Leads the development and implementation of a comprehensive security architecture aligned with the DoD Zero Trust Strategy
 * Oversees the execution of Mission-Based Cyber Risk Assessments (MBCRA), translating technical risks into operational mission impacts
 * Directs the development and maintenance of high-level acquisition security documentation, including the Program Protection Plan and Cybersecurity Strategy
 * Architects and secures DevSecOps pipelines, establishing security gates, automated scanning of Infrastructure as Code (IaC), and ensuring SBOM integrity


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post)
- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines)
- [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy)
- [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)