> Markdown version of [/jobs/ext/2540370-it-security-compliance-analyst-remote-washington](https://www.wearedevelopers.com/jobs/ext/2540370-it-security-compliance-analyst-remote-washington). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security & Compliance Analyst Remote (Washington) - **Company:** DEFTEC Corporation - **Location:** Chesapeake, VA, United States (Remote available) - **Salary:** $62,400.0 - $76,960.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Data Analysis, Audit Trail, Business Systems, Data Migration, Issue Tracking Systems, Information Security Management, Python (Programming Language), Windows PowerShell, Power BI, SQL Databases, Scripting, Information Security Management System, Microsoft Power Automate, Microsoft InTune, Information Technology, Data Management, Tools for Reporting, Data Pipelines, Plan of Action and Milestones, User Accounts - **Published:** August 6, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=603ff76317d978a4 ## About the Role * Must be a US citizen (required for work supporting Department of Defense contracts and the handling of Controlled Unclassified Information). * Bachelor's degree in cybersecurity, information technology, or a related field, or an equivalent combination of education and experience. * Working knowledge of core cybersecurity principles, including access control, audit logging, and incident response. * Strong analytical and data-management skills, with the ability to compile, interpret, and present security reporting. * Strong written documentation skills and attention to detail. * Demonstrated ability to manage recurring, deadline-driven tasks independently. Preferred Qualifications: * Familiarity with Microsoft 365 administration and security tools (Entra ID, Intune, Microsoft Defender, Microsoft Purview). * Familiarity with NIST SP 800-171, CMMC, and DFARS 252.204-7012 requirements. * Experience with the Microsoft Power Platform (Power Automate, Power BI) or comparable workflow automation tools. * Scripting or data analysis experience (e.g., Python, PowerShell, SQL). * Experience coordinating with managed service providers or third-party technology vendors. * Current or prior U.S. government security clearance, or eligibility to obtain one. ## Description The IT Security & Compliance Analyst supports the day-to-day execution of DEFTEC's information technology and cybersecurity operations under the direction of the Director of Strategic Operations & Innovation. Serves as a primary operational coordinator with DEFTEC's managed service provider (MSP), executes recurring security and compliance activities supporting the company's CMMC Level 2 and NIST SP 800-171 compliance program, and contributes hands-on data and automation capability to internal tooling, reporting, and business system initiatives. This is a part-time position (approximately 24-25 hours per week) with potential for transition to full-time., * Serves as the day-to-day point of contact with DEFTEC's managed service provider for service requests, ticket tracking, and escalation. * Coordinates account provisioning, license assignment, and deprovisioning requests with the MSP under established authorization thresholds. * Executes established onboarding and offboarding procedures to ensure timely creation and deprovisioning of user accounts, coordinated with the MSP, HR, and program management. * Maintains the account retention log, including Controlled Unclassified Information (CUI) access determinations and record retention timelines, in accordance with CMMC Level 2 and NIST SP 800-171 requirements. * Performs cadenced security reviews, including monthly audit log reviews in accordance with DEFTEC security policy, compiling reports and flagging anomalies. * Supports maintenance of compliance artifacts, including POA&M tracking, evidence collection, and System Security Plan updates. * Assists in preparation for third-party (C3PAO) assessments and customer compliance inquiries. * Develops and maintains asset refresh schedules, standard asset package definitions, and asset inventory records; coordinates procurement of compliant hardware through approved channels. * Develops training plans and cybersecurity course content; administers training assignments and certification tracking through DEFTEC's HR platform, tracking completion to closure. * Supports the design, development, and maintenance of internal data pipelines, reporting tools, and business process automations using the Microsoft Power Platform. * Supports the evaluation and implementation of enterprise business systems, including requirements analysis, data migration, validation, and reporting. * Documents procedures and contributes to DEFTEC's internal policy and SOP library. ## Related Videos - [Beyond Dashboards: Fixing Text-to-SQL with Semantic RAG](https://www.wearedevelopers.com/videos/2036-beyond-dashboards-fixing-text-to-sql-with-semantic-rag) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [No Keys for the Robot: GitOps as the Control Plane for Autonomous Agents](https://www.wearedevelopers.com/videos/100095-no-keys-for-the-robot-gitops-as-the-control-plane-for-autonomous-agents) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [The Overflow: Security and Privacy](https://www.wearedevelopers.com/magazine/715-the-overflow-security-and-privacy) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)