Cybersecurity Analyst

Stratus Services is seeking a detail-oriented and motivated Cybersecurity Analyst to support our cybersecurity and compliance initiatives, with a focus on CMMC (Cybersecurity Maturity Model Certification) and NIST-based frameworks. This role will assist in assessing, implementing, and maintaining security controls for internal systems and client environments to ensure compliance with federal and industry standards.

The ideal candidate has foundational cybersecurity knowledge, strong documentation skills, and a working understanding of compliance frameworks such as NIST SP 800-171 and CMMC., * Administer Windows Server, Active Directory and Group Policy.

• Manage hybrid identity environments using Active Directory and Microsoft Entra ID.
• Implement and maintain security baselines for Windows servers and workstations.
• Administer firewalls, VPNs, network segmentation, and secure remote access solutions.
• Perform vulnerability scanning, remediation, and patch management for servers, workstations, and network devices.
• Monitor security events from Microsoft Defender, Microsoft Sentinel, and other security platforms.
• Configure and maintain RBAC, least privilege, and privileged access management.
• Implement audit logging, log retention, and security monitoring in accordance with NIST SP 800-171.
• Support Microsoft Azure, Intune, Defender, Azure Virtual Desktop, and Microsoft 365 security services.
• Assist with CMMC and NIST SP 800-171 assessments, evidence collection, and remediation efforts.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field (or equivalent experience)
• 1-3 years of experience in cybersecurity, IT security, or compliance-related roles
• Basic understanding of risk management principles
• Familiarity with security tools such as SIEM, endpoint protection, vulnerability scanners, and MFA solutions
• Strong analytical, organizational, and documentation skills
• Excellent written and verbal communication skills

Preferred Qualifications

• CompTIA CySA+, GSEC, or similar certification
• Experience supporting DoD contractors or federal compliance requirements
• Knowledge of Microsoft 365 security tools (Defender, Sentinel, Intune, etc.)
• Experience with audit preparation and evidence collection
• Familiarity with NIST SP 800-171 or CMMC framework

Core Competencies

• Attention to detail
• Problem-solving mindset
• Strong ethical standards and integrity
• Ability to manage multiple tasks and deadlines
• Team-oriented with client-facing professionalism

Pulled from the full job description 401(k) Health insurance 401(k) matching Paid time off Vision insurance Dental insurance, * 401(k)

• 401(k) matching
• Dental insurance
• Health insurance
• Paid time off
• Vision insurance