> Markdown version of [/jobs/ext/4591031-cybersecurity-analyst](https://www.wearedevelopers.com/jobs/ext/4591031-cybersecurity-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cybersecurity Analyst

- **Company:** Odyssey Systems Consulting Group
- **Location:** Colorado Springs, CO, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing, CompTIA Security+, Cyber Security, Information Systems, Computer Networks, Internet Security, Intrusion Detection and Prevention, Intrusion Detection Systems, Anti-Phishing, Security Information and Event Management, Microsoft InTune, SC Clearance, Information Technology, Cybercrime, Vulnerability Analysis
- **Published:** November 5, 2026
- **Apply:** https://www.careerbuilder.com/job-details/cybersecurity-analyst-colorado-springs-co--86169895-2c3c-4637-a0e5-ddc0fa0230d5

## About the Role

Internet Security, Analysis Skills, Cloud Computing, Computer Security, Intrusion Detection Systems, Systems Maintenance, U.S. National Institute of Standards and Technology (NIST), Security Information and Event Management (SIEM), Information Technology & Information Systems, Internet Security, Citizenship: Must be a U.S. citizen, * Clearance: Eligible to obtain and maintain a Secret clearance

 * Education: Bachelor's degree in information security, information systems, or a related field, or equivalent experience
 * Years of Experience: 3 to 5 years in security compliance, audit, or GRC, including hands on experience with NIST SP 800-171 or NIST SP 800-53
 * Certifications: CompTIA Security Plus or equivalent

Preferred Qualifications

 * Clearance: Active Secret clearance
 * Years of Experience: 5 to 8 years experience supporting a DoD contractor or SOC organization, including CUI environments (i.e. Microsoft GCC High); prior participation in a C3PAO assessment
 * Certifications: SecurityX Plus, CISA, CRISC, or CISSP

Technical Skills

 * Microsoft 365 and Azure compliance tooling (Purview, Compliance Manager, Defender for Cloud, Intune)
 * SIEM, EDR, and vulnerability scanning tools to support continuous monitoring
 * Security awareness and phishing simulation platforms
 * NIST SP 800-171, NIST SP 800-171A, NIST SP 800-53, and CMMC Level 2 requirements
 * CUI and FCI scoping, asset categorization, and assessment boundary definition
 * Writing control narratives, SSPs, POA&Ms, and assessment evidence package

## Description

At Odyssey, our Cybersecurity Analysts protect our systems, data, and people from evolving cyber threats across cloud and on premises environments. You will monitor and triage alerts from SIEM, EDR, and intrusion detection tools, investigate confirmed threats, and contain incidents by isolating hosts, blocking malicious activity, and escalating as needed. You will document findings, refine detection rules, and partner with IT, engineering, and compliance teams to identify vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting continuous monitoring aligned with NIST RMF and FedRAMP requirements.

Responsibilities:

Duties include but are not limited to:

 * Monitors and responds to alerts from tools such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and intrusion detection systems, then triages each alert to determine whether it is a real threat or a false positive and how urgently it needs attention.
 * For genuine threats, they investigate logs, network traffic, and endpoint activity to understand what happened and how far it spread, then contain the threat by isolating hosts, blocking IPs or accounts, and escalating serious incidents.
 * They document their findings and actions in tickets and incident reports, and they continually refine detection rules to reduce noise and catch new attack techniques.
 * Support NIST SP 800 171, NIST SP 800 53 and CMMC Level 2 requirements and writing control narratives, SSPs, POA&Ms and assessment evidence., * Serves as primary contact for assessors, prime contractors, and customers
 * Coordinates evidence across HR, facilities, export compliance, and IT
 * Prepares clear, defensible packages for executive signature
 * Holds control owners accountable for findings through closure
 * Communicates compliance status and risk to technical and nontechnical stakeholders