> Markdown version of [/jobs/ext/4669345-security-analyst](https://www.wearedevelopers.com/jobs/ext/4669345-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Analyst

- **Company:** Insight Global
- **Location:** Mason, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** JavaScript (Programming Language), Systems Engineering, Cloud Computing Security, Cyber Security, Disaster Recovery, Identity and Access Management, Intrusion Detection and Prevention, Python (Programming Language), Windows PowerShell, Smartsuite, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, National Institute of Standards and Technology Cybersecurity Framework, Information Technology, RSA Archer Platform, Security Orchestration, Automation & Response, Servicenow
- **Published:** November 11, 2026
- **Apply:** https://dejobs.org/x/x/EA635B286AAC4E2DB819CD98B64464C6/job/

## About the Role

Must-Haves * 10+ years cybersecurity/IT experience * 5+ years cybersecurity GRC * 4+ years Security Analyst experience * 3+ years Systems Engineer/Administrator experience * Strong knowledge of NIST 800-53, NIST CSF, risk management, vulnerability management, and compliance * Hands-on experience with GRC platforms and workflow automation * Experience with incident response/security operations * CISSP, CISA, CISM, CRISC, CGRC, GIAC, or similar certification * Knowledge of SIEM, SOAR, EDR, IAM/PAM, DLP, MITRE ATT&CK, cloud security, and vulnerability management * PowerShell, Python, or JavaScript experience * Bachelor's degree in Cybersecurity, IT, Computer Science, or equivalent experience

## Description

Security Analyst II Senior cybersecurity role focused 75% on GRC and 25% on security operations. Looking for someone who can build and mature security programs, not just support existing processes.

Key Responsibilities * Build and manage cyber risk, vulnerability management, and compliance programs. * Develop security policies, standards, controls, and procedures aligned with NIST frameworks. * Configure/administer GRC tools such as ServiceNow GRC/IRM, Archer, or OneTrust. * Automate GRC workflows, reporting, evidence collection, and control monitoring. * Support AI governance, business continuity/disaster recovery, and audits. * Assist with incident response, threat detection, and security monitoring across cloud and on-prem environments.