Security Analyst

About this role

Position Title: Security Analyst Location: Remote (In the U.S) Other Considerations: U.S. Citizen or Permanent Resident (Required) POSITION SUMMARY We are seeking a Security Analyst to join our team supporting VA.gov Platform. In this role you will support the security, compliance, and ongoing Authority to Operate (ATO) of VA.gov Platform while helping engineering teams build and deliver secure digital services for Veterans. This role works across Platform infrastructure, applications, system integrations, and Veteran-Facing Services (VFS) teams to identify security risks, maintain required security documentation, support security assessments, and ensure changes to VA.gov align with federal security requirements and Platform security standards. This is an excellent opportunity for someone who is passionate about working closely with Security Engineers, DevOps Engineers, Site Reliability Engineers (SREs), Software Engineers, Product Managers, and government security stakeholders. The Security Analyst translates federal security requirements into actionable engineering guidance. The role supports the full security lifecycle—from architecture and design reviews through implementation, authorization, continuous monitoring, and incident response. RESPONSIBILITIES Support the ongoing VA.gov Platform Authority to Operate (ATO) and the associated continuous monitoring activities Develop, maintain, and coordinate security and privacy artifacts required to support the Platform authorization boundary Support updates to artifacts such as Privacy Threshold Analyses (PTAs), Privacy Impact Assessments (PIAs), Business Impact Analyses (BIAs), system boundary diagrams, architecture diagrams, threat models, and related security documentation Support the creation and maintenance of Memoranda of Understanding/Interconnection Security Agreements (MOU/ISAs) for system-to-system integrations Evaluate proposed system and architecture changes to determine potential security and ATO impacts Coordinate with government security stakeholders and Authorizing Official Designated Representatives (AODRs) to validate security requirements and determine when additional security review is required Support security assessments, audits, evidence collection, and remediation activities Maintain accurate documentation and evidence demonstrating implementation of applicable security controls Serve as a security resource for engineers, product teams, and Platform stakeholders Translate complex federal security requirements into clear, actionable engineering guidance Collaborate with government security stakeholders, engineering teams, and other security SMEs to resolve security and compliance issues Maintain clear and accurate security documentation, decision records, procedures, and implementation guidance Participate in Agile ceremonies, security planning activities, architecture reviews, and cross-team Platform initiatives QUALIFICATIONS Ability to obtain and maintain a Public Trust clearance Bachelor’s Degree 4+ years of experience in cybersecurity, information security, security engineering, security compliance, or a related technical field Strong understanding of federal cybersecurity requirements and risk-management principles Experience supporting security assessments, authorization activities, compliance reviews, or continuous monitoring Working knowledge of NIST security controls and federal security frameworks Experience assessing technical architectures, system integrations, data flows, and security risks Understanding of Identity and Access Management concepts including authentication, authorization, identity lifecycle, roles, least privilege, separation of duties, and access management Experience reviewing, tracking, and supporting remediation of security vulnerabilities Familiarity with cloud environments and modern software development practices Ability to work directly with engineers to translate security requirements into technical implementation guid

Skills and categories