Senior Cyber Security Analyst

ECS partners with the U.S. Department of Veterans Affairs to safeguard critical systems and sensitive data affecting veterans and their families. The Senior Cyber Security Analyst will lead incident response, security architecture reviews, monitoring, automation, compliance readiness, and the implementation of Data Loss Prevention and Zero Trust Architecture strategies.

Responsibilities:

• Lead Incident Response Efforts – Coordinate and execute containment, eradication, and recovery activities during security incidents, ensuring minimal operational disruption
• Security Architecture Reviews – Evaluate and enhance system designs, network configurations, and application deployments to align with Zero Trust principles and DLP best practices
• Automation & Scripting for Security Operations – Develop and maintain automated workflows to streamline log analysis, alert triage, and compliance reporting
• Continuous Monitoring & Improvement – Implement advanced monitoring techniques to detect insider threats, anomalous behaviors, and policy violations in real time
• Audit & Compliance Readiness – Prepare systems and documentation for internal and external audits, ensuring adherence to NIST, FedRAMP, and VA-specific frameworks
• Cross-Functional Collaboration – Partner with DevOps, cloud engineering, and network teams to embed security controls early in the system development lifecycle
• Policy & Standards Development – Contribute to the creation and refinement of enterprise security policies, technical standards, and operational procedures
• Monitor and analyze security events across VA systems, identifying anomalies and potential breaches in real time
• Implement and fine-tune DLP policies to prevent unauthorized data movement or exposure
• Support ZTA initiatives, ensuring access controls and segmentation are enforced across cloud and on-prem environments
• Conduct vulnerability assessments and recommend remediation strategies
• Collaborate with VA stakeholders to ensure compliance with FedRAMP and VA-specific security requirements
• Develop and enforce security policies and ensure compliance with regulatory standards
• Perform cyber defense trend analysis and reporting and recommend computing environment vulnerability corrections
• Document incidents, investigations, and security improvements for audit readiness

Requirements:

• Must be a U.S. citizen eligible to obtain and maintain a Tier 5 (critical sensitive national security) background investigation
• 5+ years in cybersecurity operations, ideally within a federal or VA environment
• 5+ years of hands-on experience with DLP tools (e.g., Symantec, Forcepoint, or Microsoft Purview) and ZTA frameworks
• 5+ years working with languages like Python, C++, JavaScript, and PowerShell to automate tasks, analyze malware and develop security tools and practices
• 5+ years of experience with a Bachelor's degree in Cybersecurity, Computer Science, or Information Technology
• One or more related certifications preferred, such as but not limited to: CISSP, CEH, CompTIA Security+, CISM