Senior Security Analyst

Blu Omega is seeking a Senior Security Analyst to support public health data modernization and advanced analytics initiatives for mission-critical federal programs. The role protects enterprise systems, applications, and data by managing vulnerabilities, supporting security authorization activities, conducting risk assessments, and ensuring compliance across Windows, Linux, cloud, and enterprise environments.

Responsibilities:

• Perform system hardening, vulnerability assessments, STIG remediation, and POA&M tracking across Windows, Linux, and cloud environments
• Conduct vulnerability scanning and analysis using tools such as Nessus, AppScan, Fortify, WebInspect, Squirrel, or similar technologies
• Analyze vulnerability scan results, translating technical findings into security risks, remediation actions, and mapping to NIST SP 800-53 security controls
• Monitor endpoint security, identity and access management, privileged access management, and other enterprise security tools
• Support system Security Assessment and Authorization (SA&A) activities, security control assessments, compliance reviews, and audits
• Lead or support incident response activities, including investigation, documentation, stakeholder coordination, remediation, and process improvement
• Conduct risk assessments and threat modeling to identify security weaknesses and recommend mitigation strategies
• Develop and maintain security governance documentation, including policies, standards, operational procedures, security reports, business continuity materials, and authorization artifacts
• Partner with system owners, engineers, and technical teams to validate remediation activities and ensure vulnerabilities are properly addressed
• Support secure configuration management, least-privilege access controls, system authorization, and continuous monitoring activities
• Identify opportunities to reduce attack surface, improve detection and response capabilities, and strengthen overall security posture

Requirements:

• 5+ years of experience in cybersecurity operations, vulnerability management, security assessment, or risk mitigation within regulated environments
• Hands-on experience with vulnerability scanning tools such as Nessus, AppScan, Fortify, WebInspect, or Squirrel
• Experience analyzing vulnerability scan results and mapping findings to NIST SP 800-53 security controls
• Experience performing system security assessments, SA&A activities, POA&M management, and compliance documentation
• Strong understanding of system hardening, vulnerability remediation, security controls, and risk management
• Ability to analyze complex technical security issues and develop actionable mitigation strategies
• Strong written communication skills for developing security reports, policies, procedures, and audit documentation
• Ability to collaborate effectively with engineering, compliance, program, and leadership teams
• Active CDC badge/credentials
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination
• U.S. Citizen or Lawful Permanent Resident (Green Card Holder)