{"id":3057608,"url":"https://alion.io/job/careersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii","title":"Research Cybersecurity Analyst (Information Security Analyst III)","company":{"id":701994,"name":"CareersInGovernment.com","domain":"careersingovernment.com","url":"https://alion.io/company/careersingovernment-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":true,"listed_via":"careersingovernment.com","ats_vendor":"Schema","truth_index":{"grade":"A","score":87,"open_postings":991,"ghost_share":0,"stale_share":0.325,"repost_share":0,"time_to_fill_p50_days":67,"computed_at":"2026-11-02T06:13:15Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["San Diego, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":81000,"max_usd":156000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CMMC","optional":false},{"name":"HIPAA","optional":false},{"name":"Linux","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"GCP","optional":true}],"status":"live","first_seen_at":"2026-10-20T00:00:00Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-21T00:00:00Z","board_verified":false,"closed_at":null,"days_open":13,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":13},"description":"Job Description\nPosition SummarySan Diego State University is seeking a Research Cybersecurity Analyst to help faculty and research teams and campus partners securely conduct research involving sensitive, regulated, and contractually restricted information. Working within SDSU’s Information Technology Security Office, the Research Cybersecurity Analyst will translate cybersecurity, contractual, regulatory, and sponsor requirements, including NIST SP 800-171, CMMC, NIST SP 800-53, and the HIPAA Security Rule and related requirements, into practical technical, administrative, and procedural safeguards. You’ll assess research environments, help implement security requirements, maintain compliance documentation, coordinate remediation, and help prepare research projects for sponsor inquiries, audits, and formal assessments. The position will work collaboratively with researchers, research administration, research computing, central IT, privacy, legal, export control, compliance, and other campus partners to help research teams meet security obligations while maintaining an effective and usable research environment.\nWhat You’ll Do:\nResearch Security & Consultation\n Review research proposals, solicitations, contracts, subcontracts, awards, and data-use agreements to identify cybersecurity, privacy, data-handling, and reporting requirements.\n Conduct risk, gap, and control readiness assessments and recommend practical security approaches, remediation strategies, and risk-treatment options.\n Work with researchers, research administration, IT teams, research computing, and privacy, legal, export control, and compliance partners to interpret and implement applicable requirements.\n Interpret contractual and sponsor cybersecurity requirements, including flow-down clauses, reporting obligations, data-handling restrictions, security milestones, and assessment expectations.\n Map contract and regulatory requirements to applicable controls, responsible parties, evidence, and remediation plans.\n Assess research data, systems, and workflows for indicators of CUI, FCI, PHI, PII, export-controlled information, or other restricted data.\n Establish and document the scope and boundaries of research environments, including users, cloud services, third-party providers, endpoints, networks, and research equipment.\n Explain cybersecurity requirements in practical terms to researchers and research-support personnel who may not have a cybersecurity background.\n Security Controls & Research Environments\n Coordinate, support, and validate security controls across cloud and on-premises research environments.\n Assess security architectures and configurations involving identity and access management, network segmentation, encryption, endpoint protection, logging, vulnerability management, and secure configuration.\n Evaluate security gaps and coordinate appropriate remediation.\n Support the design, review, and maintenance of secure research environments and research enclaves.\n Compliance & Readiness\n Develop and maintain SSPs, POA&Ms, inventories, procedures, diagrams, and compliance evidence.\n Help prepare research environments for sponsor inquiries, audits, and assessments, including CMMC readiness.\n Support vulnerability monitoring, remediation, and research-focused incident readiness.\n Maintain documentation and processes needed to demonstrate continued compliance and operational effectiveness after an initial assessment or authorization.\n What We’re Looking For:\nWe are looking for a cybersecurity professional who can evaluate security requirements, understand how they apply to research environments, identify practical safeguards, and work collaboratively with technical and nontechnical stakeholders to implement and document those safeguards.\nThe successful candidate may have developed this experience through cybersecurity operations, governance, risk, and compliance work, IT auditing, cloud security, systems administration, research computing, compliance consulting, or a related area.\nExperience in the following areas is especially valuable:\n NIST SP 800-171, CMMC, NIST SP 800-53, or similar security frameworks\n Security controls, assessments, and compliance documentation\n SSPs, POA&Ms, or audit/assessment readiness\n Windows, Linux, cloud, or enterprise environments\n Identity and access management, encryption, vulnerability management, or network security\n Communicating technical or compliance requirements to different audiences\n Experience working in a higher-education, research, healthcare, government, defense, or other highly regulated environment is a plus.\nWhy Join Us?\n Support research securely - Help researchers meet cybersecurity requirements while moving their work forward.\n Work across cybersecurity and compliance - Gain exposure to technical controls, risk assessments, documentation, and assessment readiness.\n Collaborate across SDSU - Work with researchers, IT professionals, and compliance partners on a variety of research security needs.\n Solve different security challenges - Support research projects with varying technologies, data, sponsors, and security requirements.\n As part of the California State University (CSU) system, San Diego State University helps power one of the largest and most impactful public university systems in the nation. See what it’s like to work at the CSU-watch our video and imagine your future here: Working at the CSU .\nPosition Information\n This is a full-time (1.0 time-base), benefits-eligible, permanent/probationary position.\n This position is designated as exempt under FLSA and is not eligible for overtime compensation.\n Standard SDSU work hours are Monday - Friday, 8:00 a.m. to 4:30 p.m., but may vary based on operational needs. \n This position is eligible for telecommuting up to 3 days per week, following a training period during which on-site presence is required.\n Department Summary\nThe Information Technology Security Office (ITSO), reporting to the Chief Information Officer (CIO), is part of the Information Technology Division. ITSO provides campus-wide core technology and security services, collaborating with university departments, external auxiliary organizations, and the CSU Chancellor's Office to support core technology and security services across the campus.\nFor more information regarding the Information Technology Security Office (ITSO), click here .\nEducation and Experience\nAn equivalent to bachelor’s degree in a related field and four years of relevant experience. Additional experience which demonstrates acquired and successfully applied knowledge and abilities shown above may be substituted for the required education on a year-for-year basis. An advanced degree in a related field may be substituted for the required experience on a year-for-year basis.\nKey Qualifications\n Experience implementing or assessing NIST SP 800-171, CMMC, NIST SP 800-53, or comparable security frameworks, including developing or maintaining SSPs, POA&Ms, control evidence, and assessment documentation.\n Experience securing Windows, Linux, cloud, or research computing environments, including controls such as identity and access management, encryption, network segmentation, secure configuration, logging, and vulnerability management.\n Ability to conduct security risk, gap, and control assessments, identify appropriate remediation or risk-treatment options, and support audit or assessment readiness.\n Ability to translate sponsor, contractual, regulatory, and security requirements into practical technical and procedural controls and communicate them effectively to researchers, technology teams, and leadership.\n Working knowledge of research-security requirements and the ability to learn and apply requirements related to CUI/FCI, privacy, federal research awards, HIPAA-regulated information, export controls, and controlled-access research data.\n Experience assessing cloud, vendor, and third-party security, including shared-responsibility models and contractual security requirements.\n Strong communication, collaboration, and project management skills, with the ability to manage multiple security initiatives and work effectively across technical, research, administrative, and compliance teams.\n Ability to appropriately handle confidential, regulated, and sensitive information and adapt to evolving technologies and security requirements.\n Preferred Qualifications Advanced degree in cybersecurity, information security, computer science, information systems, engineering, or a related field and/or additional progressively responsible cybersecurity experience.\n Experience supporting higher education or research environments, including secure research environments, CUI/FCI, CMMC readiness, HIPAA-regulated research, or cloud platforms such as Azure, AWS, or Google Cloud.\n Relevant cybersecurity, cloud, audit, or compliance certification, completed or in progress, such as CISSP, CISM, CCSP, Security+, CySA+, GIAC, CMMC, or another comparable certification.\n\n Compensation and Benefits\nSan Diego State University offers competitive compensation and a comprehensive benefits package designed to support your well-being and professional growth.\nCompensation:\nStep placement will be determined based on relevant qualifications and professional experience, in alignment with the department’s budget and equity guidelines.\n Initial step placement is not expected to exceed Step 10 ($8,705/month).\n Salary step placement for internal applicants will follow the CSUEU Collective Bargaining Agreement.\n CSU Classification Salary Range: $7,284-$10,611 per month (Step 1-Step 20).\n Future increases, including step advancements, are subject to contract negotiations.\n Full Benefits Package Includes:\n Generous Time Off: 15 paid holidays, vacation, and sick leave.\n Retirement: CalPERS pension plan with retiree healthcare, and reciprocal agreements with other California public retirement systems, including the UC.\n Health Coverage: Medical, dental, and vision options at low or no cost.\n Education Support: CSU tuition fee waiver for employees and eligible dependents.\n Optional Offerings: FlexCash, life and disability insurance, legal and pet plans.\n Campus & Community: Access to the library, campus events, employee groups, and volunteer and social activities.\n Our benefits are a significant part of total compensation. Learn more at the SDSU Benefits Overview .\nSDSU Values\nAt SDSU, our diversity gives us power and benefits every single member of our community. Consistent with California law and federal civil rights laws, SDSU provides equal opportunity for all in education and employment. We encourage all members of our community to purposefully learn from one another through open and respectful dialogue and responsible engagement. We strongly preserve the right to free expression and encourage difficult conversations that help lead to improved individual and community learning and cohesion.\nPrinciples of Community \nAt San Diego State University, we are a community of diverse individuals who have and represent many perspectives, beliefs, and identities. This diversity lends our community strength, and we commit to creating and sustaining an inclusive and intellectually vibrant environment that benefits all members of our university. \nSDSU’s Principles of Community is an aspirational statement that is intended to evolve over time. The statement reflects the ideals we are encouraged to uphold in our interactions with one another.\nEqual Opportunity and Excellence in Education and Employment\nAll university programs and activities are open and available to all regardless of race, sex, color, ethnicity or national origin. Consistent with California law and federal civil rights laws, San Diego State University (SDSU) provides equal opportunity in education and employment without unlawful discrimination or preferential treatment based on race, sex, color, ethnicity, or national origin. Our commitment to equal opportunity...","description_format":"text","description_chars":16009,"description_truncated":true,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Job Boards & Aggregators"],"lifecycle":[{"event":"open","at":"2026-10-22T04:30:01Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":13,"expected_fill_days":67,"reasons":["seen:12","velocity","win:early","comp:brand"],"computed_at":"2026-11-02T06:13:15Z"},"pay":null,"html_url":"https://alion.io/job/careersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii","json_url":"https://alion.io/job/careersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii.json","meta":{"generated_at":"2026-11-02T16:48:23Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":23463,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-03T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":701994},"rest":"https://alion.io/mcp/rest/get_company?id=701994"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcareersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcareersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcareersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/careersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcareersingovernment-com-research-cybersecurity-analyst-information-security-analyst-iii"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3057608}},{"tool":"search_jobs","arguments":{"company":"careersingovernment.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3057608},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}