{"id":589350,"url":"https://alion.io/job/coreone-dev-security-analyst","title":"Security Analyst","company":{"id":345109,"name":"Core One","domain":"coreone.com","url":"https://alion.io/company/core-one","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":86,"open_postings":41,"ghost_share":0,"stale_share":0.341,"repost_share":0,"time_to_fill_p50_days":71,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["McLean, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":150000,"max":200000,"currency":"USD","period":"year","gross":null,"usd_annual":200000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"FedRAMP","optional":false},{"name":"GCP","optional":false},{"name":"Nessus","optional":false},{"name":"NIST 800-53","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-03-27T16:34:04Z","employer_posted_date":"2026-09-28","last_verified_at":"2026-10-29T10:44:49Z","board_verified":true,"closed_at":null,"days_open":215,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":215},"description":"Join our team at Core One! Our mission is to be at the forefront of devising analytical, operational and technical solutions to our Nation's most complex national security challenges. In order to achieve our mission, Core One values people first! We are committed to recruiting, nurturing, and retaining top talent! We offer a competitive total compensation package that sets us apart from our competition. Core One is a team-oriented, dynamic, and growing company that values exceptional performance!\nClearance Required: Active TS/SCI with Polygraph\nSummary\nWe are seeking a Security Analyst to support cybersecurity operations, compliance, and risk management for FedRAMP-authorized and Intelligence Community (IC) systems. This role is responsible for ensuring systems meet stringent federal security requirements while enabling secure, scalable, and compliant cloud and on-premises solutions.\nThe ideal candidate brings deep expertise in NIST frameworks, FedRAMP authorization processes, continuous monitoring (ConMon), and ATO lifecycle management, along with the ability to operate in classified or high-security environments.\nKey Responsibilities\nLead and support FedRAMP Moderate/High and IC ATO authorization processes\nDevelop, review, and maintain security documentation: System Security Plans (SSP), Security Assessment Reports (SAR), Plan of Action & Milestones (POA&M)\nEnsure compliance with NIST SP 800-53 / 800-37 RMF, FedRAMP baselines, ICD 503\nPerform risk assessments, control assessments, and gap analyses\nImplement and manage RMF lifecycle activities (Categorize → Monitor)\nTrack and manage POA&M remediation activities\nFacilitate security control inheritance and shared responsibility models\nExecute continuous monitoring strategies and reporting\nAnalyze security posture using Vulnerability scans and Configuration compliance\nProduce monthly/quarterly ConMon deliverables\nMonitor and analyze security events and alerts\nSupport incident response and forensic analysis\nCoordinate with SOC teams and stakeholders for threat mitigation\nConduct root cause analysis and lessons learned\nSecure cloud environments aligned with FedRAMP controls\nImplement identity and access controls\nSupport 3PAO assessments and audits\nPrepare evidence artifacts for FedRAMP JAB/Agency ATO reviews and Inspector General (IG) audits\nCoordinate with internal/external auditors\nUtilize security tools for monitoring and compliance: Splunk, Sentinel, Vulnerability management tools, ServiceNow\nSupport automation of compliance and reporting workflows\nAct as liaison between Engineering teams, ISSOs / ISSMs, and Compliance and audit teams\nProvide security guidance during system design and change management\nMentor junior analysts and support team development\nPromote a culture of security-first engineering and compliance excellence\nContribute to security governance and policy development\nQualifications \nActive TS/SCI with Polygraph\nBachelor's degree or higher in Cybersecurity, IT, or related field and 5+ years' experience in Cybersecurity in federal or IC environments\n OR Masters and 3+ years of experience in Cybersecurity in federal or IC environments\nStrong Knowledge of NIST RMF (800-37), NIST 800-53 controls, and FedRAMP requirements\nAt least one of the following certifications: CISM or CISA, CompTIA Security+ (baseline), Certified Authorization Professional (CAP), CCSP (cloud security)\nExperience in the following tools: NIST 800-53, RMF, FedRAMP, ICD 503, ServiceNow GRC, Splunk, Azure Sentinel, Nessus, ACAS, AWS GovCloud, Azure Government, GCP, SCAP, STIG Viewer\nDesired Qualifications\nExperience with cloud-native security tools\nKnowledge of Zero Trust Architecture\nExperience with cross-domain solutions\nExperience with ICD 503\nFamiliarity with DevSecOps pipelines in regulated environments\nSalary Range: $150,000 - $200,000\nThe pay range reflected above is a general guideline for this position and labor category and is not a guarantee of a specific salary or offer. Final compensation is determined based on factors including, but not limited to, relevant experience, education, certifications, security clearance level, contract requirements, geographic location, and internal pay equity, and may reflect market data specific to the awarded contract.\nCore One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender identity, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability.\n__PRESENT\n__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT__PRESENT","description_format":"text","description_chars":4638,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","Information Security","Intelligence","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-09-10T09:34:57Z"}],"visa":[],"liveness":{"score":17,"band":"cold","label":"Long shot","p_open":1,"p_active":0.59,"p_room":0.28,"age_days":215,"expected_fill_days":71,"reasons":["conf:3","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":200000,"is_top_pay":true},"html_url":"https://alion.io/job/coreone-dev-security-analyst","json_url":"https://alion.io/job/coreone-dev-security-analyst.json","meta":{"generated_at":"2026-10-29T13:52:15Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":20875,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":345109},"rest":"https://alion.io/mcp/rest/get_company?id=345109"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcoreone-dev-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcoreone-dev-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcoreone-dev-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/coreone-dev-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcoreone-dev-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":589350}},{"tool":"search_jobs","arguments":{"company":"coreone.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":589350},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}