Cyber Risk Analyst
The Cyber Risk Analyst at Confidential Client supports cybersecurity and risk management activities including vulnerability assessments, continuous monitoring, and incident response across cloud and enterprise environments. This entry-level role involves collaborating with technical and non-technical teams to maintain compliance with federal cybersecurity standards and enhance system security posture. The position offers hybrid work flexibility from the Gaithersburg, MD office and emphasizes continuous learning and adaptation to evolving cybersecurity challenges.
About Careertakes
👉 Important disclosure: Careertakes is a third-party recruiting platform supporting this hiring process. If selected, you will be employed directly by our client, IT.
Applicants for this role may also receive access to additional matched opportunities through the Careertakes platform.
Role Overview
Confidential Client is seeking an entry-level Cyber Risk Analyst to support vulnerability management, continuous monitoring, information assurance, security documentation, and incident response across cloud and enterprise environments. This role is based in Gaithersburg, MD with telework opportunities and requires the ability to obtain and maintain a Public Trust clearance.
Primary Responsibilities
- Perform vulnerability assessments: run security scans, analyze results, and document findings.
- Record vulnerabilities and assessment results following NIST Risk Management Framework (RMF) processes.
- Support continuous monitoring across cloud environments and enterprise platforms.
- Monitor and manage audit trail logs, security scans, and related security telemetry.
- Help ensure systems meet established security policies, procedures, and compliance requirements.
- Support cybersecurity reporting for program and management stakeholders.
- Participate in security assessments and help develop and maintain system security documentation.
- Support implementation and verification of information system security requirements.
- Analyze cyber intelligence data and assist with incident investigations.
- Perform threat-hunting activities in supported operating environments.
- Support implementation and maintenance of automated responses to security events and incidents.
- Collaborate with development teams to embed DevSecOps practices in agile workflows.
- Stay current on evolving cybersecurity architectures, federal security regulations, and security benchmarks.
- Continuously learn and adapt to changes in security tools, regulations, and program priorities.
Basic Qualifications
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or related field with relevant hands-on experience.
- Must be able to obtain and maintain a Public Trust clearance.
- Must be located in or within commuting distance of Gaithersburg, MD.
- Understanding of cybersecurity fundamentals, vulnerability management, and information assurance.
- Ability to work effectively in a dynamic, collaborative environment across technical and non-technical teams.
- Strong written and verbal communication skills.
- Demonstrated ability to organize and manage daily priorities independently while supporting program objectives.
- Strong analytical, problem‑solving, and troubleshooting skills.
Preferred Qualifications
- Industry certifications such as Azure Cybersecurity Architect, CISSP, or similar.
- Familiarity with NIST RMF, continuous monitoring, vulnerability management, and federal cybersecurity requirements.
- Experience with cloud security (AWS/Azure/GCP) and securing hybrid environments.
- Knowledge of DevSecOps principles and secure agile development practices.
- Familiarity with configuration/development languages: YAML, Python, JSON.
- Exposure to threat hunting, incident response, security automation, or cyber intelligence analysis.
Compensation & Location
- Pay range: $57,850 — $104,575 per year (provided by Confidential Client).
- Employment type: Full time.
- Location: Gaithersburg, MD (telework/remote options available per program requirements).
- Clearance: Public Trust required.
Keywords & Search Focus (for applicants)
- Cyber Risk Analyst — Gaithersburg, MD
- Vulnerability management, NIST RMF, DevSecOps, cloud security, threat hunting
Equal Opportunity & Hiring Transparency
Careertakes and our client are Equal Opportunity Employers committed to building a diverse and inclusive workforce. We prohibit discrimination or harassment of any kind. To support a fair and efficient hiring process, AI tools may be used to assist with application review or resume screening. These tools do not replace human decision-making. Final hiring decisions are made by people.
If you have questions about how your data is used, please contact us directly.
Negotiate a higher salary! Check the salary ranges for this job type in your area.
View My Salary Range