SIGN IN
Security Analyst - Junior jobs in United States
cer-icon
Apply on Employer Site
company-logo

Aretum · 17 hours ago

Security Analyst - Junior

Aretum is a mission-driven organization committed to delivering innovative, technology-enabled solutions across defense, civilian, and homeland security sectors. The Junior-Level Security Analyst provides cybersecurity and compliance support for Department of War information systems, focusing on vulnerability management, configuration compliance, and RMF support activities.
ConsultingInformation Technology
check
Growth Opportunities
badNo H1BnoteSecurity Clearance RequirednoteU.S. Citizen Onlynote

Responsibilities

Execute vulnerability management activities using ACAS, ESS, SCAP tools, and manual validation techniques to confirm findings and reduce false positives
Conduct application and web vulnerability assessments using tools such as Burp Suite and document results with clear remediation guidance
Support vulnerability triage and prioritization based on mission impact, exposure, exploitability, and operational constraints
Support the Vulnerability Disclosure Program (VDP) by managing intake, validation, tracking, and coordination with remediation stakeholders
Ensure vulnerability findings, evidence, and remediation status are accurately documented and traceable within RMF artifacts (e.g., assessment inputs and POA&M updates)
Support SCAP/STIG-related validation by correlating scan results to configuration baseline requirements and documenting compliance status
Demonstrate the ability to perform—or a strong willingness to learn—security assessment activities across ACAS, ESS, Burp Suite, VDP workflows, and SCAP/STIG compliance processes
Configure and manage AWS Security toolsets (CloudTrail, GuardDuty, Inspector, Security Hub)
Execute DISA STIG compliance activities across operating systems, applications, databases, and network devices
Validate security baselines using SCAP and manual assessment techniques
Identify deviations, document compensating controls, and support risk acceptance requests
Ensure configuration compliance aligns with mission requirements and operational constraints
Maintain and update RMF packages throughout the system lifecycle
Support ATO, IATT, and continuous monitoring activities
Track POA&Ms and remediation actions to completion
Coordinate with Government System Owners, ISSOs, ISSEs, and Authorizing Officials
Support cybersecurity assessments, inspections, and compliance reviews
Support SIEM monitoring and alert analysis
Assist with ESS deployment, configuration, and reporting
Support log analysis, threat detection, and incident response activities
Assist with continuous monitoring and cybersecurity metrics reporting

Qualification

Vulnerability ManagementRMF SupportAWS SecurityNIST 800-seriesSIEM MonitoringWillingness to LearnDoD 8140 / 8570 CertificationsTechnical DocumentationCommunication Skills

Required

Active Top Secret Clearance Required
Master's Degree or Bachelor's Degree + 3 years of relevant experience
3-6 years of experience in information assurance, cybersecurity, or compliance-focused roles
Experience maintaining RMF packages in classified or regulated environments
Working knowledge of NIST 800-series publications and DoD cybersecurity requirements
Experience developing and maintaining SOPs, policies, or technical documentation
Strong written and verbal communication skills
Demonstrated willingness to learn new tools/techniques and support cross-functional cybersecurity activities as mission needs evolve

Preferred

Extensive knowledge of AWS Security
Experience supporting DoD or intelligence community customers
Hands-on experience with eMASS or other GRC tools
Familiarity with SIEM platforms, ESS/Trellix, Burp, Checkmarx, or other vulnerability management solutions
DoD 8140 / 8570 certifications (e.g., Security+, CAP)
Experience working in classified (SCIF) environments

Benefits

Health Care Plan (Medical, Dental & Vision)
Retirement Plan (401k)
Life Insurance (Basic, Voluntary & AD&D)
Paid Time Off
Family Leave (Maternity, Paternity)
Short Term & Long-Term Disability
Training & Development

Company

Aretum

twittertwitter
company-logo
ARETUM is a government contracting company specializing in technology-enabled mission support services for the Department of Defense.

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
Bobby Frazitta
Vice President of People
linkedin
leader-logo
Tiffany Bailey
Executive Vice President
linkedin
Company data provided by crunchbase