IT Security Analyst

Bridge Phase is a mission-focused technology company that designs, builds, secures, and operates modern digital solutions that drive national security, government efficiency, and mission success across the Federal Government. We empower agencies to achieve meaningful outcomes through high-performing software engineering, cloud, Dev Sec Ops , cybersecurity, AI/ML, and platform modernization solutions delivered by collaborative teams focused on innovation, adaptability, and operational excellence.

As a trusted partner, Bridge Phase helps Federal organizations modernize critical systems, accelerate delivery, and achieve lasting mission impact.

Bridge Phase is seeking a detail-oriented, self-driven IT Security Analyst to support cybersecurity operations, vulnerability management, and continuous compliance efforts within a FedRAMP-authorized cloud environment. This individual will work closely with cybersecurity, cloud operations, and technical teams to maintain security documentation, assess system vulnerabilities, support risk management activities, and ensure enterprise systems remain aligned with Federal security requirements and established compliance frameworks.

The ideal candidate brings a strong understanding of Federal cybersecurity standards, risk management frameworks, and cloud security practices, along with hands‑on experience in vulnerability assessment, security documentation, and remediation coordination. This role requires a proactive problem solver who can analyze complex technical environments, identify and prioritize security risks, collaborate across technical teams, and support the ongoing security and compliance of mission‑critical enterprise systems.

This position requires candidates to be U.S. citizens who hold no additional citizenship. This is a hybrid role requiring onsite work in Herndon, VA, three days per week (Tuesday, Wednesday, and Thursday), with the potential to increase to five days per week based on business needs.

• Support cybersecurity operations and continuous compliance monitoring for enterprise cloud environments, ensuring alignment with FedRAMP, NIST, DoD, and other applicable Federal security requirements.
• Develop, update, and maintain security documentation, compliance artifacts, policies, procedures, and authorization packages required to support ongoing system security and accreditation activities.
• Maintain and support Plans of Action and Milestones (POA&Ms), tracking identified security weaknesses, remediation activities, and compliance milestones through resolution.
• Collaborate with Cloud Operations and technical teams to identify, assess, prioritize, and remediate system vulnerabilities across cloud infrastructure, applications, and containerized environments.
• Conduct vulnerability assessments and analyze potential attack vectors to determine exploitability, assess risk, and recommend appropriate remediation strategies.
• Support the implementation of risk-based vulnerability management processes, prioritizing remediation efforts based on system exposure, security impact, and Federal compliance requirements.
• Develop and maintain automation scripts using Python, Bash, Power Shell, or similar technologies to streamline vulnerability identification, analysis, reporting, and remediation workflows.
• Analyze container security vulnerabilities using approved scanning tools, identifying operating system and application-level risks and coordinating corrective actions.
• Support security assessments of CI/CD pipelines, container registries, AWS Elastic Container Registry (ECR), and container image management processes.
• Assist with security authorization and accreditation activities, including Risk Management Framework (RMF)…