Cyber Security Analyst

Responsibilities

This position description does not represent a current opening but may be used to identify candidates with skills and experience to fill a position within Technica Corporation once the contract is awarded. The position is for a Contractor role to support an approximate 3-4 month project. Candidates who express an interest may be considered for future positions at Technica Corporation. If a position becomes available that aligns with your qualifications, our recruitment team will contact you.

Technica is seeking a Cybersecurity Analyst to support the design, implementation, monitoring, documentation, and sustainment of cybersecurity controls across enterprise, manufacturing, engineering, Controlled Unclassified Information (CUI), and restricted-use environments. The analyst will contribute to rapid security modernization efforts supporting Microsoft GCC High operational readiness, Zero Trust-aligned controls, identity hardening, endpoint security, centralized logging, SIEM operations, vulnerability management, incident response, and compliance readiness for CMMC Level 2, NIST SP 800-171, ISO 9001, AS9100, NADCAP preparation, and future DD-254/classified-capable planning.

This position requires hands-on experience supporting regulated environments that involve CUI, export-controlled data, manufacturing intellectual property, privileged access, secure collaboration, and evidence-based compliance. The Cybersecurity Analyst will work closely with cybersecurity engineers, system administrators, identity engineers, network and security engineers, compliance leads, managed security providers, and client stakeholders to implement repeatable, documented, and auditable security operations.

• Support daily and project-based cybersecurity activities across Microsoft 365 Commercial, Microsoft GCC High, Entra , Okta, Intune, Purview, Sentinel, Azure-hosted infrastructure, endpoint systems, Palo Alto security technologies, VDI, and secure collaboration environments.
• Support implementation and sustainment of Zero Trust-aligned security controls, including conditional access, privileged access, role-based access, session controls, device compliance, and break-glass account procedures.
• Assist with Microsoft GCC High security operations, including tenant security configuration review, SharePoint segmentation support, Teams governance, data labeling, audit logging, and security evidence collection.
• Monitor and triage alerts from Microsoft Sentinel, Microsoft 365, Entra , Okta, endpoints, network devices, Azure services, VDI platforms, and ERP-related systems where integrated.
• Develop and maintain SOC/SIEM use cases, alert-tuning recommendations, incident-response runbooks, dashboards, and recurring security reports.
• Support vulnerability management activities.
• Support endpoint and device security activities, including secure baseline validation, Intune compliance policy review, software update governance, logging review, and secure engineering workstation support.
• Contribute to network and infrastructure security activities, including VPN security review, segmentation validation, and firewall policy review.
• Support CMMC Level 2 and NIST SP 800-171 readiness activities, including SSP and POA&M support, compliance mappings, control assertion support, audit artifact preparation, and recurring evidence validation.
• Create and maintain operational documentation, including security procedures, configuration records, incident response checklists, change records, administrator runbooks, evidence inventories, and knowledge transfer materials.

The position will be based in Sterling, VA, or at other select locations as required by the contract. This job may support a hybrid work schedule. The final approved work schedule arrangement will be coordinated with the hiring manager. This position may require 10%-20% travel.

• Bachelors in IT, Information Systems, or Computer Science, or equivalent combination of education and/or experience
• 5 years related experience, with 3+ years of experience supporting operational systems and networks
• Experience supporting Microsoft security technologies such as Microsoft 365, Entra , Intune, Purview, Defender, Sentinel, Azure security logging, Conditional Access, and audit/eDiscovery capabilities
• Experience reviewing, triaging, and escalating security alerts from SIEM, endpoint, identity, network, cloud, SaaS, or infrastructure platforms
• Working knowledge of CMMC Level 2, NIST SP 800-171, CUI handling, SSP/POA&M support, security control evidence collection, and compliance documentation
• Must be a U.S. Citizen and able to obtain a clearance

• Strong leadership, collaboration, and mentoring skills.
• Relevant certifications such as Security+, CySA+, CISSP Associate, SSCP, CISM, CCSP, Microsoft Security certifications, Azure Security Engineer, SC-200, SC-300, SC-400, or CMMC ecosystem training are preferred.

About Technica:At Technica Corporation, our goal is to provide…