Cybersecurity Analyst

At Odyssey, our Cybersecurity Analysts protect our systems, data, and people from evolving cyber threats across cloud and on premises environments. You will monitor and triage alerts from SIEM, EDR, and intrusion detection tools, investigate confirmed threats, and contain incidents by isolating hosts, blocking malicious activity, and escalating as needed. You will document findings, refine detection rules, and partner with IT, engineering, and compliance teams to identify vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting continuous monitoring aligned with NIST RMF and FedRAMP requirements.

Duties include but are not limited to:

• Monitors and responds to alerts from tools such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and intrusion detection systems, then triages each alert to determine whether it is a real threat or a false positive and how urgently it needs attention.
• For genuine threats, they investigate logs, network traffic, and endpoint activity to understand what happened and how far it spread, then contain the threat by isolating hosts, blocking IPs or accounts, and escalating serious incidents.
• They document their findings and actions in tickets and incident reports, and they continually refine detection rules to reduce noise and catch new attack techniques.
• Support NIST SP 800 171, NIST SP 800 53 and CMMC Level 2 requirements and writing control narratives, SSPs, POA&Ms and assessment evidence.

Citizenship: Must be a U.S. citizen

Minimum Required Qualifications

• Clearance: Eligible to obtain and maintain a Secret clearance
• Education: Bachelor’s degree in information security, information systems, or a related field, or equivalent experience
• Years of Experience: 3 to 5 years in security compliance, audit, or GRC, including hands on experience with NIST SP 800-171 or NIST SP 800-53
• Certifications: CompTIA Security Plus or equivalent 

Preferred Qualifications

• Clearance: Active Secret clearance
• Years of Experience: 5 to 8 years experience supporting a DoD contractor or SOC organization, including CUI environments (i.e. Microsoft GCC High); prior participation in a C3PAO assessment
• Certifications: SecurityX Plus, CISA, CRISC, or CISSP

Technical Skills

• Microsoft 365 and Azure compliance tooling (Purview, Compliance Manager, Defender for Cloud, Intune)
• SIEM, EDR, and vulnerability scanning tools to support continuous monitoring
• Security awareness and phishing simulation platforms
• NIST SP 800-171, NIST SP 800-171A, NIST SP 800-53, and CMMC Level 2 requirements
• CUI and FCI scoping, asset categorization, and assessment boundary definition
• Writing control narratives, SSPs, POA&Ms, and assessment evidence package

Interpersonal Skills

• Serves as primary contact for assessors, prime contractors, and customers
• Coordinates evidence across HR, facilities, export compliance, and IT
• Prepares clear, defensible packages for executive signature
• Holds control owners accountable for findings through closure
• Communicates compliance status and risk to technical and nontechnical stakeholders

Additional Information

• Location: Colorado Springs, CO
• Travel: 5-10%
• Work Arrangement: Remote or Hybrid (Periodic on location work as needed)

#LI-MP1