Yellow Duck Technologies is seeking a cleared Senior Security Analyst to ensure that all development activities comply with security requirements and implements security best practices throughout the software lifecycle. This position supports DevSecOps implementation, conducts security assessments, and ensures the unified solution meets all DoD security standards and Risk Management Framework (RMF) requirements.
Responsibilities:
- Implement security controls and best practices.
- Support DevSecOps pipeline security integration.
- Conduct security assessments and vulnerability analysis.
- Manage security findings and Plan of Action & Milestones (POA&M).
- Support RMF activities and security documentation.
- Coordinate security scans and remediation efforts.
- Review code for security vulnerabilities.
- Implement secure coding practices and guidelines.
- Support incident response and security investigations.
- Maintain security documentation and compliance records.
Requirements:
- Must have an active TS/SCI clearance with polygraph.
- Bachelor's degree in Cybersecurity, Computer Science, or related field. An additional 4 years of experience may substitute for a Bachelor's degree.
- 10+ years of information security experience.
- Strong knowledge of DoD security requirements (NIST 800-53, RMF, etc.).
- Experience with security testing tools (SAST, DAST, SCA).
- Understanding of secure software development lifecycle.
- Knowledge of containerization security and Kubernetes security.
- Experience with security compliance and authorization processes.
- Security+ or equivalent certification (required).
- CISSP, GIAC, or similar advanced security certification (preferred).
