Cyber Security Analyst

Trilogy Federal

📍 Remoteremote

Job Description

Trilogy Federal drives innovative solutions for complex business challenges across financial management, healthcare, and government industries. Our collaborative, client-first service approach, combined with our commitment to the rapid implementation of pragmatic solutions, has earned Trilogy an unparalleled reputation for delivering transformative results. Trilogy Federal is seeking a Cyber Security Analyst to support the T4NG Consolidated Corporate Support Services (CCSS) program for the Department of Veterans Affairs (VA). This position is responsible for implementing and maintaining the security posture of VA enterprise systems and data, ensuring robust compliance with federal and VA security requirements, and supporting the ongoing authorization and risk management of critical VA platforms as part of a multi-disciplinary, agile technology team.    Position Description:  The Cyber Security Analyst is responsible for supporting the security posture of VA information systems and environments. This role ensures compliance with Federal, VA, and industry information security policies and standards, conducts continuous vulnerability identification and remediation, and participates in both internal and external security assessments. The position requires routine engagement with technical and program stakeholders to maintain and improve security controls and documentation, elevate incident response, and support the ongoing Authorization to Operate (ATO) for supported systems and applications. The Analyst operates within an agile, DevSecOps-focused environment, requiring proactive risk identification and collaboration with cross-functional teams to ensure the security and integrity of VAâs technical ecosystem.  \n Primary Responsibilities: <div> <ul> <li>Perform ongoing vulnerability scanning, penetration testing, code review, and remediation in line with NIST SP 800-53 and related standards. </li> <li> Develop, document, review, and maintain Assessment & Authorization (A&A) artifacts, including security plans, risk assessments, and Plan of Action and Milestones (POA&M), supporting ATO submissions and renewals.  </li> <li> Respond to, analyze, and report on security events and incidents, including notification to stakeholders within strict timeframes. Remediate security vulnerabilities within specified periods according to severity.  </li> <li> Ensure compliance with Federal, VA, FISMA, NIST, HIPAA, Privacy Act, and organizational security and privacy directives.  </li> <li> Complete mandatory and additional annual privacy and security training as required.  </li> <li> <span data-contrast="

Required Skills

securityanalystsystemtrainingtechnicalsupporttestingcodefinancialcloudmanagementoperational