Program Security Analyst Jobs in Virginia (NOW HIRING)

TS/SCI - Security Program Protection Specialist

• Springfield, VA

Position: Security Program Protection Specialist
Location: US-VA-Springfield
Clearance: TS/SCIOverviewHOT JOB – IMMEDIATE OPENING

Bailey Information Technology LLC is hiring a Security Program Protection Specialist to support the Research Directorate at the National Geospatial-Intelligence Agency (NGA), onsite in Springfield, VA.

The Research and Technology Protection (RTP) team provides day-to-day security classification guidance and risk assessment for classified and controlled unclassified GEOINT campaigns and technology development within NGA Research. RTP is a security risk management discipline — not a compliance or guard-force function — that identifies and safeguards technical and programmatic information from concept through transition to a mission partner. This role applies OPSEC, Critical Program Information (CPI) protection, and Program Protection Planning to defend U.S. Government, National Security, and Intelligence Community interests against unauthorized disclosure, exploitation, and adversarial technical collection.

Background to be successful on this role

You have program security / technology protection backgrounds from organizations such as DARPA, DTRA, NRO, or NGA, with direct experience in:

• Research Technology Protection (RTP)
• Program Protection Planning (PPP)
• Critical Program Information (CPI) identification and protection
• Operations Security (OPSEC)
• Supply Chain Risk Management (SCRM) and Due Diligence analysis

Prior titles that signal a strong fit include Program Security Representative (PSR) or Program Security Officer (PSO). Candidates who have worked for System High have also historically performed well in this role.

Responsibilities

• Provide system security analysis, program documentation, and risk assessment analysis in support of the RTP mission.
• Develop and maintain a comprehensive picture of threats to NGA Research programs.
• Identify potential program vulnerabilities that could be exploited and assess the impact of loss of NGA R&D information.
• Perform overall security risk assessments for NGA's research efforts and evaluate the pros/cons of proposed risk mitigation options.
• Review and establish technical and process-related security classification guidance for new concepts developed by NGA Research Offices and Pods.
• Develop tailored classification guidelines and dissemination instructions for GEOINT tools, data, and specialized programs/publications.
• Provide expert guidance on protection of classified information, classification management, special security, industrial security, and security education/training.
• Coordinate with Program Managers and OGC to identify export-controlled/ITAR-restricted technologies in development within NGA Research.
• Deliver and support briefings for the NGA Research workforce on evolving security policy, guidance, and foreign government relationship considerations.
• Apply Business Intelligence (BI) and social network analysis to illuminate threats, vulnerabilities, and exploitation opportunities across traditional and nontraditional supply chains, financial/non-financial business activity, technology trends, and academic/research partnerships.
• Assess the capacity and maturity of the technology, innovation, and manufacturing ecosystem — including tiered/sub-tiered domestic and foreign suppliers — supporting critical enabling technologies.
• Produce clear, well-organized written products — security plans, SOPs, acceptance memoranda, risk assessments, and classification guides. Strong technical writing is a core, non-negotiable requirement of this role, not a secondary skill.

Qualifications

• Experience in program security, technology protection, or research security within DoD/IC — NGA experience strongly preferred; DARPA, DTRA, or NRO experience also highly valued.
• Demonstrated hands-on experience with RTP, PPP, and CPI processes (not just familiarity with the terms).
• Experience with OPSEC methodology and SCRM/due diligence analysis.
• Strong writing samples/history — plans, SOPs, memos, or assessments.
• Bachelor's degree required

Certifications (Prefer 1 certification)

• Security Fundamentals Professional Certification (SFPC)
• Security Asset Protection Professional Certification (SAPPC)
• Security Program Integration Professional Certificate (SPIPC)
• Special Program Security Certification (SPSC)
• Bachelor's degree required; Master's or PhD preferred.