1

Senior Security Analyst Jobs in Virginia (NOW HIRING)

Security Analyst Sr

Norfolk, VA ยท On-site

$97K - $169K/yr

Security Analyst Sr Security Analyst Sr Location: Near any Elevance Health PulsePoint location. Hybrid 1 : This role requires associates to be in-office 1 - 2 days per week, fostering collaboration ...

Security Analyst Sr

Richmond, VA ยท On-site

$97K - $169K/yr

Security Analyst Sr Security Analyst Sr Location: Near any Elevance Health PulsePoint location. Hybrid 1 : This role requires associates to be in-office 1 - 2 days per week, fostering collaboration ...

Security Analyst Sr

Roanoke, VA ยท On-site

$97K - $169K/yr

Security Analyst Sr Security Analyst Sr Location: Near any Elevance Health PulsePoint location. Hybrid 1 : This role requires associates to be in-office 1 - 2 days per week, fostering collaboration ...

Security Analyst Sr

Richmond, VA ยท On-site

$97K - $169K/yr

Security Analyst Sr Location: Near any Elevance Health PulsePoint location. Hybrid 1 : This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity ...

Security Analyst

Chantilly, VA ยท On-site

$85K - $100K/yr

Our security analysts will provide a thorough review of security clearance paperwork and personnel ... Senior (Level 4) requires minimum of 5 years of experience performing security or suitability ...

Security Analyst

Chantilly, VA ยท On-site

$85K - $100K/yr

Our security analysts will provide a thorough review of security clearance paperwork and personnel ... Senior (Level 4) requires minimum of 5 years of experience performing security or suitability ...

Security Analyst

Chantilly, VA ยท On-site

$80 - $100/hr

Our security analysts will provide a thorough review of security clearance paperwork and personnel ... Senior (Level 4) requires minimum of 5 years of experience performing security or suitability ...

Showing results 21-40

Senior Security Analyst information

See Virginia salary details

$68.9K

$114.6K

$164.1K

How much do senior security analyst jobs pay per year?

As of Sep 7, 2026, the average yearly pay for senior security analyst in Virginia is $114,555.00, according to ZipRecruiter salary data. Most workers in this role earn between $95,200.00 and $124,400.00 per year, depending on experience, location, and employer.

What is a senior security analyst?

Senior Security Analysts are experienced professionals responsible for protecting an organization's digital assets from cyber threats. They monitor networks and systems for security breaches, investigate incidents, and develop strategies to prevent future attacks. In addition, Senior Security Analysts often lead teams, conduct risk assessments, and ensure compliance with security policies and regulations. Their role is critical in maintaining the overall security posture of an organization.

What are the key skills and qualifications needed to thrive as a senior security analyst?

To thrive as a Senior Security Analyst, you need deep expertise in cybersecurity principles, risk assessment, and incident response, often supported by a degree in computer science or related field and relevant certifications such as CISSP or CISM. Familiarity with security information and event management (SIEM) tools, intrusion detection systems, and vulnerability assessment platforms is typically required. Strong analytical thinking, attention to detail, and effective communication skills help set top performers apart in this role. These skills and qualities are vital for identifying threats, protecting organizational assets, and ensuring robust incident handling in complex security environments.

How does a senior security analyst typically collaborate with other departments to enhance an organization's security posture?

Senior Security Analysts work closely with IT, compliance, risk management, and executive teams to identify vulnerabilities, implement security policies, and respond to incidents. They often lead security awareness training, coordinate with system administrators to deploy security measures, and provide guidance during audits. Effective collaboration ensures that security protocols align with business objectives and that all departments are informed about best practices and emerging threats.

What is the difference between Senior Security Analyst vs Security Engineer?

AspectSenior Security AnalystSecurity Engineer
CertificationsCompTIA Security+, CISSP, CISACompTIA Security+, CISSP, CEH
Work EnvironmentSecurity teams, incident response, threat analysisSystem design, implementation, security architecture
Employer & Industry UsageIT security departments across various industriesIT and cybersecurity teams, often in infrastructure projects
Common Search & ComparisonYesNo

The Senior Security Analyst primarily focuses on monitoring, analyzing, and responding to security threats, while the Security Engineer designs and implements security systems. Both roles require similar certifications and are integral to cybersecurity teams, but they differ in daily responsibilities and focus areas.

What are the most commonly searched types of Security Analyst jobs in Virginia?

The most popular types of Security Analyst jobs in Virginia are:

What job categories do people searching Senior Security Analyst jobs in Virginia look for?

The top searched job categories for Senior Security Analyst jobs in Virginia are:

What cities in Virginia are hiring for Senior Security Analyst jobs?

Cities in Virginia with the most Senior Security Analyst job openings:

Infographic showing various Senior Security Analyst job openings in Virginia as of August 2026, with employment types broken down into 85% Full Time, 13% Part Time, and 2% Contract. Highlights an 91% Physical, 2% Hybrid, and 7% Remote job distribution, with an average salary of $114,555 per year, or $55.1 per hour.

Senior Security Analyst - ATO / RMF (Active TS/SCI Clearance)

Strategic Business Systems (SBS)

Chantilly, VA โ€ข On-site

Full-time

Medical, Dental, Vision, Life, Retirement, PTO

Posted 19 days ago


Job description

Senior Security Analyst - ATO / RMFAWS Professional Services
Location: Chantilly, VA
Work Type: 100% Onsite - Secure Facility
Employment Type: Full-Time
Citizenship: U.S. Citizenship required
Clearance: Active TS/SCI required; CI Polygraph preferred but not required
Certification: Active Security+ or higher (IAT Level II/III) required
The Opportunity
Strategic Business Systems (SBS) is expanding our cybersecurity team and hiring Senior Security Analysts to support our growing Authority to Operate as a Service (ATOaaS) offering.
SBS developed ATOaaS in collaboration with leading technology companies and DoD/Intelligence Community customers to help accelerate the process of bringing innovative commercial technologies into secure government environments.
This is a hands-on cybersecurity role supporting technology partners and government customers throughout the Authority to Operate (ATO) and Risk Management Framework (RMF) lifecycle. You'll work directly with customers to understand their technologies, develop security documentation, assess vulnerabilities, implement and document security controls, manage POA&Ms, and help move cloud-based solutions successfully through authorization.
The goal is straightforward: help technology providers navigate the government security authorization process faster while maintaining the security and compliance required for mission environments.
If you have experience developing ATO packages, understand RMF, and enjoy working directly with customers to solve cybersecurity and compliance challenges, this is a strong fit.
What You'll Be Doing
  • Support customers through the complete ATO and RMF lifecycle
  • Develop and maintain ATO security packages and authorization documentation
  • Write clear technical documentation describing how systems are configured, secured, and operated
  • Work across the RMF lifecycle, including Categorize, Select, Implement, Assess, Authorize, and Monitor
  • Assess security controls against NIST 800-53 requirements
  • Analyze STIG and SCAP requirements and document compliance
  • Review vulnerability scans and identify security weaknesses within customer environments
  • Interpret results from tools such as Tenable Nessus, Checkmarx, and Fortify
  • Develop, manage, and update Plans of Action & Milestones (POA&Ms)
  • Track vulnerabilities through remediation, mitigation, or risk acceptance
  • Identify and help customers remediate open-day vulnerabilities
  • Evaluate configuration changes and their impact on the security posture of enterprise cloud solutions
  • Recommend mitigating controls and security countermeasures
  • Support continuous monitoring following authorization
  • Maintain security documentation as customer environments and requirements evolve
  • Explain security-control inheritance models and associated resources
  • Prepare documentation for system audits and vulnerability assessments
  • Communicate cybersecurity risk and remediation recommendations to technical teams and senior leadership

Customer & Technical Delivery
This role involves more than developing security documentation. You'll work directly with SBS technology partners and government customers to help move their solutions through the authorization process.
You'll be expected to:
  • Lead technical discussions with customers and technology partners
  • Understand customer systems, architectures, and business requirements
  • Translate technical environments into appropriate security controls and authorization requirements
  • Advise customers on security best practices and required remediation
  • Identify technical and cybersecurity risks and recommend mitigation strategies
  • Participate in project planning and identify risks, dependencies, and deliverables
  • Develop project artifacts and support Work Breakdown Structures (WBS)
  • Communicate project status, risks, and technical requirements to project leadership
  • Provide guidance and technical leadership to customers and less-experienced security staff

What We're Looking For
ATO / RMF Experience
  • Hands-on experience supporting and/or managing ATO packages for cloud-based products
  • Experience supporting solutions used by U.S. government agencies and/or military organizations
  • Strong experience with ATO writing, security documentation, and package development
  • Hands-on knowledge of the Risk Management Framework (RMF)
  • Understanding of all RMF lifecycle steps
  • Experience assessing security controls against NIST 800-53
  • Experience developing and managing POA&Ms
  • Ability to understand and explain security-control inheritance

Vulnerability & Compliance Management
  • Experience identifying and mitigating open-day vulnerabilities
  • Experience reviewing and interpreting vulnerability scans
  • Knowledge of STIGs and SCAP
  • Experience with vulnerability and application-security tools such as Tenable Nessus, Checkmarx, Fortify, or similar platforms
  • Ability to recommend appropriate countermeasures and mitigating controls
  • Experience supporting continuous monitoring and compliance reporting

Cloud Security
  • Experience assessing the security posture of cloud-based environments and products
  • Understanding of cloud security controls, configurations, and compliance requirements
  • Ability to evaluate configuration changes and determine their potential security impact
  • Familiarity with firewalls, network security, and intrusion detection systems (IDS) in cloud environments is preferred

Customer-Facing Skills
  • Strong technical writing and documentation skills
  • Ability to explain cybersecurity risks and requirements to both technical and non-technical stakeholders
  • Comfortable leading customer meetings and technical discussions
  • Ability to translate cybersecurity findings into actionable remediation recommendations
  • Self-motivated and comfortable working within a small, agile technical team

Security & Certifications
  • Active TS/SCI clearance required
  • CI Polygraph preferred but not required
  • Active Security+ or higher IAT Level II/III certification required
  • CISSP or similar information security certification preferred
  • Cloud security or platform certifications are a plus
  • Bachelor's degree preferred

Why SBS
SBS is a trusted technology and cybersecurity partner supporting federal agencies, the Department of Defense, Intelligence Community, and leading commercial technology companies.
Our ATOaaS offering is designed to solve a significant challenge for technology providers: navigating the complex security and authorization requirements necessary to bring commercial technologies into government environments.
You'll be part of a team that:
  • Works directly with innovative technology companies and government customers
  • Helps accelerate the delivery of new technologies into DoD and Intelligence Community environments
  • Works across cloud security, ATO, RMF, vulnerability management, and continuous monitoring
  • Provides hands-on guidance throughout the authorization lifecycle
  • Has direct impact on getting new technology into the hands of government and military users

COMPENSATION & BENEFITS
SBS offers a comprehensive total-rewards package, including a market competitive salary along with:
  • Comprehensive medical, dental, and vision coverage; HSA-eligible plan options available
  • 401(k) retirement plan with company match (vesting schedule per Plan Document)
  • Paid Time Off, federal holidays, and floating holiday for personal observance
  • Annual professional development support for AWS certifications, training, and conferences
  • Employee referral program where applicable and documented by program policy
  • Life, AD&D, and short- / long-term disability insurance
  • Telework and flexible-schedule support where mission and contract permit
  • Mission-focused federal contractor supporting national-security customers

Target Salary Range: $140,000-195,000. This range reflects the anticipated compensation for this role. Actual salary will be based on a combination of factors, including the position's scope and level of responsibility, the candidate's relevant experience, education, technical expertise, skills and qualifications, geographic location, and applicable business or contractual requirements.
Equal Employment Opportunity
SBS is an equal opportunity employer; all qualified applicants will receive consideration for employment without regard to age, gender, gender identity, sex, sexual orientation, color, race, creed, national origin, religion, marital status, parental status, citizenship status, ancestry, physical or mental disability, genetic information, veteran status, military status, or any other classification protected by federal, state, or local laws.
Accommodations
If you need an accommodation while seeking employment with SBS, please email hr@sbsplanet.com. Accommodations are made on a case-by-case basis.
No Unsolicited Agency Referrals
SBS does not accept unsolicited resumes from staffing agencies. Any resumes submitted without a prior agreement will be considered the property of SBS.