Configuration Management Analyst (Cybersecurity)

TL;DR

Configuration Management Analyst (Cybersecurity): Maintaining secure, consistent, and well-governed system configurations across client environments with an accent on secure baselines, compliance monitoring, and risk identification. Focus on hardening systems, platforms, and services while aligning configurations with organizational and security requirements.

Location: D.C., Maryland, or Virginia (Arlington)

Company

A veteran-owned small business focusing on the enablement of people and technology to deliver top-tier services to its customers.

What you will do

• Develop, maintain, and support configuration management policies, procedures, and standards.
• Establish and manage secure configuration baselines across supported environments.
• Ensure all configuration changes are documented, tracked, reviewed, and auditable.
• Monitor configuration compliance and resolve associated issues, gaps, and risks.
• Support hardening efforts for systems, platforms, and services.
• Collaborate with technical stakeholders to align system configurations with security requirements.

Requirements

• 3+ years of experience in configuration management, systems administration, or security operations.
• Bachelor’s degree in Cybersecurity, IT, Computer Science, or equivalent experience.
• Experience with system baselines, change control, and secure configuration practices.
• Proficiency with vulnerability scanning tools such as Tenable/Nessus.
• Familiarity with Windows, Linux, cloud, and enterprise infrastructure.
• Knowledge of DISA STIGs, CIS Benchmarks, and security hardening concepts.

Nice to have

• Relevant certifications: CISSP, CEH, CISM, CISA, CASP, GSEC, GSLC, PMI-ACP, SAFe Agilist, or CSM.

Culture & Benefits

• 100% of medical premiums covered by the company.
• 401k program with 100% company match on the first 4%.
• 3 weeks of PTO starting, plus 11 paid holidays annually.
• Monthly reimbursement for cell phone and home internet costs.
• Investment in training and certifications to deepen technical skills.
• Company-wide new business incentive programs and contribution incentives.