Security Analyst

ERG is a research and consulting firm that provides a wide range of support to federal, state, and commercial clients. ERG offers multidisciplinary teams with nationally recognized skills in engineering, science, economics, public health, informational technology, and communications. We hire people with the best minds and then provide them with a vibrant and flexible environment in which to develop their careers. The qualified individual must be highly motivated with the skills to prioritize, perform, and communicate effectively in a fast-paced environment. 

ERG is seeking a motivated Security Analyst to join our Managed Information Systems (MIS) team and contribute to maintaining a secure operating environment and growing our security capabilities. In this role, you will support building cybersecurity resilience in our network and information infrastructure and ensure the protection of critical systems. 

• Lead the design and execution of vulnerability assessments and security audits
• Participate in the creation of security policies, guidelines, standards, and procedures
• Participate in the planning and design of systems security architecture
• Stay up to date on IT security industry standards, security solutions, and development of TTPs and IOCs
• Review logs and security reports to identify potential risks and remediation actions
• Monitor security solutions to ensure effective and secure operations
• Evaluate security events to determine impact & escalate appropriately
• Recommend security solutions or enhancements to improve security posture
• Help ensure that information security assets, policies, and processes are reliable, and protect the confidentiality, integrity and availability of data
• Perform risk analysis on threats, security alerts, and other suspicious system or network activity
• Identify and analyze existing processes and procedures to meet new IT Security goals and objectives  

• Must be US Citizen
• Must be eligible for a US DOD Security Clearance
• Bachelor’s degree in computer science, Information Security, or a related field is a plus
• 2-4 years working in IT security operations
• CompTIA Security+ or ISC2 CC certifications or similar certification
• Understanding of basic security concepts including least privilege, defense in depth, and zero trust
• Experience with endpoint protection, monitoring, vulnerability scanning tools
• Familiarity with NIST frameworks (800-171, 800-53) and CMMC is a plus
• Experience performing security audits with and without specialized SIEM tools (e.g., Microsoft Sentinel)
• Ability to interpret technical vulnerability findings and work to develop and implement remediation plans
• Must demonstrate excellent communication and organizational, interpersonal, and multi-tasking skills with the ability to effectively communicate orally and in writing with management, other technical specialists, and users    

ERG offers competitive salaries and excellent benefits, including health and dental insurance, life insurance, long-term disability, educational benefits, FSAs, a generous 401k plan, profit sharing, an EAP, 11-20 paid vacation days per year, 10 paid holidays per year, 56 hours or more of sick leave (based on the state you work in) per year (pro-rated for part-time) and more. The salary range for all positions depends on the years and type of experience. 

ERG is an equal opportunity employer and complies with all applicable EEOC regulations. All qualified applicants will receive consideration for employment without regard to age, race, color, religion, sex, sexual preference, national origin, disability, or status as a protected veteran.  

Please be aware, the only authentic corporate domain for ERG is https://www.erg.com.  ERG may, on occasion, screen applicants via telephone or video interviews via Skype, Teams, GoToMeeting, or another type of video platform. However, any candidate extended a job offer might be asked to meet in person with an ERG employee before providing confidential personal information associated with new employment. 

If you’re a qualified individual with a disability or a disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access ERG’s online application process as a result of your disability. To request accommodation, please contact Human Resources via email at Resumes-Lex@erg.com or call (781) 674-7293. 

ERG fosters a friendly, flexible work environment. ERGers are dedicated to serving clients who are committed to making the world a better place. We promote and recognize principles of fairness and respect in the work we do, the partnerships we foster, and the culture we value both within and outside of our organization.