Senior Information Security Analyst Jobs
Senior Information Security Analyst jobs are open across financial services, healthcare, government contracting, and technology, at every level from mid-career to staff and principal, with specializations in threat intelligence, vulnerability management, and security operations. Find a role that fits from the openings below and apply directly.
Find JobsOverview
Showing 5 of 1,290+ Senior Information Security Analyst jobs
The Congressional Budget Office is a small nonpartisan agency that provides independent, objective economic and budget analysis to the Congress. The agency seeks a skilled and experienced information security engineer to manage an effective program to protect its information systems.
The information security engineer develops and applies the tools and approach necessary to protect CBO’s network and computer systems. This position involves a composite of engineering expertise with hands-on incident response and security analysis. The successful candidate will design, configure, and optimize security tools to enhance detection and response capabilities.
This role requires an in-depth understanding of cybersecurity principles and incident response procedures and the ability to work in a fast-paced environment.
Qualifications
Candidates must have 8 to 10 years of information technology experience, with at least 5 years of recent experience in conducting risk analysis, analyzing audit logs, developing a zero trust architecture, identifying system vulnerabilities, and performing threat hunting to proactively identify and mitigate risks. The most important requirement for this position is demonstrated expertise in a variety of security systems and technologies currently in place. Also required is recent experience with cloud security and advanced threat defense, firewall implementation and system penetration technology, malware detection, and network operating systems (the administration of Windows, Linux, or cloud operating systems is a plus). Experience with information technology security concepts, NIST 800-53 controls and requirements, and the MITRE ATT&CK framework is preferred, as is knowledge of the fundamentals of AI and machine learning. Candidates must also possess strong verbal and written communication skills, especially the ability to explain complex technical material clearly to senior staff, information systems professionals, and both technical and nontechnical users.
Specific duties include the following:
- Leading and participating in investigations of security incidents and ensuring rapid containment and remediation.
- Designing, implementing, and fine-tuning security tools and solutions, including Checkpoint EDR, CheckPoint VPN, iBoss, QRadar, and other security platforms.
- Developing and maintaining detection rules, alerts, and dashboards to improve visibility and threat detection.
- Integrating and optimizing threat intelligence feeds to enhance correlation and alerting capabilities.
- Troubleshooting and resolving performance issues with security tools and systems.
- Actively monitoring and managing security events, responding to alerts from SIEM and security tools.
- Aligning engineering and operations activities with federal requirements such as NIST 800-53, FISMA, and FedRAMP.
- Evaluating and recommending enhancements to security tools and processes.
- Staying current with emerging threats, vulnerabilities, and industry best practices to continuously evolve the security environment.
- Keeping track of tasks to ensure they are completed efficiently.
This position follows a hybrid work schedule and requires employees to work in person in the Washington, D.C., office on designated core days. Additional in-office days may be required on the basis of operational needs, such as on-site support of the agency’s infrastructure and data center operations. The position may require periodic travel (approximately once per month) to the agency’s alternate computer facility. Full-time telework is not available for this position.
Additional Information
Candidates must be able to obtain and maintain a top-secret security clearance. A bachelor’s degree—preferably in computer science, information technology, cybersecurity, or a related field—is required. CISSP, CISM, CompTIA Cloud+, Security+, Pen Test, and/or other applicable certifications are desirable.
Salary and Benefits
The salary will be competitive and commensurate with experience, education, and other qualifications. CBO offers excellent benefits and a collegial, respectful work environment.
How to Apply
Please submit a cover letter, a résumé, and contact information for three references at www.cbo.gov/careers. To ensure consideration, apply by November 13, 2026; CBO may stop accepting applications at any time after that date. This position is covered by the Veterans Employment Opportunities Act of 1998 as made applicable to CBO by the Congressional Accountability Act, as amended.
Contact
Kate Green or Annita Gulati, Washington, DC, careers@cbo.gov
The Congressional Budget Office is a small nonpartisan agency that provides independent, objective economic and budget analysis to the Congress. The agency seeks a skilled and experienced information security engineer to manage an effective program to protect its information systems.
The information security engineer develops and applies the tools and approach necessary to protect CBO’s network and computer systems. This position involves a composite of engineering expertise with hands-on incident response and security analysis. The successful candidate will design, configure, and optimize security tools to enhance detection and response capabilities.
This role requires an in-depth understanding of cybersecurity principles and incident response procedures and the ability to work in a fast-paced environment.
Qualifications
Candidates must have 8 to 10 years of information technology experience, with at least 5 years of recent experience in conducting risk analysis, analyzing audit logs, developing a zero trust architecture, identifying system vulnerabilities, and performing threat hunting to proactively identify and mitigate risks. The most important requirement for this position is demonstrated expertise in a variety of security systems and technologies currently in place. Also required is recent experience with cloud security and advanced threat defense, firewall implementation and system penetration technology, malware detection, and network operating systems (the administration of Windows, Linux, or cloud operating systems is a plus). Experience with information technology security concepts, NIST 800-53 controls and requirements, and the MITRE ATT&CK framework is preferred, as is knowledge of the fundamentals of AI and machine learning. Candidates must also possess strong verbal and written communication skills, especially the ability to explain complex technical material clearly to senior staff, information systems professionals, and both technical and nontechnical users.
Specific duties include the following:
- Leading and participating in investigations of security incidents and ensuring rapid containment and remediation.
- Designing, implementing, and fine-tuning security tools and solutions, including Checkpoint EDR, CheckPoint VPN, iBoss, QRadar, and other security platforms.
- Developing and maintaining detection rules, alerts, and dashboards to improve visibility and threat detection.
- Integrating and optimizing threat intelligence feeds to enhance correlation and alerting capabilities.
- Troubleshooting and resolving performance issues with security tools and systems.
- Actively monitoring and managing security events, responding to alerts from SIEM and security tools.
- Aligning engineering and operations activities with federal requirements such as NIST 800-53, FISMA, and FedRAMP.
- Evaluating and recommending enhancements to security tools and processes.
- Staying current with emerging threats, vulnerabilities, and industry best practices to continuously evolve the security environment.
- Keeping track of tasks to ensure they are completed efficiently.
This position follows a hybrid work schedule and requires employees to work in person in the Washington, D.C., office on designated core days. Additional in-office days may be required on the basis of operational needs, such as on-site support of the agency’s infrastructure and data center operations. The position may require periodic travel (approximately once per month) to the agency’s alternate computer facility. Full-time telework is not available for this position.
Additional Information
Candidates must be able to obtain and maintain a top-secret security clearance. A bachelor’s degree—preferably in computer science, information technology, cybersecurity, or a related field—is required. CISSP, CISM, CompTIA Cloud+, Security+, Pen Test, and/or other applicable certifications are desirable.
Salary and Benefits
The salary will be competitive and commensurate with experience, education, and other qualifications. CBO offers excellent benefits and a collegial, respectful work environment.
How to Apply
Please submit a cover letter, a résumé, and contact information for three references at www.cbo.gov/careers. To ensure consideration, apply by November 13, 2026; CBO may stop accepting applications at any time after that date. This position is covered by the Veterans Employment Opportunities Act of 1998 as made applicable to CBO by the Congressional Accountability Act, as amended.
Contact
Kate Green or Annita Gulati, Washington, DC, careers@cbo.gov
Senior Information Security Analyst Jobs by Experience Level
Top Cities Hiring Senior Information Security Analysts
Explore senior information security analyst openings in the cities hiring most right now.
See All 1,290+ Senior Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find JobsSenior Information Security Analyst Job Market
Who's Hiring
- General Dynamics Information Technology30
- Lockheed Martin28
- Booz Allen Hamilton25
- Peraton19
- MANTECH18
Top Industries Hiring
- Consulting & Professional Services
- Education
- Technology & Software
- Healthcare & Medical Services
- Automotive
What Employers Look For
The qualifications that appear most often in senior information security analyst jobs.
- 5 or more years of hands-on information security or cybersecurity experience
- Active CISSP, CISM, or equivalent professional security certification
- Proficiency with SIEM tools such as Splunk, Microsoft Sentinel, or IBM QRadar
- Experience with vulnerability management platforms and penetration testing concepts
- Deep knowledge of at least one compliance framework such as NIST, ISO 27001, or SOC 2
- Bachelor's degree in computer science, information systems, or a related technical field
Tips for Your Senior Information Security Analyst Job Search
Tailor your resume to each posting
Senior information security analyst job descriptions vary widely between industries. Pull the exact tools and frameworks each posting names, such as SIEM platforms, zero-trust architecture, or specific compliance standards, and mirror that language in your resume's experience bullets.
Lead with certifications above your degree
Hiring managers for senior security roles often scan for CISSP, CISM, or GIAC certifications before reading your education section. List active certifications at the top of your resume so they appear before anything else.
Filter openings by compliance environment
Your background in FedRAMP, HIPAA, PCI-DSS, or SOC 2 narrows which roles you will compete best for. Searching by industry vertical, such as healthcare or defense contracting, surfaces openings where your specific compliance experience is a direct match.
Apply early to roles that fit
Migrate Mate lists senior information security analyst openings from across the United States in one place, so you can find roles that match and apply directly to each listing.
Prepare incident response narratives for interviews
Interviewers at the senior level expect detailed war stories, not textbook definitions. Prepare two or three concise narratives describing incidents you investigated or contained, the tools you used, and the measurable outcome you drove.
Negotiate scope before accepting an offer
Before signing, clarify whether the role owns policy writing, vendor assessments, or direct reports. Senior security titles carry very different scopes at different organizations, and misaligned expectations are a common reason analysts leave within a year.
Senior Information Security Analyst Jobs: Frequently Asked Questions
Which companies are hiring the most senior information security analysts?
The companies hiring the most senior information security analysts right now include General Dynamics Information Technology, Lockheed Martin, and Booz Allen Hamilton, with the largest share of openings in Virginia, Maryland, and California, based on current listings on Migrate Mate as of November 2026. Financial services firms, federal contractors, and large healthcare systems consistently maintain the deepest pipelines for this role.
How many senior information security analyst jobs are remote?
About 64% of senior information security analyst openings are fully remote or hybrid as of November 2026, reflecting broad employer acceptance of distributed security teams. Roles focused on cloud security architecture, threat intelligence analysis, and policy development tend to be the most remote-friendly, while positions tied to on-premises infrastructure or classified environments typically require in-person presence.
How do you become a senior information security analyst?
Start by building a foundation in network administration or IT support, then move into a security operations center or junior analyst role to gain hands-on incident response experience. Earn a professional certification such as CISSP or CISM, deepen expertise in one area like cloud security or vulnerability management, and take on projects that demonstrate you can operate independently and influence security strategy.
Can you get hired as a senior information security analyst without much experience?
Candidates with strong adjacent experience in network engineering, systems administration, or IT audit can bridge into senior analyst roles by demonstrating deep technical fluency and at least one professional certification. Building a portfolio of documented projects, contributing to open-source security tooling, or earning a GIAC specialty certification in a high-demand area like cloud or industrial control systems can offset a shorter formal security title history.
What does the senior information security analyst interview process look like?
Most processes begin with a recruiter screen focused on your background and certifications, followed by a technical interview covering threat modeling, incident response scenarios, and tool-specific questions. A final round typically involves a panel with security leadership or a take-home case study where you assess a mock environment or security architecture, then present your findings and recommended controls.
Where can I find and apply to senior information security analyst jobs?
You can find and apply to senior information security analyst jobs on Migrate Mate, which lists current openings from employers across the United States. Find the roles that match your background and apply directly to each listing from the page.
See All 1,290+ Senior Information Security Analyst Jobs
Find roles that match your experience and apply in just a few clicks.
Find Jobs