Security Analyst

Imagineeer is a fast-growing SBA 8(a) Small Disadvantaged Business headquartered in Arlington, VA, delivering federal AI modernization across health, defense, homeland security, and transportation. We design, test, and deploy secure, AI-ready systems that move agencies from pilots to production without breaking governance, compliance, or mission continuity. Our Mission Studio model creates shared environments where policy, data, security, and operations come together. We are capability-driven and competitive by design, not program-dependent. Our leadership has operated inside the federal systems we now transform, bringing institutional knowledge that accelerates delivery and reduces risk. If real delivery motivates you more than slides, and you want your work to compound across programs and agencies, Imagineeer is growing and we are building the team to match.

About the role

Imagineeer is seeking a Security Analyst to support security assessment and authorization of commercial acquisition tools piloted by a federal civilian department. You will be the supporting role for the security and authorization readiness checkpoint, handling control testing and authorization documentation.

Key Responsibilities

• Develop security requirements with the Security Assessor/ATO Lead.
• Review vendor FedRAMP packages and document inherited and customer-responsibility controls.
• Perform control and vulnerability testing in the contractor sandbox.
• Prepare authorization documentation for each piloted tool.
• Work with the contractor-provided sandbox in a FedRAMP-authorized cloud region, with mock AMS/PRISM, FPDS-NG, and SAM.gov interfaces and synthetic data
• Vulnerability scanning and configuration compliance tools
• Vendor FedRAMP authorization packages

Qualifications and Skills

• Bachelor's degree in cybersecurity, information systems, or a related field.
• 7 or more years of information security experience, including federal assessment and authorization work.
• Working knowledge of NIST SP 800-53, the RMF, and FedRAMP documentation.
• Experience with vulnerability scanning and control testing tools.
• Security+, CGRC (formerly CAP), CISSP, or equivalent certification.
• Ability to pass the client's contractor security vetting and obtain and maintain a PIV credential; this role may carry a higher position risk designation.

Desired Skills and Competencies

• Experience supporting a FedRAMP 3PAO.
• Experience assessing SaaS integrations and API security.
• Familiarity with CUI safeguarding requirements and NIST SP 800-171.

Additional Information

Employment for this position is contingent upon the candidate being a United States citizen and having the ability to successfully obtain and maintain a Public Trust clearance, in accordance with applicable federal regulations. We use AI to review resumes. All hiring decisions will be made in compliance with applicable federal, state, and local laws and regulations

Equal Opportunity Employer

We are an Equal Opportunity Employer and do not discriminate in employment decisions on the basis of race, color, religion, sex (including pregnancy, sexual orientation, or gender identity), national origin, age, disability, genetic information, veteran status, or any other status protected by applicable federal, state, or local laws. All employment decisions are based on business needs, job requirements, and individual qualifications.