Cyber Security Analyst

Position Title: Service Platform Security Analyst

Status: Permanent

Location: Charleston, SC or New Orleans, LA on-site

Modus21, LLC is a Charleston, South Carolina based small business and technology consulting firm specializing in solving complex business problems for global business and government clients. Our philosophy is simple – deliver quality through high performance to our clients; provide value to our clients through the ability to streamline, measure, and improve their business processes via business intelligence and business architecture; and practice professional integrity by being trustworthy and reliable. Our expertise has proven highly successful in helping organizations recognize greater value by aligning their strategy and objectives to technology and execution.

Scope of Work: The Naval Information Warfare Center Atlantic (NIWC LANT) Cloud Computing Innovation, Transformation, and Integration (CLOUD CITI) Division is tasked with providing hosting environments and platforms for Navy applications, as well as other DoD and Homeland Security (HLS) applications utilizing both Component Enterprise Data Centers (CEDCs) and Commercial Cloud Service Providers (CSPs) as hosting platforms.The Security Analyst plays a critical role in supporting the security and compliance posture of the ServiceNow-as-a-Service (SNaaS) platform. As part of the cybersecurity operations team, this position executes day-to-day activities that ensure the platform meets Risk Management Framework (RMF) and governance requirements. The Security Analyst works directly with the Information System Security Officer (ISSO) to collect and maintain evidence, respond to customer security requests, and prepare documentation for audits and control reviews. This position requires exceptional attention to detail, strong documentation skills, and a working understanding of IT security and compliance processes within a DoD environment.

Responsibilities:

Evidence Collection & Documentation

• Gather, organize, and prepare technical evidence (e.g., screenshots, configuration files, logs) to support RMF security controls.
• Assist in drafting and updating key security artifacts, including software/hardware inventories, risk assessments, and CCB briefing materials.
• Maintain version-controlled repositories for all compliance documentation, ensuring readiness for submission and audits.

Service Request Coordination

• Manage intake and tracking of all customer security requests (e.g., admin access, data type changes).
• Conduct completeness checks, coordinate with requestors to obtain required justifications, and summarize for Security Lead review.
• Provide status tracking and communications to customers and stakeholders.

Process & Reporting Support

• Execute procedures for change request submissions, ensuring complete documentation.
• Assist in documenting and tracking incident response activities, POA&M actions, and compliance metrics.
• Support preparation of recurring reports summarizing compliance and request status trends.

Requirements/Experience:

• Bachelor’s degree in Cybersecurity, Engineering, or related area
• Required Certification(s): Security +, CASP, or CISSP
• Preferred Certification(s): CAP (Certified Authorization Professional), ITIL v4 Foundation, ServiceNow Certified System Administrator (CSA)
• 2–4 years of experience in IT, cybersecurity, or compliance support
• Familiarity with Risk Management Framework (RMF) and security control evidence gathering
• Experience with or exposure to IT Service Management (ITSM) tools (ServiceNow preferred)
• Experience working in a cloud environment
• Excellent organizational and documentation skills with a strong attention to detail
• Ability to communicate effectively, both verbally and in writing, with technical and non-technical audiences
• Must be a US citizen
• Must hold or be able to obtain a Department of Defense (DoD) Secret Security Clearance