Cybersecurity Analyst

Position Summary

At Odyssey, our Cybersecurity Analysts protect our systems, data, and people from evolving cyber threats across cloud and on premises environments. You will monitor and triage alerts from SIEM, EDR, and intrusion detection tools, investigate confirmed threats, and contain incidents by isolating hosts, blocking malicious activity, and escalating as needed.

You will document findings, refine detection rules, and partner with IT, engineering, and compliance teams to identify vulnerabilities and drive remediation. You will also support our GRC program by maintaining System Security Plans (SSPs) and POA&Ms, providing audit and assessment evidence, and supporting continuous monitoring aligned with NIST RMF and FedRAMP requirements.

Responsibilities

Monitors and responds to alerts from tools such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and intrusion detection systems, then triages each alert to determine whether it is a real threat or a false positive and how urgently it needs attention. For genuine threats, they investigate logs, network traffic, and endpoint activity to understand what happened and how far it spread, then contain the threat by isolating hosts, blocking IPs or accounts, and escalating serious incidents.

They document their findings and actions in tickets and incident reports, and they continually refine detection rules to reduce noise and catch new attack techniques. Support NIST SP 800 171, NIST SP 800 53 and CMMC Level 2 requirements and writing control narratives, SSPs, POA&Ms and assessment evidence.

Qualifications

Must be a U.S. citizen Minimum Required Qualifications Clearance: Eligible to obtain and maintain a Secret clearance Education: Bachelor’s degree in information security, information systems, or a related field, or equivalent experience Years of Experience: 3 to 5 years in security compliance, audit, or GRC, including hands on experience with NIST SP 800-171 or NIST SP 800-53 Certifications: CompTIA Security Plus or equivalent Preferred Qualifications Clearance: Active Secret clearance Years of Experience: 5 to 8 years experience supporting a DoD contractor or SOC organization, including CUI environments (i.

e. Microsoft GCC High); prior participation in a C3PAO assessment Certifications: SecurityX Plus, CISA, CRISC, or CISSP Technical Skills Microsoft 365 and Azure compliance tooling (Purview, Compliance Manager, Defender for Cloud, Intune) SIEM, EDR, and vulnerability scanning tools to support continuous monitoring Security awareness and phishing simulation platforms NIST SP 800-171, NIST SP 800-171A, NIST SP 800-53, and CMMC Level 2 requirements CUI and FCI scoping, asset categorization, and assessment boundary definition Writing control narratives, SSPs, POA&Ms, and assessment evidence package Interpersonal Skills Serves as primary contact for assessors, prime contractors, and customers Coordinates evidence across HR, facilities, export compliance, and IT Prepares clear, defensible packages for executive signature Holds control owners accountable for findings through closure Communicates compliance status and risk to technical and nontechnical stakeholders Additional Information Location: Colorado Springs, CO Travel: 5-10% Work Arrangement: Remote or Hybrid (Periodic on location work as needed) #LI-MP1 Company Overview Odyssey is a world-class technical, engineering, and integration company serving the warfighting ecosystem with airborne integration, ISR, C2, and warfighter readiness capabilities.

Odyssey meets the military’s operational needs by integrating layered defense systems from equipment, technology, and services to data, information, and business operations. We streamline defense acquisition and sustainment, engineering the technical battlefield with domain-specific proficiency to ensure lethality. Odyssey is dedicated to excellent contract execution, peak organizational performance, and fostering a workplace built on employee care.

Odyssey is proud to live out our core values of commitment, ambition, and respect in our work and communities through Odyssey. Cares , a philanthropic group focused on giving back through direct donations, an employer match program, and volunteering events. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities Please Note: Final compensation for this position will be determined by various factors such as the Federal Government contract labor categories and contract wage rates, relevant work experience, specific skills and competencies, geographic location, education, and certifications.

This position is filled through continuous recruitment and will remain open until a sufficient pool of applications has been received. Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, Tricare supplement, short-term disability, long-term disability, 401(k) match, flexible spending accounts, health savings accounts, employee assistance program, learning and development benefit, paid time off, and holidays.

Odyssey Benefits Duties include but are not limited to: Monitors and responds to alerts from tools such as SIEM (Security Information and Event Management), EDR (Endpoint Detection and Response), and intrusion detection systems, then triages each alert to determine whether it is a real threat or a false positive and how urgently it needs attention.

For genuine threats, they investigate logs, network traffic, and endpoint activity to understand what happened and how far it spread, then contain the threat by isolating hosts, blocking IPs or accounts, and escalating serious incidents. They document their findings and actions in tickets and incident reports, and they continually refine detection rules to reduce noise and catch new attack techniques.

Support NIST SP 800 171, NIST SP 800 53 and CMMC Level 2 requirements and writing control narratives, SSPs, POA&Ms and assessment evidence. Citizenship: Must be a U.S. citizen Minimum Required Qualifications Clearance: Eligible to obtain and maintain a Secret clearance Education: Bachelor’s degree in information security, information systems, or a related field, or equivalent experience Years of Experience: 3 to 5 years in security compliance, audit, or GRC, including hands on experience with NIST SP 800-171 or NIST SP 800-53 Certifications: CompTIA Security Plus or equivalent Preferred Qualifications Clearance: Active Secret clearance Years of Experience: 5 to 8 years experience supporting a DoD contractor or SOC organization, including CUI environments (i.

e. Microsoft GCC High); prior participation in a C3PAO assessment Certifications: SecurityX Plus, CISA, CRISC, or CISSP Technical Skills Microsoft 365 and Azure compliance tooling (Purview, Compliance Manager, Defender for Cloud, Intune) SIEM, EDR, and vulnerability scanning tools to support continuous monitoring Security awareness and phishing simulation platforms NIST SP 800-171, NIST SP 800-171A, NIST SP 800-53, and CMMC Level 2 requirements CUI and FCI scoping, asset categorization, and assessment boundary definition Writing control narratives, SSPs, POA&Ms, and assessment evidence package Interpersonal Skills Serves as primary contact for assessors, prime contractors, and customers Coordinates evidence across HR, facilities, export compliance, and IT Prepares clear, defensible packages for executive signature Holds control owners accountable for findings through closure Communicates compliance status and risk to technical and nontechnical stakeholders Additional Information Location: Colorado Springs, CO Travel: 5-10% Work Arrangement: Remote or Hybrid (Periodic on location work as needed) #LI-MP1