Business/Systems Analyst

Description

This full-time Information Technology role is for a business systems analyst focused on application security.

The team is helping implement a commercial off-the-shelf financial system for a large, complex Department of Defense program.

The team designs and delivers solutions as the customer's needs change.

You will build application security controls into business workflows, working with product, engineering, and delivery staff at each stage of the SDLC.

You link business requirements with technical security controls, testing how the application behaves from a security standpoint and helping teams plan, set up, verify, and ship changes that satisfy both business and security needs.

You will need to pick up new business processes quickly and work on your own in a demanding environment.

Responsibilities

• Handle user access requests and their paperwork, creating, changing, and disabling accounts following the security controls and process rules already set.
• Keep roles, permissions, and access profiles consistent with role-based access control (RBAC) and separation of duties rules.
• Take part in periodic access reviews and answer audit requests.
• Run functional security tests covering login checks, permission checks, session handling, data handling, and business logic.
• Find security weaknesses in workflows, roles, permissions, and system integrations.
• Confirm that personally identifiable information (PII), financial data, and other regulated data are handled securely in the financial system.
• Work with stakeholders on the enterprise resource planning (ERP) strategy and roadmap.
• Write and carry out security test cases based on business scenarios, and record the results.
• Build security requirements into user stories, acceptance criteria, and functional designs.
• Work with product owners, developers, and QA staff to address security needs early in the SDLC.
• Check functional designs and configuration changes for security risk, and propose fixes.
• Support security reviews before release and join go-live readiness assessments.

Requirements

• At least four years supporting an ERP system as an application security analyst.
• Hands-on experience administering the financial system and its applications.
• Experience supporting cloud-hosted enterprise applications.
• Familiarity with environments governed by regulations or compliance requirements.
• Working knowledge of security, audit, and access control best practices.
• Strong troubleshooting, analysis, and problem-solving skills.
• Strong operational discipline and attention to detail.
• An active Top Secret clearance, eligible for SCI access, and able to pass a counterintelligence (CI) polygraph.
• Able to work on-site in Rosslyn, VA, up to five days a week.

Conditions

Full-time, regular position with up to 10% travel within the continental US.

Minimum clearance to start is TS/SCI.

Pay depends on factors including location, federal contract labor categories and wage rates, prior experience, specific skills, education, and certifications.

The proposed salary range is $86,600 - $181,800.

Benefits

• Flexible time off that lets you take the time you need.
• Healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
• Learning resources to support your career goals.