Cybersecurity and Risk Analyst

Req ID

382081

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.

We are currently seeking a Cybersecurity and Risk Analyst to join our team in Arlington, Virginia (US-VA), United States (US).

Job Summary

The Cybersecurity and Risk Analyst is a critical member of the Vulnerability Assessment and Penetration Testing (VAPT) team, responsible for identifying, analyzing, and mitigating cybersecurity risks across enterprise systems, networks, and applications. This role focuses on evaluating vulnerabilities, integrating threat intelligence, and supporting compliance efforts to ensure confidentiality, integrity, and availability of organizational data and services. The analyst conducts vulnerability assessments, risk evaluations, and red team/threat simulation activities in alignment with federal security frameworks such as NIST SP 800-53, FISMA, and ISO/IEC 27001. They provide actionable reporting to leadership, enabling risk-based decision-making, and collaborate with cross-functional teams to improve security posture, mitigate threats, and ensure adherence to federal directives and policies.

Job Duties

• Vulnerability Assessment Risk Evaluation
• Conduct vulnerability assessments across systems, applications, OT assets, and cloud environments using commercial and open-source tools.
• Analyze, validate, and prioritize vulnerabilities based on severity, exploitability, and business impact.
• Perform risk assessments on systems, applications, and ATO packages using frameworks such as NIST SP 800-30 and ISO 27005.
• Maintain risk registers and communicate risk likelihood and impact to system owners and leadership.
• Threat Analysis Simulation
• Monitor and apply threat intelligence feeds to assess emerging threats and vulnerabilities.
• Participate in red team