Technical Business Analyst

Everforth ECS is seeking a Technical Business Analyst to work in a HYBRID setting out of our Arlington, VA office.  

Job Summary 

ECS is seeking talented professionals to join our growing team supporting the Cybersecurity and Infrastructure Security Agency's (CISA) Technical Engineering and Support Services (TESS) program. TESS is CISA's integrated, capability-driven mission ecosystem designed to scale across mission and delivery spaces within the DHS/CISA/Cybersecurity Division.  This is a hybrid position in our Arlington, VA office.   

We are seeking a detail-oriented and strategic Technical Business Analyst to serve as the bridge between cybersecurity teams and business stakeholders. This role is responsible for translating requirements into design-ready specifications. 

The ideal candidate will possess a blend of business analysis expertise, cybersecurity knowledge, stakeholder management skills, and experience translating technical requirements into business-focused solutions. 

Key Responsibilities 

Business Analysis & Requirements Gathering 

• Partner with cybersecurity, IT, and business stakeholders to identify, document, and prioritize business and security requirements. 

• Facilitate workshops, interviews, and stakeholder meetings to understand business needs and cybersecurity objectives. 

• Develop business requirements documents (BRDs), traceability artifacts, functional requirements, user stories, process flows, and use cases. 

• Translate complex technical concepts into clear business language for non-technical audiences. 

Cybersecurity Program Support 

• Support cybersecurity initiatives including security operations, governance, risk management, compliance, identity management, vulnerability management, and incident response. 

• Assist in the planning, execution, and tracking of cybersecurity projects and strategic initiatives. 

• Monitor program milestones, risks, issues, dependencies, and deliverables. 

• Ensure cybersecurity solutions align with business goals and regulatory requirements. 

Process Improvement 

• Evaluate existing cybersecurity processes and identify opportunities for optimization and automation. 

• Analyze security workflows and recommend improvements to increase operational efficiency. 

• Assist in developing governance processes, metrics, and reporting capabilities. 

• Create and maintain process documentation and standard operating procedures (SOPs). 

Data Analysis & Reporting 

• Gather and analyze security-related metrics and key performance indicators (KPIs). 

• Develop dashboards, reports, and executive summaries for leadership review. 

• Track cybersecurity program performance and communicate progress to stakeholders. 

• Support risk reporting, compliance reporting, and operational metrics analysis. 

Stakeholder Engagement 

• Act as a liaison between technical cybersecurity teams and business stakeholders. 

• Facilitate communication across project teams to ensure successful delivery of cybersecurity initiatives. 

• Support change management and user adoption efforts for new security processes and technologies. 

• Present findings, recommendations, and project updates to management and leadership. 

Salary Range: $125,000 - $145,000 

General Description of Benefits 

• Bachelor's degree in business administration, Information Systems, Cybersecurity, Computer Science, OR equivalent experience in a related field. 

• U.S. citizen with an ability to obtain and maintain a Public Trust Suitability 

• 8+ years of experience as a Business Analyst, Cybersecurity Analyst, IT Analyst, or related role. 

• Understanding cybersecurity concepts, risk management, and information security controls. 

• Experience gathering and documenting business and technical requirements. 

• Strong analytical, organizational, and problem-solving skills. 

• Experience creating process maps, workflows, business cases, and requirements for documentation. 

• Excellent written, verbal, and presentation communication skills. 

• Ability to work effectively with both technical and non-technical stakeholders.