Endictus
Washington, Washington DC
Description The Program Analyst II serves as a Mid-Level Privacy Analyst responsible for supporting the analysis, protection, dissemination, and reporting of privacy-related information to program stakeholders. The position supports the safeguarding of personally identifiable information, or PII, and assists with the effective execution and continuous improvement of privacy program operations. The analyst identifies and documents user and stakeholder requirements, evaluates business processes and supporting platforms, and recommends improvements to workflows, procedures, reporting, and program delivery. The position requires the ability to independently manage assignments, analyze complex information, prepare high-quality reports and briefings, and exercise sound judgment in resolving programmatic and operational issues. This is a customer-facing and stakeholder-facing position. The analyst must be comfortable representing the program during meetings, briefings, conferences, training sessions, and other internal or external engagements. The Program Analyst II may also mentor junior analysts, coordinate assignments, and perform quality assurance reviews of team deliverables. This position requires onsite support five days per week in Washington, DC. Duties and Responsibilities Conduct detailed reviews, analyses, and preparation of privacy-related reports, assessments, correspondence, briefings, and other program documentation. Assist the Site Lead and program leadership in evaluating the effectiveness, efficiency, quality, and timeliness of program delivery. Independently manage assigned workstreams, recurring program activities, and short-lead suspense assignments. Analyze program information, identify trends and potential issues, and develop actionable recommendations for leadership and stakeholders. Develop program strategies, issue papers, briefing materials, background documentation, decision-support materials, and supporting analyses. Identify, document, validate, and communicate user, customer, and stakeholder requirements. Evaluate existing business processes, systems, platforms, and workflows to determine whether they meet operational and stakeholder needs. Develop, document, and improve business processes, standard operating procedures, workflow diagrams, job aids, and internal controls. Support the design, implementation, testing, and maintenance of automated workflows and business applications. Create and maintain program analyses, dashboards, reports, trackers, performance metrics, schedules, and management tools. Apply data analytics techniques to evaluate program performance, identify anomalies and trends, and support data-informed decision-making. Perform quality control and quality assurance reviews of reports, analyses, correspondence, data, and other work products before submission. Review work products for completeness, accuracy, consistency, formatting, timeliness, and compliance with program requirements. Mentor and provide day-to-day guidance to junior analysts, including reviewing work products, sharing best practices, and supporting professional development. Assist with coordinating analyst assignments, deadlines, deliverables, workload priorities, and program schedules. Perform customer success and stakeholder engagement activities to ensure stakeholders understand program reports, findings, processes, available services, and recommended actions. Prepare and deliver briefings, training, demonstrations, and program updates to customers, stakeholders, and senior leadership. Professionally represent the program at conferences, workshops, meetings, working groups, outreach events, and other stakeholder engagements. Support conference planning, exhibit coordination, presentations, stakeholder engagement, and post-event follow-up activities. Conduct open-source research and analysis, as required, to support privacy-related reviews, investigations, reporting, and program objectives. Support the entry, validation, maintenance, and analysis of program information within databases, case management systems, workflow tools, and other software platforms. Document, organize, prioritize, and track tasks, reports, data requests, memoranda, formal correspondence, action items, and other program documentation. Maintain program performance metrics and conduct reviews for errors, missing information, incorrect data formats, timeliness, schedule compliance, and submission requirements. Prepare materials for conferences, meetings, appointments, briefings, telephone calls, and stakeholder engagements. Draft, review, edit, and proofread memoranda, letters, standard operating procedures, reports, presentations, training materials, and executive correspondence. Provide project management, administrative, and coordination support for program initiatives, special projects, and recurring activities. Assist with administrative requirements, including training records, building access requests, calendars, meeting coordination, and program events. Perform other duties consistent with the responsibilities of a mid-level privacy and program analyst. Requirements Required Qualifications Demonstrated experience handling, safeguarding, reviewing, analyzing, or managing personally identifiable information. Knowledge of confidentiality, privacy, data protection, and information-handling requirements. Excellent analytical, critical-thinking, and problem-solving skills. Ability to independently evaluate information, identify issues, and develop practical recommendations. Excellent verbal and written communication skills. Demonstrated experience drafting and editing reports, memoranda, correspondence, briefings, procedures, and other professional work products. Experience developing, documenting, implementing, or improving business processes, workflows, and standard operating procedures. Experience performing quality assurance, quality control, proofreading, or editorial review. Ability to manage multiple assignments, priorities, deadlines, and short-notice requests with limited supervision. Ability to complete assignments accurately and on time while following established policies, procedures, and general guidance. Ability to communicate analytical, technical, privacy-related, or programmatic information to technical and nontechnical stakeholders. Ability to prepare and provide briefings and training to senior leaders, customers, and program stakeholders. Ability to professionally represent the program at conferences, meetings, workshops, working groups, and other stakeholder-facing events. Ability to mentor, guide, and support junior staff. Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams. Willingness and ability to travel frequently. Must be a U.S. Citizen. Must be eligible to obtain and maintain a federal security clearance. Preferred Qualifications Experience supporting a federal government privacy, data protection, compliance, records management, investigative, or information management program. Open-source intelligence or OSINT research and analysis experience. Experience conducting open-source investigations and preparing analytical reports. Experience with data analytics, data visualization, performance measurement, dashboards, or trend analysis. Proficiency with Microsoft Power Apps, Power Automate, Power BI, SharePoint, or related Microsoft Power Platform applications. Experience developing or supporting automated workflows, low-code applications, case management systems, or business process management tools. Experience writing and implementing standard operating procedures, process guides, job aids, workflow documentation, and internal controls. Experience preparing and presenting conference materials, executive briefings, training, correspondence, and meeting materials. Experience working directly with senior government officials, executives, customers, or other senior stakeholders. Experience mentoring junior analysts or coordinating the work of a small team. Experience in both government and private-sector work environments. Current active security clearance, with eligibility to obtain a Top Secret clearance. Relevant privacy, information management, project management, analytics, intelligence, or compliance certification. Education and Experience Bachelor's degree or higher in Business Administration, Computer Science, Data Analytics, Information Technology, Law, Public Administration, Criminal Justice, Intelligence Studies, or a related discipline. Three or more years of relevant professional experience as a privacy analyst, program analyst, management analyst, intelligence analyst, data analyst, investigative analyst, or in a similar role. A master's degree or directly relevant graduate-level education may substitute for a portion of the professional experience requirement. Additional directly relevant professional experience may be considered in place of a portion of the education requirement, subject to applicable contract requirements. Core Competencies Privacy and PII safeguarding Program and operational analysis Analytical research and report writing Data analysis and performance measurement . click apply for full job details
Description The Program Analyst II serves as a Mid-Level Privacy Analyst responsible for supporting the analysis, protection, dissemination, and reporting of privacy-related information to program stakeholders. The position supports the safeguarding of personally identifiable information, or PII, and assists with the effective execution and continuous improvement of privacy program operations. The analyst identifies and documents user and stakeholder requirements, evaluates business processes and supporting platforms, and recommends improvements to workflows, procedures, reporting, and program delivery. The position requires the ability to independently manage assignments, analyze complex information, prepare high-quality reports and briefings, and exercise sound judgment in resolving programmatic and operational issues. This is a customer-facing and stakeholder-facing position. The analyst must be comfortable representing the program during meetings, briefings, conferences, training sessions, and other internal or external engagements. The Program Analyst II may also mentor junior analysts, coordinate assignments, and perform quality assurance reviews of team deliverables. This position requires onsite support five days per week in Washington, DC. Duties and Responsibilities Conduct detailed reviews, analyses, and preparation of privacy-related reports, assessments, correspondence, briefings, and other program documentation. Assist the Site Lead and program leadership in evaluating the effectiveness, efficiency, quality, and timeliness of program delivery. Independently manage assigned workstreams, recurring program activities, and short-lead suspense assignments. Analyze program information, identify trends and potential issues, and develop actionable recommendations for leadership and stakeholders. Develop program strategies, issue papers, briefing materials, background documentation, decision-support materials, and supporting analyses. Identify, document, validate, and communicate user, customer, and stakeholder requirements. Evaluate existing business processes, systems, platforms, and workflows to determine whether they meet operational and stakeholder needs. Develop, document, and improve business processes, standard operating procedures, workflow diagrams, job aids, and internal controls. Support the design, implementation, testing, and maintenance of automated workflows and business applications. Create and maintain program analyses, dashboards, reports, trackers, performance metrics, schedules, and management tools. Apply data analytics techniques to evaluate program performance, identify anomalies and trends, and support data-informed decision-making. Perform quality control and quality assurance reviews of reports, analyses, correspondence, data, and other work products before submission. Review work products for completeness, accuracy, consistency, formatting, timeliness, and compliance with program requirements. Mentor and provide day-to-day guidance to junior analysts, including reviewing work products, sharing best practices, and supporting professional development. Assist with coordinating analyst assignments, deadlines, deliverables, workload priorities, and program schedules. Perform customer success and stakeholder engagement activities to ensure stakeholders understand program reports, findings, processes, available services, and recommended actions. Prepare and deliver briefings, training, demonstrations, and program updates to customers, stakeholders, and senior leadership. Professionally represent the program at conferences, workshops, meetings, working groups, outreach events, and other stakeholder engagements. Support conference planning, exhibit coordination, presentations, stakeholder engagement, and post-event follow-up activities. Conduct open-source research and analysis, as required, to support privacy-related reviews, investigations, reporting, and program objectives. Support the entry, validation, maintenance, and analysis of program information within databases, case management systems, workflow tools, and other software platforms. Document, organize, prioritize, and track tasks, reports, data requests, memoranda, formal correspondence, action items, and other program documentation. Maintain program performance metrics and conduct reviews for errors, missing information, incorrect data formats, timeliness, schedule compliance, and submission requirements. Prepare materials for conferences, meetings, appointments, briefings, telephone calls, and stakeholder engagements. Draft, review, edit, and proofread memoranda, letters, standard operating procedures, reports, presentations, training materials, and executive correspondence. Provide project management, administrative, and coordination support for program initiatives, special projects, and recurring activities. Assist with administrative requirements, including training records, building access requests, calendars, meeting coordination, and program events. Perform other duties consistent with the responsibilities of a mid-level privacy and program analyst. Requirements Required Qualifications Demonstrated experience handling, safeguarding, reviewing, analyzing, or managing personally identifiable information. Knowledge of confidentiality, privacy, data protection, and information-handling requirements. Excellent analytical, critical-thinking, and problem-solving skills. Ability to independently evaluate information, identify issues, and develop practical recommendations. Excellent verbal and written communication skills. Demonstrated experience drafting and editing reports, memoranda, correspondence, briefings, procedures, and other professional work products. Experience developing, documenting, implementing, or improving business processes, workflows, and standard operating procedures. Experience performing quality assurance, quality control, proofreading, or editorial review. Ability to manage multiple assignments, priorities, deadlines, and short-notice requests with limited supervision. Ability to complete assignments accurately and on time while following established policies, procedures, and general guidance. Ability to communicate analytical, technical, privacy-related, or programmatic information to technical and nontechnical stakeholders. Ability to prepare and provide briefings and training to senior leaders, customers, and program stakeholders. Ability to professionally represent the program at conferences, meetings, workshops, working groups, and other stakeholder-facing events. Ability to mentor, guide, and support junior staff. Proficiency with Microsoft Office applications, including Word, Excel, PowerPoint, Outlook, and Teams. Willingness and ability to travel frequently. Must be a U.S. Citizen. Must be eligible to obtain and maintain a federal security clearance. Preferred Qualifications Experience supporting a federal government privacy, data protection, compliance, records management, investigative, or information management program. Open-source intelligence or OSINT research and analysis experience. Experience conducting open-source investigations and preparing analytical reports. Experience with data analytics, data visualization, performance measurement, dashboards, or trend analysis. Proficiency with Microsoft Power Apps, Power Automate, Power BI, SharePoint, or related Microsoft Power Platform applications. Experience developing or supporting automated workflows, low-code applications, case management systems, or business process management tools. Experience writing and implementing standard operating procedures, process guides, job aids, workflow documentation, and internal controls. Experience preparing and presenting conference materials, executive briefings, training, correspondence, and meeting materials. Experience working directly with senior government officials, executives, customers, or other senior stakeholders. Experience mentoring junior analysts or coordinating the work of a small team. Experience in both government and private-sector work environments. Current active security clearance, with eligibility to obtain a Top Secret clearance. Relevant privacy, information management, project management, analytics, intelligence, or compliance certification. Education and Experience Bachelor's degree or higher in Business Administration, Computer Science, Data Analytics, Information Technology, Law, Public Administration, Criminal Justice, Intelligence Studies, or a related discipline. Three or more years of relevant professional experience as a privacy analyst, program analyst, management analyst, intelligence analyst, data analyst, investigative analyst, or in a similar role. A master's degree or directly relevant graduate-level education may substitute for a portion of the professional experience requirement. Additional directly relevant professional experience may be considered in place of a portion of the education requirement, subject to applicable contract requirements. Core Competencies Privacy and PII safeguarding Program and operational analysis Analytical research and report writing Data analysis and performance measurement . click apply for full job details
Dragos
Remote, Oregon
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. About the Role : Dragos is seeking a highly skilled Senior Software Engineer to join our Vulnerability Analysis content team. The ideal candidate will play a pivotal role in accelerating the delivery of vulnerability findings to our customers through robust automation and tooling. Collaborating closely with our team of vulnerability analysts, this person will be responsible for designing, building, and maintaining the CI/CD pipeline that powers our analysis review and deployment workflows. This critical function supports the rapid and accurate dissemination of vulnerability intelligence to protect operational technology (OT) environments. Responsibilities : Design, build, and maintain CI/CD pipelines for content review, validation, and deployment, including vulnerability analysis, asset catalogs, and report generation. Develop and improve analyst workflows and tooling to streamline the vulnerability analysis and publication process. Partner with vulnerability analysts to understand pain points and automate repetitive tasks in the content creation lifecycle. Implement automated testing frameworks, including unit, integration, and end-to-end tests for vulnerability content validation. Implement and maintain data validation, schema enforcement, and content quality assurance automation to ensure accuracy and consistency of vulnerability findings. Collaborate with other engineering teams to integrate vulnerability content delivery into broader Dragos systems. Mentor junior engineers and guide best practices. Continuously improve deployment velocity and content quality. Qualifications : 5+ years in a production software development environment, with 2+ years of experience with Python development. 1+ years of experience designing and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, GitHub Actions, or similar. Experience with containerization technologies (Docker, Kubernetes) and infrastructure-as-code (Terraform, Ansible, or similar). Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native services. Demonstrated ability to design and build developer tooling and workflow automation that improves team productivity. Proficiency with git workflows, branching strategies, and code review processes at scale. Solid understanding of Linux systems administration and command-line tooling. Strong communication skills with the ability to translate technical concepts for non-technical stakeholders. Experience working in a security-focused environment or with security content delivery pipelines is a plus. ICS/OT knowledge and experience is nice to have. Rust knowledge and experience is nice to have. Experience with observability tools (Prometheus, Grafana, ELK stack, or similar) is helpful. Background in vulnerability management, threat intelligence, or security operations is a bonus. Compensation : Salary: $165,000 Competitive Equity Package Comprehensive Benefits Plan Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.
At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are immediately at risk. We are the global leader in xOT cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand what is at stake. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place. About the Role : Dragos is seeking a highly skilled Senior Software Engineer to join our Vulnerability Analysis content team. The ideal candidate will play a pivotal role in accelerating the delivery of vulnerability findings to our customers through robust automation and tooling. Collaborating closely with our team of vulnerability analysts, this person will be responsible for designing, building, and maintaining the CI/CD pipeline that powers our analysis review and deployment workflows. This critical function supports the rapid and accurate dissemination of vulnerability intelligence to protect operational technology (OT) environments. Responsibilities : Design, build, and maintain CI/CD pipelines for content review, validation, and deployment, including vulnerability analysis, asset catalogs, and report generation. Develop and improve analyst workflows and tooling to streamline the vulnerability analysis and publication process. Partner with vulnerability analysts to understand pain points and automate repetitive tasks in the content creation lifecycle. Implement automated testing frameworks, including unit, integration, and end-to-end tests for vulnerability content validation. Implement and maintain data validation, schema enforcement, and content quality assurance automation to ensure accuracy and consistency of vulnerability findings. Collaborate with other engineering teams to integrate vulnerability content delivery into broader Dragos systems. Mentor junior engineers and guide best practices. Continuously improve deployment velocity and content quality. Qualifications : 5+ years in a production software development environment, with 2+ years of experience with Python development. 1+ years of experience designing and maintaining CI/CD pipelines using tools such as Jenkins, GitLab CI, GitHub Actions, or similar. Experience with containerization technologies (Docker, Kubernetes) and infrastructure-as-code (Terraform, Ansible, or similar). Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native services. Demonstrated ability to design and build developer tooling and workflow automation that improves team productivity. Proficiency with git workflows, branching strategies, and code review processes at scale. Solid understanding of Linux systems administration and command-line tooling. Strong communication skills with the ability to translate technical concepts for non-technical stakeholders. Experience working in a security-focused environment or with security content delivery pipelines is a plus. ICS/OT knowledge and experience is nice to have. Rust knowledge and experience is nice to have. Experience with observability tools (Prometheus, Grafana, ELK stack, or similar) is helpful. Background in vulnerability management, threat intelligence, or security operations is a bonus. Compensation : Salary: $165,000 Competitive Equity Package Comprehensive Benefits Plan Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.