--- title: 'Senior Cyber Security Analyst at Strategic Growth Partners' canonical: 'https://feeny.ai/job/senior-cyber-security-analyst-strategic-growth-partners-washington-7t5nfydkyxms' type: 'job' last_seen: '2026-11-10' --- # Senior Cyber Security Analyst at Strategic Growth Partners - **Company:** Strategic Growth Partners - **Location:** Washington, DC - **Employment:** full-time - **Work type:** hybrid - **Posted:** 2026-11-03 - **Last confirmed live:** 2026-11-10 - **Apply:** https://jobs.ashbyhq.com/strategic-growth-partners/fdcb7d8b-96a6-4cd9-b327-12787e153c4e ## Job description Strategic Growth Partners provides both operations and strategic support to commercial organizations. Our client is a leading global professional services firm dedicated to helping organizations tackle their most complex business issues, maximize stakeholder value, and deliver sustainable change. Their Corporate Performance Improvement practice is looking for a Senior Cyber Security Analyst to support cyber security assessments, risk remediation, and security program transformation for clients navigating complex threat and regulatory environments, including federal and defense environments. This role requires someone who has hands-on experience investigating, analyzing, and remediating security issues at scale — not just monitoring existing environments. This role supports the cyber and identity workstream leads. Workplace Type: 60% travel. Hybrid. Employment Type: Full-Time Clearance: Active Secret Clearance required; TS/SCI eligibility strongly preferred. Compensation: Hourly rate is DOE. Experience Should Include: - Security assessment support, including governance, risk, and compliance (GRC) frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, CIS Controls, SOC 2, and the DoD Risk Management Framework (RMF), including authorization (ATO) packages. - Threat detection and incident response, including hands-on experience with SIEM/SOAR platforms, log analysis, and incident triage. - Vulnerability management and penetration testing support, including scanning, findings analysis, remediation tracking, and DISA STIG compliance. - Identity and access management (IAM), Zero Trust architecture, and privileged access management (PAM) concepts, including the DoD Zero Trust Strategy and Reference Architecture. - Cloud security posture across AWS, Azure, and/or GCP, including container and workload protection basics, plus DoD cloud impact levels (IL2 to IL6). - Regulatory and compliance exposure, including direct experience with DoD frameworks such as RMF, DISA STIGs, and the DoDI 8500 series. This experience is a strong advantage and preferred for this role; HIPAA, PCI DSS, GLBA, or GDPR experience can substitute. - AI-driven security tooling, including baseline competency with AI-assisted threat detection and analysis tools. Candidates should articulate how AI accelerates security analysis and investigations. - Vendor and third-party risk review, including security questionnaires and control validation. - Supporting security awareness and phishing simulation programs, including content and metrics reporting. - Federal contracting experience. - Identity, credential, and access management (ICAM) for large enterprises, including PKI, CAC and derived credentials, and application onboarding to enterprise identity services. - Exposure to cyber sensing and analytics and to quantum-readiness (post-quantum cryptography) planning. - Continuous monitoring and continuous compliance, including Information Security Continuous Monitoring (NIST SP 800-137), the RMF Monitor step, and continuous Authorization to Operate (cATO), including Plan of Action and Milestones (POA&M) management and risk acceptance. - Automated compliance tooling, including GRC platforms such as eMASS, Xacta, ServiceNow GRC, or Archer; automated evidence collection; SCAP/OSCAL; and continuous scanning and configuration drift detection (e.g., Assured Compliance Assessment Solution (ACAS) and Continuous Diagnostics and Mitigation (CDM)). - Compliance as code and DevSecOps, including policy-as-code and controls embedded in CI/CD pipelines and the DoD Enterprise DevSecOps approach. Responsibilities: - Support cybersecurity assessments, including control gap analysis, evidence gathering, and remediation tracking. - Assist in designing security operations processes, including incident response playbooks and escalation procedures. - Assess Zero Trust and IAM readiness and support development of implementation roadmaps aligned with compliance timelines. - Analyze dependencies between security remediation and broader technology or cloud migration initiatives. - Support ICAM modernization, including onboarding backlog analysis and process streamlining. - Support readouts of in-flight cyber and identity programs, capturing leadership, resources, financials, schedules, and obstacles. - Build and support continuous control-monitoring programs, including control testing cadence, automated evidence collection, and compliance dashboards and KPIs tracking control effectiveness and audit readiness over time. - Support authorization maintenance, including POA&M lifecycle management, significant-change reviews, reauthorization triggers, and ongoing third-party assurance. - Contribute findings and analysis into A&M's broader engagement scope and deliverables. - Support practice development through internal knowledge sharing and content creation. Qualifications: - 4+ years of professional experience in cybersecurity for complex, large enterprises, with consulting or advisory delivery experience a plus. - Demonstrated experience supporting security assessments, incident response engagements, or compliance remediation efforts. - Government or defense experience strongly preferred. Regulated industry experience in financial services or healthcare can substitute, and deep experience in other complex environments may also substitute. - Bachelor's degree required; Security+ (meets the DoD 8140 baseline), CySA+, GSEC, or equivalent certifications strongly preferred; CISSP, CISM, CAP, CISA, or CCSP is a plus. - Comfortable with travel up to 60%. - Active Secret Clearance required; TS/SCI eligibility strongly preferred. - U.S. Citizenship and Residency required. What Distinguishes a Great Candidate: Has hands-on experience analyzing and remediating security issues at scale — not just monitoring existing tooling. Understands the dependency between security readiness and broader technology transformation success. Can work across security, infrastructure, and compliance teams. Brings AI-assisted security analysis into the delivery toolkit as standard practice. Builds compliance that is sustained over time — continuous monitoring and automated evidence rather than point-in-time audits. ## About Strategic Growth Partners ## Company Overview - **One-liner**: Strategic Growth Partners (SGP) is a full-lifecycle growth partner for government contractors, helping small businesses enter the federal marketplace, scale efficiently, and achieve exit through an integrated shared-services model. - **Entity Type**: Private (Privately Held) - **Headquarters**: Silicon Valley, California, United States (with presence in India) - **Founded**: 2025 (following the merger of GovContractPros, Strategic Growth Advisors, Softek Global Services, and Digital Twin Capital) - **Founders**: Not applicable (formed via merger); key leaders include John Cook (CEO), Rajesh Shah (Chairman), Himanshu Shah (COO), Jerrod Mallinger (Chief Strategy Officer), and Pami Shah (CFO) ## Core Business - **Primary industry/industries**: Government contracting advisory, business development, back-office support, mergers & acquisitions, compliance, and Tribal 8(a) program consulting. - **Target customers**: Small businesses, Tribal 8(a) organizations, and other government contractors (B2B, primarily SMBs and mid-market). - **Mission or purpose statement**: “SGP exists to make a difference by giving back. This purpose is woven into everything we do — delivering financial & economic opportunities for our tribal clients and their communities, empowering our trusted partners, and caring for the dedicated individuals that are the heart of SGP.” ## Products & Services - **Business Development**: End-to-end support for winning federal contracts, including market entry strategies, capture management, and proposal support. - **Back Office Support**: Fractional CFO, accounting, HR, payroll, and administrative services tailored to government contractors. - **Mergers & Acquisitions**: Advisory for buying, selling, or merging GovCon businesses, including valuation, due diligence, and integration. - **GovCon Xcelerator & Compliance**: Training, certification assistance (e.g., 8(a), HUBZone, SDVOSB), and ongoing compliance management. - **Tribal 8(a) Advantage**: Specialized ecosystem leveraging SBA Tribal 8(a) benefits to accelerate growth for tribes and their partner businesses. - **Launch / Ignite / Transform / Fortify**: A suite of growth programs covering market entry, rapid scaling, long-term transformation, and operational strengthening. ## Market Standing - **Valuation/Market Cap**: Not disclosed - **Key Metric**: Annual revenue not publicly available; workforce of approximately 29 employees (LinkedIn, 2025) - **Notable Investors/Partners**: Not publicly disclosed; works extensively with tribal nations and federal primes - **Growth Signals**: Rebranded and unified four entities under one name in January 2025; 12 active job postings as of mid-2025; expanding presence in India; LinkedIn follower count of 3,240 ## Competitive Advantages - Deep specialization in the Tribal 8(a) program, a unique regulatory advantage for rapid growth. - Full-lifecycle support from inception to exit, reducing the need for multiple vendors. - Team combines decades of firsthand experience in federal agencies and private sector executive leadership. - Fractional expert model provides small businesses with high-caliber talent without full-time cost. ## Strategic Focus - Continue to expand the Tribal 8(a) ecosystem and forge mutually beneficial partnerships. - Strengthen compliance and back-office services to reduce barriers for small government contractors. - Grow through M&A advisory and strategic partnerships, targeting both new entrants and established firms. - Scale the shared-services model to serve a broader range of socioeconomic small businesses. ## Why Work Here - **Culture highlights**: Mission-driven, selfless leadership, integrity, and a commitment to uplifting tribal communities and partners. Emphasizes teamwork, creativity, and sustainable growth. - **Remote/hybrid/office policy**: Not explicitly stated; headquarters in Silicon Valley, CA, with roles likely requiring some in-office presence. Many positions (e.g., Senior Accountant, Operations Manager) may be hybrid or remote-friendly. - **Notable perks or engineering culture**: Not a traditional tech company; roles span finance, HR, operations, business development, and consulting. Offers the chance to work directly with federal agencies and tribal nations, providing meaningful impact. The careers page lists 12 open positions including Senior Accountant, Operations Manager, Controller, HR Business Partner, and Project Engineer. ## Sources 1. [strategicgrowthpartners.com](https://strategicgrowthpartners.com/) 2. [strategicgrowthpartners.com/about-us](https://strategicgrowthpartners.com/about-us/) 3. [LinkedIn – Strategic Growth Partners](https://www.linkedin.com/company/stratgrowthpartners) 4. [LinkedIn – SGP Recruiting](https://www.linkedin.com/company/sgp-recruiting) 5. [Ashby Careers – Strategic Growth Partners](https://jobs.ashbyhq.com/strategic-growth-partners) ## Other roles at Strategic Growth Partners - [Senior Vice President (SVP), Business Development](https://feeny.ai/job/senior-vice-president-svp-business-development-strategic-growth-partners-remote-27qnfb3g6tyh) - [Telecom Billing Analyst](https://feeny.ai/job/telecom-billing-analyst-strategic-growth-partners-washington-3mrd2jrcdtrr) — Washington, DC - [Senior Data Platform & AI Lead](https://feeny.ai/job/senior-data-platform-ai-lead-strategic-growth-partners-washington-rfs302he5kba) — Washington, DC - [Network Engineering Lead](https://feeny.ai/job/network-engineering-lead-strategic-growth-partners-washington-2wsnmbrd7qhx) — Washington, DC - [Infrastructure Architect (Modernization)](https://feeny.ai/job/infrastructure-architect-modernization-strategic-growth-partners-washington-n2saewgk97tp) — Washington, DC - [FinOps and Technology Business Management (TBM)](https://feeny.ai/job/finops-and-technology-business-management-tbm-strategic-growth-partners-6360q4sh5yfr) — Washington, DC - [SCIF Manager / Physical Security Specialist](https://feeny.ai/job/scif-manager-physical-security-specialist-strategic-growth-partners-doral-g1aajw5g58yb) — Doral, FL - [Chief Business Development Officer (CBDO)](https://feeny.ai/job/chief-business-development-officer-cbdo-strategic-growth-partners-remote-4dfn20znsngn) - [Human Resources Business Partner](https://feeny.ai/job/human-resources-business-partner-strategic-growth-partners-remote-e33we6vdvfqg) - [Contracts Manager](https://feeny.ai/job/contracts-manager-strategic-growth-partners-remote-pn97f27zyq2r)