Cybersecurity Security Analyst - SecOps Support (Contracted/Temporary)

This is a 4-month contracted/temporary position.

About the Organization

The Commonwealth of Massachusetts Executive Office of Economic Development (EOED) supports economic growth by fostering business development, infrastructure investment, industry advancement, and consumer confidence. EOED operates through nine state agencies and five quasi-public agencies (QPAs) that deliver essential public programs and services.  

EOED supports economic growth across Massachusetts through its network of agencies and partnerships, promoting business innovation, infrastructure investment, and consumer protection. The office embraces a culture of equity, inclusion, and collaboration—values that inform all aspects of its work.

The Executive Office of Economic Development is committed to creating and sustaining a work culture that is welcoming, inclusive, and mutually respectful to all its employees regardless of race, color, age, creed, religion, national origin, ethnicity, sex, gender identity or expression, sexual orientation, genetic information, veteran or disability status. We strive to reflect diversity in all facets and levels of our agency. The Executive Office of Economic Development values inclusiveness and diversity within their employee and management teams. Within our community we strive to create and maintain working and learning environments that are inclusive, equitable, and welcoming.

The Executive Office of Economic Development is committed to ensuring a diverse and inclusive workplace where all employees feel respected, valued, and empowered to maximize their skills and talents to serve our citizens.

About the Role

The Executive Office of Economic Development is seeking a junior-level Cybersecurity Security Analyst (Contractor) to support day-to-day Security Operations (SecOps), governance, risk, and compliance activities. This role will provide hands-on operational support to EOED’s cybersecurity program under the direction of the EOED Chief Information Security Officer (CISO), and in coordination with the Commonwealth’s Executive Office of Technology Services and Security (EOTSS).

The contractor will work in a fast-paced public-sector environment supporting EOED’s mission-critical systems, data, and users, with a strong emphasis on vulnerability management, identity and access controls, and compliance execution. 

Duties and Responsibilities

Security Operations & Vulnerability Management: Support EOED’s vulnerability management program, including:

• Reviewing vulnerability scan results.
• Tracking remediation activities.
• Coordinating with IT and application owners on remediation status.
• Assist with vulnerability tooling workflows (e.g., Tenable, Veracode), reporting, and documentation, including updating the Application Inventory records with security metadata, and coordinating stakeholder input.
• Validate remediation actions and update tracking systems accordingly.

Governance, Risk & Compliance (GRC): Provide hands-on support for GRC and compliance activities, including:

• Evidence collection and documentation.
• Control mapping and compliance tracking.
• Support for audits, assessments, and internal reviews.
• Assist with maintaining compliance artifacts aligned with:
  • NIST Cybersecurity Framework (CSF)
  • NIST Risk Management Framework (RMF)
  • Commonwealth of Massachusetts / EOTSS Enterprise Information Security Policies
• Support tracking of risks, findings, and remediation plans in ServiceNow, Jira, and other EOED-approved systems.

Identity & Access Management (IAM): 

• Assist with