Jobs and Careers
NA
Junior Security Analyst
NavaUKRemotefull_timeVerifiedPosted 25 Jul 2025
About the role
About NavaNava is a consultancy and public benefit corporation working to make government services simple and effective. Since 2015, federal, state, and local agencies have trusted Nava to help solve highly scrutinized technology modernization challenges.
As a client services company, we guide agencies constrained by legacy systems to a future with sharp user experiences built on secure, reliable, fault-tolerant cloud infrastructure. We bill for our time, offering our expertise and problem-solving approach to help our government partners enhance their digital products and services. People are at the heart of our work, from members of the public who rely on benefit programs to government agency staff. Through human-centered design and modern engineering best practices, we help our government partners understand user needs and deliver on their missions more effectively. This focus gives everyone at Nava the opportunity to do work that is meaningful, impactful, and deeply connected to public good.
About NavaOur mission is to partner with government agencies to deliver digital services and infrastructure that makes programs simple, effective, and accessible to all. As a public benefit corporation, our intent is not to win as much work as we can, but to design a portfolio that makes the highest leverage progress against that mission.
Nava has a role in every important program that serves vulnerable populations and can apply industry-level ecosystem pressure to transform service experiences, program outcomes, and agency adaptability.
Position SummaryThe Junior Security Analyst will play a critical role in Nava PBC’s Information Technology department, supporting the organization’s cybersecurity initiatives. The primary focus will be assisting with deploying security hardware, implementing advanced monitoring systems, and responding to security alerts. This role involves working with tools like CrowdStrike and hardware security keys to enhance the company’s endpoint protection and centralized security monitoring capabilities.
All work will be done in support of Nava’s values: Be Active Stewards, Pursue the Root Cause, Think Long-Term, Build Together, Inclusion is Essential and Progress Takes Work.
As a client services company, we guide agencies constrained by legacy systems to a future with sharp user experiences built on secure, reliable, fault-tolerant cloud infrastructure. We bill for our time, offering our expertise and problem-solving approach to help our government partners enhance their digital products and services. People are at the heart of our work, from members of the public who rely on benefit programs to government agency staff. Through human-centered design and modern engineering best practices, we help our government partners understand user needs and deliver on their missions more effectively. This focus gives everyone at Nava the opportunity to do work that is meaningful, impactful, and deeply connected to public good.
About NavaOur mission is to partner with government agencies to deliver digital services and infrastructure that makes programs simple, effective, and accessible to all. As a public benefit corporation, our intent is not to win as much work as we can, but to design a portfolio that makes the highest leverage progress against that mission.
Nava has a role in every important program that serves vulnerable populations and can apply industry-level ecosystem pressure to transform service experiences, program outcomes, and agency adaptability.
Position SummaryThe Junior Security Analyst will play a critical role in Nava PBC’s Information Technology department, supporting the organization’s cybersecurity initiatives. The primary focus will be assisting with deploying security hardware, implementing advanced monitoring systems, and responding to security alerts. This role involves working with tools like CrowdStrike and hardware security keys to enhance the company’s endpoint protection and centralized security monitoring capabilities.
All work will be done in support of Nava’s values: Be Active Stewards, Pursue the Root Cause, Think Long-Term, Build Together, Inclusion is Essential and Progress Takes Work.
What you'll do
- Incident Monitoring and Response
- Review alerts from the SIEM platform and CrowdStrike modules to identify and triage potential security incidents.
- Escalate critical security events to senior team members for immediate response.
- Contribute to post-incident reviews, documenting incident timelines, and remediation actions.
- Continuously update knowledge of CrowdStrike services and security trends to improve detection capabilities.
- Recommend and improve the overall security position of the organization.
- SIEM Solution Implementation and Support
- Assist in configuring CrowdStrike modules and integrating them with the chosen SIEM platform.
- Validate log sources from endpoints, firewalls, and other security systems, ensuring complete data ingestion.
- Develop and test custom correlation rules to identify threats and anomalies in the organization’s environment.
- Collaborate with Crowdstrike analysts to create and fine-tune alert thresholds to minimize false positives.
- Hardware Security Key Deployment
- Inventory existing endpoint devices and verify compatibility with hardware security key solutions.
- Configure and register hardware security keys with employee accounts using CrowdStrike or other integrated systems.
- Develop training materials and assist in training employees on hardware security key use and troubleshooting through documentation and virtual support.
- Monitor and document the deployment process, identifying and addressing implementation challenges.
- Provide ongoing support and escalate unresolved issues to senior IT staff
- Documentation and Reporting
- Prepare deployment and operational documentation for the YubiKey rollout and SIEM implementation.
- Compile weekly reports on security incidents, deployment progress, and system health metrics.
- Assist in creating user-friendly guides and FAQs for end users regarding security solutions.
- Update and maintain incident response and system configuration documentation.
- Internal Tools Support
- Identify and document all existing API integrations, including data flows, endpoints, and authentication methods.
- Assist in configuring secure API connections using tokens, certificates, or other authentication mechanisms as required.
- Participate in testing and validation of API integrations to ensure functionality and compliance with security requirements.
- Update do
Apply for this role
Generate a tailored application kit with a matched cover letter, interview prep, and CV highlights — in under 60 seconds.
Apply Now →Generate Application KitFree account required — sign up in 30s