Business/Systems Analyst

About This Role

This role is for a professional, customer-oriented Functional Application Security Analyst who can quickly learn new business processes, troubleshoot system functionality, and work independently in a fast-paced, challenging environment. The team supports the implementation of Momentum, a Commercial-Off-the-Shelf (COTS) financial system, for a large, complex Department of Defense project. You will help integrate application security controls into business workflows and partner with product, engineering, and delivery teams throughout the software development life cycle (SDLC).

Responsibilities

• Manage user access requests, supporting documentation, and related processes
• Provision, modify, and deactivate user accounts in accordance with established cybersecurity controls and procedures
• Maintain roles, permissions, and access profiles in alignment with role-based access control (RBAC) and separation of duties requirements
• Support periodic access reviews and respond to audit requests
• Perform functional application security testing to validate authentication, authorization, session management, data handling, and business logic controls
• Identify security gaps in application workflows, user roles, permissions, and integrations
• Validate the secure handling of personally identifiable information (PII), financial information, and other regulated data within Momentum
• Collaborate with stakeholders to develop and refine the enterprise resource planning (ERP) strategy and roadmap
• Develop, execute, and document security test cases aligned with business scenarios
• Incorporate security requirements into user stories, acceptance criteria, and functional designs
• Partner with product owners, developers, and quality assurance teams to address security requirements early in the software development life cycle
• Review functional designs and configuration changes to identify security risks and recommend corrective actions
• Support security reviews before release and participate in go-live readiness assessments

Requirements

• Four or more years of experience supporting Momentum ERP as an Application Security Analyst
• Experience with Momentum system and application administration
• Experience supporting cloud-hosted enterprise applications
• Familiarity with regulated or compliance-driven environments
• Working knowledge of security, audit, and access control best practices
• Strong troubleshooting, analytical, and problem-solving skills
• Strong operational discipline and attention to detail
• Active Top Secret security clearance with eligibility for SCI access and a counterintelligence (CI) polygraph
• Willingness to work on-site in Rosslyn, VA, up to five days per week