Information Security Analyst (FedRAMP)

Location: McLean, Virginia; on-site at hirify.global Headquarters

Base salary: $100,000–$200,000 USD per year; discretionary bonus may be awarded.

Company

hirify.global provides AI-powered process automation for large enterprises and government agencies, with a platform focused on enterprise operations, reliability, and scale.

What you will do

• Lead vulnerability assessments across hirify.global infrastructure using industry-standard tools, prioritizing risks by severity and business impact.
• Partner with Engineering to remediate vulnerabilities and misconfigurations within contractual SLAs and FedRAMP requirements.
• Prepare for and support FedRAMP and other compliance audits, including evidence documentation and responses to auditor findings.
• Analyze security data and trends with advanced Excel techniques and vulnerability management platforms, reporting risk posture and remediation progress to leadership.
• Collaborate with Product, Cloud Operations, Compliance, and other stakeholders to implement security practices and reduce the attack surface of the Enterprise-Grade Orchestration platform.

Requirements

• Bachelor’s degree or higher in Computer Science, Cybersecurity, Information Systems, or a related STEM field.
• 2+ years of experience in information security, vulnerability management, or security operations within enterprise technology environments.
• Hands-on experience with vulnerability scanning and management platforms such as Nessus or Qualys, including configuration, scan execution, and results analysis.
• Working knowledge of FedRAMP audit processes, control frameworks, and regulatory compliance requirements in government or highly regulated industries.
• Advanced proficiency in Excel for data manipulation, trend analysis, and security metrics and vulnerability-status reporting.
• Demonstrated ability to support security audits by preparing documentation, responding to findings, and tracking remediation activities to closure.

Nice to have

• Security certifications such as Security+, CEH, CISSP, or GIAC.
• Experience with cloud infrastructure security in AWS, Azure, or Google Cloud Platform environments.
• Ability to automate security workflows using Python, PowerShell, or similar scripting languages.
• Experience with enterprise platforms.

Culture & Benefits

• Onboarding training, department-specific development, mentorship, and the First-Friend program.
• Access to hirify.global University, leadership and skills-based training, and tuition reimbursement.
• Health, dental, vision, life, disability, wellness, flexible spending, and health savings account benefits.
• 401(k) plan with company match, flexible time off, paid parental leave, retirement benefits, and employee stock purchase program.
• Employee Assistance Program, family-forming benefits, referral bonus program, and employee-led affinity groups.