Information Security Analyst Lead (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Information Security Analyst Lead (Cybersecurity): Providing security support services and ensuring security control compliance for federal government systems with an accent on continuous monitoring and ATO authorization. Focus on coordinating vulnerability remediation, implementing security tools, and ensuring compliance with NIST frameworks.
Location: Primarily remote, but must be able to report on-site to Fort Meade, MD when requested. Work hours: 9:00 AM to 5:00 PM Eastern Time.
Salary: $112,800 - $165,400
Company
Digital services company partnering with US government agencies to create intuitive products for federal agencies.
What you will do
- Provide security guidance throughout the system development lifecycle to product teams and engineering staff.
- Facilitate the implementation and maintenance of security tools and controls to ensure a successful Authorization to Operate (ATO).
- Develop and update security artifacts including System Security Plans and Incident Response Plans.
- Analyze security scan results and manage the remediation of vulnerabilities via Plans of Action and Milestones (POA&Ms).
- Conduct vulnerability assessments and monitor networks, databases, and web assets for potential breaches.
- Lead the implementation of security system enhancements and respond to high-level security incidents.
Requirements
- Minimum of 8+ years of related experience.
- Current Security+ certification is required.
- Experience with Cloud security, IaC, AI/ML, and CI/CD pipelines.
- Working knowledge of AWS or Azure security tools.
- Proficiency with NIST Risk Management Framework, NIST 800-53 rev5, and NIST 800-171.
- Knowledge of hardening standards such as DISA STIG and CIS.
Nice to have
- Federal Government contracting experience or ISSO experience for the DoD.
- Advanced certifications like CISSP, CEH, or GIAC.
- Experience with SIEM systems such as Splunk.
Culture & Benefits
- Comprehensive medical, dental, and vision coverage.
- 401(k) retirement benefits.
- Paid time off and paid holidays.
- Life and disability insurance.
- Wellness and employee support programs.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →