Information Assurance Support Analyst (Cybersecurity)

Location: Rockville, Maryland, United States; 10% occasional domestic travel

Company

hirify.global provides technical support for the NRC-CPSS Contract and its Civilian Division.

What you will do

• Support FISMA systems through Security Assessment and Authorization across the NIST Risk Management Framework.
• Assess confidentiality, integrity, and availability impacts and determine FIPS 199 security categorizations.
• Develop and maintain security documentation, including system security plans, risk assessments, contingency plans, incident response plans, and vulnerability assessment reports.
• Analyze risks from security control assessments and continuous monitoring, then recommend mitigation and remediation actions.
• Perform vulnerability scans and configuration compliance checks against DISA STIGs and CIS Benchmarks.
• Review FedRAMP packages and continuous monitoring deliverables, and create and manage Plans of Action and Milestones.

Requirements

• US citizenship required.
• Secret Clearance and ability to obtain an NRC Security Clearance required.
• Bachelor’s degree or five additional years of equivalent experience.
• Six years of IT experience, including four years specializing in information assurance.
• At least one relevant certification required: CompTIA Security+, CISSP, CISA, GIAC GSEC, GIAC GSNA, GIAC GPEN, CEH, CAP, CASP+, CRISC, or CCSK.
• Strong communication, attention to detail, prioritization, and collaboration skills.

Nice to have

• Experience with Tenable Security Center, FedRAMP authorization packages, cloud security, technical architecture reviews, and shared responsibility models.
• Knowledge of Azure, AWS, virtualization, networking, web services, firewalls, VPNs, databases, intrusion prevention, and anti-malware tools.
• Familiarity with PowerShell, VBA, and AI chat tools for productivity.

Culture & Benefits

• Full-time position with collaboration across system administrators, ISSOs, Authorizing Officials, cloud service providers, and other stakeholders.
• Occasional domestic travel of approximately 10%.
• Work includes individual responsibilities as well as project and stakeholder meetings.