Cybersecurity Analyst, Information Systems Security

🕒 vor 1 Monat

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $115.000 - $145.000 / Jahr

⏰ Vollzeit

🟡 Mittelstufe

🟠 Senior

🔐 IT-Sicherheitsanalyst

👻 Geisterscore 10%

Was es bedeutet: wie wahrscheinlich diese Stelle offen bleibt, ohne dass aktiv eingestellt wird.So liest du es: 60 % oder höher heißt, wir halten das für einen Geisterjob. Niedrigere Werte sind weniger bedenklich.Wie wir werten: Dauer offen, Neuveröffentlichungen, offene Stellen vs Teamgröße, wie schnell Stellen geschlossen werden, und ob ein Gehalt angegeben ist.Hinweis: eine Schätzung aus öffentlichen Daten, kein Urteil über das Unternehmen. Echte Stellen können hoch punkten, nutze es also als Hinweis, nicht als Fakt.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

SHR Consulting Group

WebsiteLinkedInAlle Stellen

51 - 200 Mitarbeiter

💼 Beratung

🎖️ Verteidigung

🏥 Gesundheitswesen

Consulting • Defense • Healthcare

Die SHR Consulting Group ist ein IT-Beratungsunternehmen, das innovative Informationstechnologiedienstleistungen anbietet, um die sich wandelnden Herausforderungen von IT-Kunden im öffentlichen Sektor zu bewältigen. Mit einem Fokus auf Modernisierung bieten sie eine Reihe von Dienstleistungen an, darunter Cloud-Services, Cybersicherheit, Datenanalyse und Softwareentwicklung. SHR verpflichtet sich, erstklassigen Service zu liefern, unterstützt durch Branchenzertifizierungen und einem starken Fokus auf die berufliche Weiterentwicklung ihrer Mitarbeiter.

Beschreibung

• Support implementation and ongoing execution of the NIST Risk Management Framework and DHS/FEMA security policies and procedures • Develop, maintain, and update System Security Plans, Security Assessment Reports, Plans of Action and Milestones, Contingency Plans, Configuration Management Plans, and related authorization artifacts • Support Assessment and Authorization activities for FEMA systems, applications, and cloud environments • Maintain security documentation and evidence in applicable DHS/FEMA governance, risk, and compliance systems • Conduct and document security control assessments and support implementation and validation of NIST SP 800-53 controls • Track cybersecurity findings, vulnerabilities, POA&Ms, remediation activities, and risk acceptance through closure • Review vulnerability scanning and security monitoring results from Tenable/Nessus, CrowdStrike, Elastic, and other approved security platforms • Coordinate with system administrators, cloud engineers, DevSecOps teams, application teams, and system owners to remediate vulnerabilities and configuration deficiencies • Support continuous monitoring, including recurring security control reviews, vulnerability management, configuration compliance, and required reporting • Review proposed system and infrastructure changes for cybersecurity impacts and ensure security requirements are incorporated throughout the system lifecycle • Support compliance with DHS security directives, FEMA policies, FISMA, FedRAMP, NIST guidance, and federal cybersecurity requirements • Assist with incident response, security investigations, audit requests, and cybersecurity reporting • Participate in security reviews, technical meetings, change management activities, and coordination with FEMA cybersecurity stakeholders • Identify cybersecurity risks and provide recommendations for mitigation, remediation, or risk management • Maintain audit-ready security documentation and supporting evidence

🎯 Anforderungen

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related discipline; relevant experience may be considered in lieu of a degree • 5+ years of cybersecurity or information assurance experience, preferably supporting federal government environments • Experience supporting RMF, A&A, security control implementation, continuous monitoring, vulnerability management, and POA&M management • Working knowledge of NIST SP 800-53, NIST SP 800-37, FISMA, FedRAMP, and federal cybersecurity requirements • Experience developing and maintaining cybersecurity authorization and compliance documentation • Familiarity with enterprise and cloud environments, including AWS and/or Microsoft Azure • Strong written and verbal communication skills with technical and non-technical stakeholders • U.S. Citizenship • Ability to obtain and maintain required DHS/FEMA suitability and security clearance/access requirements • Priority given to FEMA Public Trust Clearance or DHS Public Trust within the last 3 years, or active/current Public Trust • Preferred: Previous experience supporting FEMA, DHS, or another federal civilian agency • Preferred: Experience securing AWS GovCloud and/or Azure Government environments • Preferred: Experience with vulnerability management, SIEM, endpoint security, and continuous monitoring technologies • Preferred: Experience working with Agile and DevSecOps engineering teams • Preferred: Familiarity with Zero Trust architecture and federal cloud security requirements • Preferred: One or more relevant certifications, such as CISSP, CAP/CGRC, Security+, CISM, CCSP, or equivalent cybersecurity certification

🏖️ Vorteile

• Competitive salary commensurate with experience and clearance level • Comprehensive medical, dental, and vision coverage • 401(k) with company contribution • Paid time off • Eleven federal holidays • Certification reimbursement and training • Life and disability insurance • Long-term career growth on stable, multi-year programs