Senior Security Analyst – A&A, Assessor – NIST

Job not on LinkedIn

🔥 0 minutes ago

🦀 Maryland – Remote

🦀 Maryland – Remote

⏰ Full Time

🟠 Senior

🔐 Security Analyst

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

IT Coalition

WebsiteLinkedInAll Job Openings

501 - 1000 employees

Founded 2006

🔒 Cybersecurity

🏛️ Government

☁️ SaaS

Cybersecurity • Government • SaaS

ITC Federal is a mid-sized federal systems integrator that specializes in information technology solutions for government agencies. They focus on application development, DevSecOps, cloud infrastructure, cybersecurity, and compliance, leveraging innovative approaches to help clients achieve efficiency and value. ITC Federal emphasizes integrity and a commitment to delivering impactful solutions that drive mission success for their customers in both domestic and international arenas.

📋 Description

• Conduct A&A activities for NIST systems individually or as part of a team • Work with NIST staff to provide technical and policy-driven solutions to remediate or mitigate identified risks • Support system personnel with remediation plans for A&A findings • Provide guidance to Information System Security Officers (ISSO) on system documentation • Coordinate and conduct vulnerability scans and analyze results • Complete Security Assessment Reports covering technical and policy-related aspects of assessments • Review and update A&A packages based on management feedback

🎯 Requirements

• 5 - 8 years of experience implementing the NIST 800 Series Special Publications • Demonstrable experience conducting IT assessor activities based on the NIST Risk Management Framework, including interviewing, examining and testing related control sets • Experience reviewing and/or updating System Security Plans, Contingency Plans, Privacy Threshold Assessments, hardware and software inventories, and system diagrams • Experience performing Security Test and Evaluation and developing Security Assessment Reports for NIST senior management • Experience delivering risk and vulnerability briefings to management and government customers • Experience working with vulnerability data, writing Assessment Reports, POA&Ms and Risk Acceptance justifications • Knowledge of forming and implementing IT security policies addressing confidentiality, integrity and availability of information systems • Strong technical oral, writing and customer service skills • Ability to successfully pass a National Agency Check with Local Agency Check (NACLC) • Candidate must be able to function in a general office environment • Prior federal or GOVCON experience preferred • Cloud experience (AWS or Azure) preferred • Active CISSP, CISM, CISA or comparable certification preferred • Advanced degree in computer science or related field or related experience preferred • Direct experience with NIST or other academic environments preferred • Expertise with COTS-based security tools such as RSA Archer, CSAM, Tenable, WebInspect, and AppDetective preferred

🏖️ Benefits

• Health, Dental and Vision • 401(k) • Flexible Spending Account (FSA) • 11 Paid Federal Holidays • PTO • education reimbursement • Outstanding compensation and benefits plan • Challenging and rewarding professional work environment