FISMA Security Analyst

🔥 7 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🔐 Security Analyst

👻 Ghost score 17%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

SES Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🏥 Healthcare

Consulting • Defense • Healthcare

SES Corporation is an IT consulting services firm specializing in systems engineering solutions. With a focus on collaboration and problem-solving, SES is trusted by leadership and personnel across both government and commercial sectors to handle complex enterprise challenges. The company offers a wide range of services, including IT modernization, integrated security, managed services, and process optimization. SES prides itself on being home to top engineering experts and offers ongoing professional development and advanced training to its employees.

📋 Description

• Provide technical support for security architecture, design, and implementation of information technology security systems • Research security products and services and support rollout of enterprise security solutions • Develop, implement, and maintain enterprise-wide information security capabilities • Analyze enterprise business models and IT systems to determine security risks and risk management considerations • Define enterprise- and system-level security requirements • Implement and assess security and privacy controls according to NIST SP 800-53 Revision 5 and applicable federal control baselines • Execute the NIST Risk Management Framework lifecycle, including control implementation, assessment, authorization, and continuous monitoring • Develop, review, and maintain RMF and FISMA documentation, including SSPs, SARs, POA&Ms, risk assessments, control implementation statements, procedures, governance documentation, and authorization packages • Propose technical solutions for system- and application-level security architecture and design • Support continuous monitoring, vulnerability management, control assessments, risk tracking, remediation validation, and stakeholder reporting • Assess cybersecurity risks associated with APIs, integrations, data exchanges, and automated workflows • Review API designs and implementations for security compliance, secure configuration, access controls, token management, and sensitive-data protection • Assess Robotic Process Automation risks involving bots, workflows, service accounts, credentials, privileges, logging, exception handling, and operational resilience • Identify and document risks related to intelligent automation, RPA, API integrations, and emerging technologies, and recommend mitigation strategies • Communicate with staff, clients, government partners, and stakeholders through meetings, briefings, training, policy, and compliance updates • Appear on camera for meetings and protect proprietary company and customer information • No travel required

🎯 Requirements

• Ability to obtain a Public Trust Clearance and ITILv4 Foundation Certification • Possesses and applies a comprehensive knowledge across key tasks and high impact assignments • Functions as a security expert across multiple project assignments • Proven ability to work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others • Ability to communicate effectively in oral and written forms with all levels of staff and clients • Maintain standard working hours per the DIGIT contract and be available for meetings and collaborative efforts during working hours • Demonstrated ability to apply comprehensive knowledge across key tasks and high impact assignments • CISSP, CISA, CISM, Security+ or other relevant security certifications preferred • Familiarity with CUI requirements for unclassified IT systems preferred • Track record of competency in obtaining initial A&A and reauthorization • Familiarity with unclassified network administration, including network infrastructure and security best practices, LAN administration and maintenance, user control, VPN access, firewalls, mobile device management, and identity and authentication services management • Comfortable with Windows operating systems • Linux operating systems experience • Familiarity with Google Suite, Microsoft Office, and ServiceNow • 10–15 years of experience and bachelor's degree or equivalent • Minimum 3–5 years of direct experience supporting FISMA and Financial Audit Requirements • Minimum 3–5 years of direct experience supporting cybersecurity compliance and implementing steps to mitigate threats • Minimum 3–5 years of direct experience providing continuous monitoring security expertise to business units and key stakeholders • Minimum 3–5 years of direct experience creating and delivering end-user briefings, training, policy, and/or compliance updates • Experience as a remote worker demonstrating time management, self-discipline, cultural change management, and an Agile mindset • If remote, maintain a safe home workspace aligned with information security policies

🏖️ Benefits

• Medical • Dental • Vision • AD&D • STD • LTD • Company paid Life Insurance • 401k with employer contribution • Paid Time Off • Pet Insurance