FISMA Security Analyst

🕒 September 16

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

🔴 Lead

🔐 Security Analyst

👻 Ghost score 48%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

SES Corporation

WebsiteLinkedInAll Job Openings

51 - 200 employees

💼 Consulting

🎖️ Defense

🏥 Healthcare

Consulting • Defense • Healthcare

SES Corporation is an IT consulting services firm specializing in systems engineering solutions. With a focus on collaboration and problem-solving, SES is trusted by leadership and personnel across both government and commercial sectors to handle complex enterprise challenges. The company offers a wide range of services, including IT modernization, integrated security, managed services, and process optimization. SES prides itself on being home to top engineering experts and offers ongoing professional development and advanced training to its employees.

📋 Description

• Provide technical support for security architecture, design, and implementation of information technology security systems • Research security products and services and support rollout of enterprise security solutions • Develop, implement, and maintain enterprise-wide information security capabilities • Analyze enterprise business models and IT systems to identify security risks and risk-management considerations • Define enterprise- and system-level security requirements • Implement and assess security and privacy controls under NIST SP 800-53 Revision 5 and applicable federal control baselines • Execute the NIST Risk Management Framework lifecycle, including control implementation, assessment, authorization, and continuous monitoring • Develop, review, and maintain RMF and FISMA documentation, including SSPs, SARs, POA&Ms, risk assessments, control implementation statements, procedures, governance documentation, and authorization packages • Propose technical solutions for system- and application-level security architecture and design • Support continuous monitoring, vulnerability management, control assessments, risk tracking, remediation validation, and stakeholder reporting • Assess cybersecurity risks for APIs, integrations, data exchanges, and automated workflows • Review API design and implementation for security compliance, secure configuration, access controls, token management, and sensitive-data protection • Assess Robotic Process Automation risks involving bots, workflows, service accounts, credentials, privileges, logging, exception handling, and operational resilience • Identify and document risks related to intelligent automation, RPA, API integrations, and emerging technologies, and recommend mitigation strategies • Maintain standard working hours and participate in meetings and collaborative efforts • Travel is not required

🎯 Requirements

• Ability to obtain a Public Trust Clearance and ITILv4 Foundation Certification • Possesses and applies a comprehensive knowledge across key tasks and high impact assignments • Functions as a security expert across multiple project assignments • Proven ability to work independently in a full and/or partial remote environment with limited supervision and may supervise/lead others • Ability to communicate effectively in oral and written forms with all levels of staff and clients • Maintain standard working hours per the DIGIT contract and be available for meetings and collaborative efforts during working hours • Ability to apply comprehensive knowledge across key tasks and high impact assignments using practical experience and training • Preferred: CISSP, CISA, CISM, Security+ or other relevant security certifications • Familiarity with CUI requirements for unclassified IT systems is a plus • Track record of competency in obtaining initial A&A and reauthorization • Familiarity with unclassified network administration, network infrastructure and security best practices, LAN administration and maintenance, user control, VPN access, firewalls, Mobile Device Management, and Identity and Authentication Services Management • Comfortable with Windows operating systems • Willingness and ability to independently take on varied IT Compliance tasks • Linux operating systems experience • Familiarity with Google Suite, Microsoft Office, and ServiceNow • 10–15 years of experience and bachelor's degree or equivalent • Minimum 3–5 years of direct experience supporting FISMA and Financial Audit Requirements • Minimum 3–5 years of direct experience supporting cybersecurity compliance and implementing threat mitigation steps • Minimum 3–5 years of direct experience with continuous monitoring security expertise for business units and key stakeholders • Minimum 3–5 years of direct experience creating and delivering end-user briefings, training, policy, and/or compliance updates • Experience as a remote worker demonstrating time management, self-discipline, cultural change management, and an Agile mindset • If remote, maintain a safe home workspace aligned with information security policies • Ability to communicate verbally in person, by phone, or video chat and clearly in writing, primarily using a keyboard • Ability to appear on camera for meetings and protect proprietary company and customer information • Ability to view computer screens and sit for long periods

🏖️ Benefits

• Medical • Dental • Vision • AD&D • STD • LTD • Company paid Life Insurance • 401k with employer contribution • Paid Time Off • Pet Insurance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume