[Hiring] Senior Security Analyst @ITC Federal, Inc.

Role Description

The Senior Security Analyst will be focused on Security Assessment & Authorization (A&A) of systems for the National Institute of Standards and Technology (NIST). The Senior Security Analyst is expected to be capable of lending subject matter expertise while performing A&A activities. The Senior Security Analyst will demonstrate a strong knowledge of:

• Security Requirement Analysis
• Security Architecture
• Enterprise Security Program Assessment
• Evaluating Vulnerability Assessment results
• Performing other duties as required

Responsibilities

• Conducting A&A activities for NIST systems working individually or as part of a team.
• Work with NIST staff to provide technical and policy driven solutions to remediate or mitigate identified risks.
• Support system personnel with remediation plans for A&A findings.
• Provide guidance to Information System Security Officers (ISSO) on system documentation.
• Coordinate/conduct vulnerability scans and analyze results.
• Complete Security Assessment Reports involving both technical and policy related aspects of the assessment.
• Review and update A&A packages based on management feedback.

Qualifications

• 5 - 8 years of experience implementing the NIST 800 Series Special Publications.
• Demonstrable experience conducting IT assessor activities based on the NIST Risk Management Framework, including:
• Interviewing, examining, and testing related control sets.
• Reviewing and/or updating core system documents: System Security Plans, Contingency Plans, Privacy Threshold Assessments, hardware and software inventories, and system diagrams.
• Performing Security Test and Evaluation and developing Security Assessment Reports for NIST senior management.
• Delivering risk and vulnerability briefings confidently to management and government customers.
• Experience working with vulnerability data, writing Assessment Reports, POA&Ms, and Risk Acceptance justifications.
• Knowledge of the formation and implementation of IT security policies to ensure confidentiality, integrity, and availability of information systems.
• Strong technical oral, writing, and customer service skills as you will regularly interact with NIST colleagues and senior managers.

Preferred

• Prior federal or GOVCON experience.
• Cloud Experience (AWS or Azure).
• Active Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Security Auditor (CISA) or comparable certification.
• Advanced Degree in computer science or related field or related experience.
• Direct experience with NIST or other academic environments.
• Expertise with COTS based security tools (i.e. RSA Archer, CSAM, Tenable, WebInspect, AppDetective) used to establish security baselines and assess continuing compliance.

Requirements

• Ability to successfully pass a National Agency Check with Local Agency Check (NACLC).

Benefits

• Health, Dental and Vision
• 401(k)
• Flexible Spending Account (FSA)
• 11 Paid Federal Holidays
• PTO
• Education reimbursement