System Security Analyst

Role: System Security Analyst

Location Hybrid (part-time onsite in Herndon, VA)

Role

Looking for a "hands-on" mid-level security analyst who will be responsible for interfacing with the security engineering, operations, architecture and build teams, assisting with the development and/or maintenance of various System Security Plans (SSP) and associated documentation for multiple environments, gathering the security control implementations information for the security controls and documenting their implementation in the SSP, as well as updating associated security documentation as needed (i.e., plans, procedures, processes).Candidate will help with security assessments (security control implementation, FedRAMP, FISMA, HIPPA, SOC, PCI, ISO, etc.), to include supporting collection of evidence.

Responsibilities will include gathering information, architecture diagrams and implementation of the security controls through interfacing with the security engineering, operations and build teams. Candidate will develop security documentation such as, but not limited to, System Security Plans (SSP), security plans, procedures, and processes. Will assist with the FedRAMP, FISMA, PCI, ISO, SOC, etc. authorization to include, but not limited to, prep of operations team through training and mock interviews, update documentation as required, and support FedRAMP PMO/ Agency / CISO requests.

Qualifications

• · Experience with Cloud technologies, especially AWS, Azure, and/or Goggle Cloud, desirable

• · Experience with FedRAMP and/or other authorization processes and NIST risk management framework (Best Practice and security guides (ex. NIST 800-53 rev 4, NIST 800-53, FedRAMP)

• · Knowledge of Privacy Act, GDPR, and other data privacy frameworks.

• · Experience in writing or executing system security documentation, authorization to operate packages, POA&Ms, and policies.

• · Professional industry certifications in area of expertise.

• · Knowledge of security frameworks to include RMF, ISO, HIPAA, FedRAMP and HIPAA

• · ISC CISSP or ISACA CISM or equivalent certification