Security Analyst- Hybrid Herndon, VA
Motion Recruitment Partners
Security Analyst
This position is a hands-on mid-level security analyst role, responsible for collaborating with security engineering, operations, architecture, and build teams. The analyst will aid in the creation and maintenance of various System Security Plans (SSP) and related documentation for multiple environments. Responsibilities include gathering information on security control implementations, documenting these implementations in the SSP, and updating relevant security documents as needed (e.g., plans, procedures, processes). Additionally, the role involves assisting with security assessments (such as IRS-specific security control implementation, FedRAMP, FISMA, HIPAA, SOC, PCI, ISO, etc.), including the collection of supporting evidence.
The company is located in Herndon, VA and will be a hybrid model of 2-3 days in office a week.
What You Will Be Doing: Gather information, architecture diagrams, and implement security controls by collaborating with security engineering, operations, and build teams. Develop security documentation, including but not limited to System Security Plans (SSP), security plans, procedures, and processes. Maintain and update all security documentation through regular reviews. Understand the IRS and FedRAMP security controls, FISMA security controls, and communicate them as necessary. Assist with authorization processes for FedRAMP, FISMA, PCI, ISO, SOC, etc., including preparing the operations team through training and mock interviews, updating documentation as required, and supporting requests from the FedRAMP PMO, Agency, or CISO. Required Skills & Experience: Bachelor’s Degree in Computer Science, MIS, Information Technology, or equivalent experience in Information Security, Information Technology, or related technical discipline. Minimum of 7 years of Information Technology experience. Experience with Cloud technologies, especially AWS, Azure, and/or Google Cloud, is desirable. Experience with FedRAMP and/or other authorization processes and the NIST risk management framework. Experience in developing, evaluating, and implementing information security architectures, technologies, standards, and practices to secure applications and IT systems is desirable. Experience in developing security documentation such as SSP, policies, procedures, etc. Flexible, self-motivated, and able to work independently in a fast-paced environment. Excellent communication skills and proven ability to work effectively with all levels of IT and business management. Familiarity with Testing, Development, Staging, and pre-production environments requiring cybersecurity support. Knowledge of the Privacy Act, GDPR, and other data privacy frameworks. Experience in writing or executing system security documentation, authorization to operate packages, POA&Ms, and policies. Experience in reviewing, editing, and writing technical documents. Skill in preparing and delivering written and oral presentations of a complex technical nature. Demonstrated ability to coordinate multiple tasks. Desired Skills & Experience: Professional industry certifications in the area of expertise. Knowledge of best practices and security guides (e.g., NIST 800-53 rev 4, NIST 800-53, FedRAMP). Knowledge of security frameworks including RMF, ISO, HIPAA, FedRAMP, and HIPAA. ISC CISSP or ISACA CISM or equivalent certification.
Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.
This position is a hands-on mid-level security analyst role, responsible for collaborating with security engineering, operations, architecture, and build teams. The analyst will aid in the creation and maintenance of various System Security Plans (SSP) and related documentation for multiple environments. Responsibilities include gathering information on security control implementations, documenting these implementations in the SSP, and updating relevant security documents as needed (e.g., plans, procedures, processes). Additionally, the role involves assisting with security assessments (such as IRS-specific security control implementation, FedRAMP, FISMA, HIPAA, SOC, PCI, ISO, etc.), including the collection of supporting evidence.
The company is located in Herndon, VA and will be a hybrid model of 2-3 days in office a week.
What You Will Be Doing: Gather information, architecture diagrams, and implement security controls by collaborating with security engineering, operations, and build teams. Develop security documentation, including but not limited to System Security Plans (SSP), security plans, procedures, and processes. Maintain and update all security documentation through regular reviews. Understand the IRS and FedRAMP security controls, FISMA security controls, and communicate them as necessary. Assist with authorization processes for FedRAMP, FISMA, PCI, ISO, SOC, etc., including preparing the operations team through training and mock interviews, updating documentation as required, and supporting requests from the FedRAMP PMO, Agency, or CISO. Required Skills & Experience: Bachelor’s Degree in Computer Science, MIS, Information Technology, or equivalent experience in Information Security, Information Technology, or related technical discipline. Minimum of 7 years of Information Technology experience. Experience with Cloud technologies, especially AWS, Azure, and/or Google Cloud, is desirable. Experience with FedRAMP and/or other authorization processes and the NIST risk management framework. Experience in developing, evaluating, and implementing information security architectures, technologies, standards, and practices to secure applications and IT systems is desirable. Experience in developing security documentation such as SSP, policies, procedures, etc. Flexible, self-motivated, and able to work independently in a fast-paced environment. Excellent communication skills and proven ability to work effectively with all levels of IT and business management. Familiarity with Testing, Development, Staging, and pre-production environments requiring cybersecurity support. Knowledge of the Privacy Act, GDPR, and other data privacy frameworks. Experience in writing or executing system security documentation, authorization to operate packages, POA&Ms, and policies. Experience in reviewing, editing, and writing technical documents. Skill in preparing and delivering written and oral presentations of a complex technical nature. Demonstrated ability to coordinate multiple tasks. Desired Skills & Experience: Professional industry certifications in the area of expertise. Knowledge of best practices and security guides (e.g., NIST 800-53 rev 4, NIST 800-53, FedRAMP). Knowledge of security frameworks including RMF, ISO, HIPAA, FedRAMP, and HIPAA. ISC CISSP or ISACA CISM or equivalent certification.
Applicants must be currently authorized to work in the United States on a full-time basis now and in the future.
This position doesn’t provide sponsorship.
You will receive the following benefits:
Medical Insurance - Four medical plans to choose from for you and your family Dental & Orthodontia Benefits Vision Benefits Health Savings Account (HSA) Health and Dependent Care Flexible Spending Accounts Voluntary Life Insurance, Long-Term & Short-Term Disability Insurance Hospital Indemnity Insurance 401(k) including match with pre and post-tax options Paid Sick Time Leave Legal and Identity Protection Plans Pre-tax Commuter Benefit 529 College Saver PlanMotion Recruitment Partners is an Equal Opportunity Employer, including Veterans/Disability/Women. All applicants must be currently authorized to work on a full-time basis in the country for which they are applying, and no sponsorship is currently available. Accommodation will be provided in all parts of the hiring process as required under Motion Recruitment Employment Accommodation policy. Applicants need to make their needs known in advance.
Confirm your E-mail: Send Email
All Jobs from Motion Recruitment Partners