Information Systems Security Analyst

We are seeking Systems Security Analyst to join our team. In this role, you will have the opportunity to work on modernization and technology transformation projects that will positively impact the critical missions of our government clients and solve challenges that aim to improve millions of lives across the globe. Responsibilities Serve as the security technical SME, collaborating with the delivery team project manager and leading a security team of approximately five members Act as the security technical SME in interactions with government project customers, ISSOs, and ISMs Define, implement, and manage security team processes and procedures, ensuring team understanding and compliance Oversee technical aspects of handling identified security weaknesses and POA&Ms from intake through remediation Support the development team in executing and enhancing the DevSecOps process, aligning with the customer’s “security to the left” requirement Experience and Skills Extensive knowledge of federal cybersecurity governance, risk management, and continuous monitoring processes, including RMF, NIST SP 800-53, NIST CSF, A&A/C&A, POA&M management, and control validation Proficient in interpreting and applying security hardening standards and compliance baselines (DISA STIGs, CIS Benchmarks, CVEs), and assessing technical findings against organizational security requirements Skilled invulnerability management workflows, including Tenable/Nessus scan analysis, validation of findings, identification of false positives, and translating vulnerabilities into remediation or POA&M actions Experienced inweakness and POA&M remediation through review of SSPs, assessment results, scans, remediation artifacts, and risk analysis in accordance with NIST and federal standards Capable of updating and maintaining SSP documentation for enterprise and cloud environments, including control tailoring, inheritance documentation, and alignment with RMF, FedRAMP, and federal requirements Proficient in managing vulnerability and POA&M workflows across CSAM/GRC, WTT/ServiceNow, Jira, and Excel, ensuring data alignment, traceability, and closure readiness Able to participate in security audits and assessments, interpret findings, and coordinate remediation and evidence collection for compliance and operational requirements Strong documentation skills, translating complex workflows into clear process diagrams, SOPs, and management-ready summaries for cross-functional teams Experienced in leveraging Generative AI tools to enhance cybersecurity workflows, research, documentation, and decision support, with careful attention to information sensitivity and validation Education Bachelors Degree in Computer Science or similar required Work Authorization US citizenship required in order to obtain a US government Public Trust clearance Location/Remote Hybrid, candidate must be local to DC Metro and ready to come 3 days onsite a week. #J-18808-Ljbffr