Information Security Analyst

Position Title: Information Security Analyst
Client: Information Systems Solutions, Inc
Address: 5700 Novosel Street Fort Rucker, AL 36362 
Clearance Level: Secret
Position Status: 6-month contract to permanent

Our client is looking for an Information Security Analyst for an onsite position in Fort Rucker, AL. They are a government IT and cybersecurity contractor providing technology services to the U.S. Department of Defense and other federal agencies. ISS specializes in cybersecurity, network and systems engineering, IT infrastructure, software development, and technical support for mission-critical government programs.

Responsibilities:

• Responsible for maintaining the security posture of our program by conducting compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS)

• Requires a deep understanding of cybersecurity principles, risk management, and familiarity with various compliance frameworks

• Implement and manage the ACAS suite to conduct regular vulnerability scans across the programs' network infrastructure

• Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders

• Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets

• Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner

• Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST)

• Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes

• Collaborate with the compliance team to prepare for internal and external audits

• Provide technical guidance on security best practices and assist in security awareness training initiatives

• Stay current with emerging security threats, vulnerabilities, and controls

• Manage the Plan of Action and Milestones

• Prepare, review and update RMF documentation

• Participate in incident response activities as needed.

Qualifications:

• Active Secret clearance

• CySA+ (required within 90 days of hire) certification

• At least 4 years of experience in cybersecurity or equivalent field.

• Bachelor's degree or equivalent experience.

• Knowledge and experience with automated tools such as Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmark, and Security Content Automation Protocol (SCAP), and Retina.

• Knowledge and experience of cybersecurity, A&A and RMF documentation development and support.