Cybersecurity Analyst (ISSO)

Edgewater Federal Solutions, Inc.

9h•$90,000 - $110,000•Remote

About The Position

Edgewater Federal Solutions is currently seeking a Cybersecurity Analyst (ISSO) to provide high level technical advice and guidance to management and other technical specialists on critical IT cybersecurity issues. The position is seeking a talented, professional to perform cybersecurity system documentation of all information systems; conduct technical risk and vulnerability assessments of information systems to identify vulnerabilities, risks, and protection needs. Conduct systems security evaluations, audits, and reviews. Apply FISMA, NIST and Federal agencies guidance for security control policies and procedures. Develop policies, procedures, and strategies to ensure program office is in compliance with all Federal and Agency level laws, directives and guidance. Provide advice and guidance on implementation of developed policies, procedures and strategies to management and other technical specialists. Position requires consistent exercise of discretion and judgment. This position is remote and supports The Department of Energy in Germantown, Maryland.

Requirements

US Citizenship is required.
Must be eligible to obtain and maintain Federal Security Clearance at Secret or higher level.
A bachelor’s degree in Cybersecurity, Computer Science or other relevant field of study.
Any equivalent combination of experience and training that provides the required knowledge, skills, and abilities.
3-4 years of relevant progressively responsible cybersecurity experience.
Ability to effectively communicate with other team members on technical information related to information systems’ design and implementation.
General knowledge of information technologies to include computer hardware and software, operating systems, and networking protocols.
Familiarity with CDM tools produced by CarbonBlack, ForeScout, Tennable, Varonis, Splunk.
Familiarity with FISMA and Security Assessment and Accreditation (SA&A) processes.

Responsibilities

Act as an advisor to system owners and authorizing officials on all matters, technical and otherwise, involving the security of information systems under purview.
Assist with the development of required cybersecurity documentation including but not limited to: system security plans, privacy impact assessments, security categorization, and incident response plan.
Work with the Information Systems Security Manager (ISSM) to obtain and maintain the system’s Authority to Operate (ATO).
Assist in the creation and maintenance of organizational procedures and guidance on cybersecurity and information assurance matters as they relate to information systems.
Assists in the interpretation and development of security operating procedures to protect networks, and other sensitive information.
Provide guidance to system administrators and system owners on adherence to applicable requirements for maintaining security posture of authorized systems.
Assist in the interpretation and development of security operating procedures to protect networks, and other sensitive information.
Conduct security assessments of information systems in adherence to FISMA, FIPS and NIST requirements.
Perform risk assessments and analysis in support of ongoing awareness and adherence to the organizations risk tolerance.
Anticipates security requirements and identifies sound security controls for applications, systems, and processes.
Research and when necessary, publish and distribute notifications which address major information security threats, i.e. hacking, malicious activity, damaging vulnerabilities with exploits in the wild, Trojans, Worms, and Viruses.
Conduct vulnerability scanning of information systems analyze and report on findings.
Monitor information system’s CDM (continuous diagnostics and mitigation) tools.
Technical writing.
Provide trainings to end users, owners, and stakeholders.
Experience with privacy policy and privacy incidents.
Performs other tasks as assigned.