Cybersecurity Analyst

Trilogy Innovations•Bridgeport, WV

18h•Remote

About The Position

Cybersecurity Analyst About Trilogy Innovations At Trilogy Innovations, we are committed to driving meaningful change for our customers and communities through smart, innovative technology that solves real problems. As a growing systems and software engineering company, we partner across public and private sectors to modernize enterprise systems, strengthen security, and deliver high value solutions. We are scaling with purpose, investing in our people, processes, and platforms as we expand. We work hard, think creatively, and value every perspective as we push boundaries and build systems that matter. Who you are Trilogy Innovations is seeking a Cybersecurity Analyst to remotely support our federal customer. This is an exciting opportunity to join our growing team, while taking part in a multi-year initiative to modernize our federal customer’s large-scale IT systems. This role will require a background investigation that can take up to three months prior to the position start date.

Requirements

Bachelor of Science in Computer Science or Information Systems or equivalent experience.
Must have 5 years of experience with information security.
DOJ Clearance
Experience with AWS GovCloud.
Understands NIST Risk Management Framework and Federal security standards and policies.
Be able to read and analyze data from Security Scanners (Nessus).
Understands Cybersecurity best practices and principles.
Ability to work across teams to achieve results.
Ability to use security tools and analyze the results.
Must be a US Citizen with the ability to obtain pass DOJ Federal Background Check.

Nice To Haves

Experience supporting federal cloud migration or modernization programs.
Relevant industry certifications (e.g., CISSP, CISM, Security+, AWS Security Specialty).
Prior experience with DOJ or BOP environments.

Responsibilities

Collaborate with stakeholders and DevSecOps teams to contribute to the System Security Plan, Security Architecture Documentation, Accreditation Boundary documentation, and FIPS Categorization.
Develop and maintain a continuous Security Monitoring Strategy to manage and control implementation status and security posture throughout the system life cycle.
Develop a strategic approach to security testing that best aligns with the customer's procedures and security policy.
Proactively identify security risks, vulnerabilities, and other concerns as early as possible to facilitate remediation.
Read and analyze data from security scanners (Nessus) and recommend remediation actions.
Apply the NIST Risk Management Framework and Federal security standards and policies across system documentation and assessments.