Information Security Analyst 3 - Remote - Contract

Insitu•Bingen, WA

4d•Remote

About The Position

Insitu has an immediate 12-month contract for an experienced Information Security Analyst specializing in Risk Management to join our Information Security team. As a key member of our enterprise security function, you will protect Insitu’s systems, applications, and personnel, supporting our mission to deliver world-class solutions in aviation and UAS technology. Your work will help ensure our infrastructure and services meet the highest security standards, maintain customer trust, and support organizational compliance. You will champion secure design, lead risk management initiatives, and collaborate across the business to solve complex security challenges.

Requirements

Bachelor’s degree in a technical field (e.g., Information Technology, Computer Science, Cybersecurity) and at least 5 years of relevant Information Security experience, or a master’s degree with at least 3 years.
Strong knowledge of information security principles, including governance, risk, and compliance practices.
Familiarity with information protection regulations (e.g., NIST 800-171, DFARS, HIPAA, PCI-DSS) and applicable laws.
Experience setting up, configuring, and managing firewalls and security safeguard systems.
Demonstrated experience in penetration testing, vulnerability assessment, and threat monitoring.
Strong verbal and written communication skills for technical and non-technical audiences.
Proven ability to independently research and resolve complex technical security issues.
High degree of integrity and professionalism.
Effective collaboration, teaming, and adaptability within a fast-paced, dynamic environment.

Nice To Haves

Bachelor's or master’s degree in Cybersecurity, Information Assurance, or related field.
Professional Information Security certifications such as CISSP, CISM, or CEH
Experience in highly regulated industries such as defense, aerospace, or government.
Experience with cloud security frameworks and technologies
In-depth understanding and practical experience with NIST, ISO/IEC 27001, or similar security frameworks.
Familiarity with security incident response platforms

Responsibilities

Plan, implement, and upgrade network and information security controls in accordance with industry standards.
Identify security needs and develop strategies to safeguard sensitive information.
Coordinate and maintain the implementation of security architecture and applications; ensure ongoing infrastructure maintenance.
Conduct compliance monitoring, identify organizational deficiencies, and recommend/implement necessary corrective measures.
Perform risk assessments, security evaluations, and rigorous testing of systems and equipment.
Develop, deploy, and manage firewalls and other security technologies; establish effective safeguard procedures.
Analyze system logs, configure alerts, and exploit security controls to detect threats and anomalies.
Execute penetration testing and vulnerability assessments to determine system risk levels.
Create, implement, and track mitigation plans for identified vulnerabilities.
Provide active threat monitoring, evaluate indicators of compromise, and respond to security incidents.
Research, develop, and refine incident response tools and processes; participate in breach investigations and remediation.
Develop and deliver security awareness training for staff, both ad hoc and as required.
Ensure the maintenance and refinement of Insitu’s System Security Plan to comply with NIST 800-171 standards.
Develop and update governance documentation, including policies, standards, and work instructions.
Liaise with senior stakeholders, offering security guidance to managers, directors, and executives.