Information Security Analyst

Avalore, LLC•Arlington, VA

1d•$85,000 - $202,000•Onsite

About The Position

The Information Security Analyst will support the design, implementation, and management of cybersecurity controls and processes for the War Data Platform (WDP) to ensure compliance with DoD security requirements and protect systems, applications, and data. This person will conduct security risk and vulnerability assessments, evaluate and test security controls, monitor and analyze security events, and support incident response, remediation, and threat management activities. This person will support identity and access management activities, including account lifecycle management, access reviews, authentication, authorization, and enforcement of least privilege. This person will assist with security testing, audits, Risk Management Framework (RMF) activities, compliance documentation, and the implementation of NIST and DoD security controls. This person will collaborate with engineering, operations, and other cybersecurity teams to identify security risks, implement corrective actions, maintain security documentation, and integrate security best practices throughout the WDP environment. This person will stay current with emerging threats, vulnerabilities, technologies, and cybersecurity best practices to continuously improve the security posture of the WDP.

Requirements

SECRET Security Clearance Required
Professional proficiency in English is required.
Demonstrated proficiency in using all Microsoft Office applications.
Currently authorized to work in the United States on a full-time basis.

Nice To Haves

CBROPS, CCISO, CCSP, CEH, CGRC/CAP, Cloud+, CySA+, FITSP-O, GCIH, GICSP, GISF, GFACT, GCED, GSEC, PenTest+, Security+, SecurityX/CASP+, and/or SSCP cerification (for Junior / Journeyman roles)
CCE, CCISO, CCNP Security, CCSP, CFR, CISA, CISM, CISSO, CISSP, CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP, CPTE, CySA+, FITSP-A, FITSP-M, FITSP-O, GCFA, GCIA, GCIH, GCLD, GCSA, GDSA, GFACT, GICSP, GPEN, GSLC, GSNA, and/or SecurityX/CASP+ certification (for Senior role)
Good communication skills
Self-starter mindset

Responsibilities

Support the design, implementation, and management of cybersecurity controls and processes for the War Data Platform (WDP).
Ensure compliance with DoD security requirements and protect systems, applications, and data.
Conduct security risk and vulnerability assessments.
Evaluate and test security controls.
Monitor and analyze security events.
Support incident response, remediation, and threat management activities.
Support identity and access management activities, including account lifecycle management, access reviews, authentication, authorization, and enforcement of least privilege.
Assist with security testing, audits, Risk Management Framework (RMF) activities, compliance documentation, and the implementation of NIST and DoD security controls.
Collaborate with engineering, operations, and other cybersecurity teams to identify security risks, implement corrective actions, maintain security documentation, and integrate security best practices throughout the WDP environment.
Stay current with emerging threats, vulnerabilities, technologies, and cybersecurity best practices to continuously improve the security posture of the WDP.