Information Security Analyst

INFORMATION SYSTEMS SOLUTIONS, INC•Ozark, AL

2d•Onsite

About The Position

Information Systems Solutions (ISS) is seeking an Information Security Analyst to support their program at Fort Rucker, AL. This role is crucial for maintaining the security posture of the program by conducting compliance checks and vulnerability scanning. The analyst will be responsible for implementing and managing the Assured Compliance Assessment Solution (ACAS) suite, analyzing scan results, prioritizing vulnerabilities, and reporting findings. This position requires a strong understanding of cybersecurity principles, risk management, and compliance frameworks like NIST. The analyst will also collaborate with IT and development teams on vulnerability remediation, assist in developing System Security Plans (SSPs), prepare for audits, provide technical guidance, and participate in incident response activities.

Requirements

Secret clearance
Security+ CE certification
CySA+ certification (required within 90 days of hire)
At least 4 years of experience in cybersecurity or equivalent field
Bachelor’s degree or equivalent experience
Knowledge and experience with automated tools such as Assured Compliance Assessment Solution (ACAS), Center for Internet Security (CIS) Benchmark, and Security Content Automation Protocol (SCAP), and Retina
Knowledge and experience of cybersecurity, A&A and RMF documentation development and support

Responsibilities

Maintain the security posture of our program by conducting compliance checks and vulnerability scanning using the Assured Compliance Assessment Solution (ACAS)
Implement and manage the ACAS suite to conduct regular vulnerability scans across the programs' network infrastructure
Analyze scan results, prioritize vulnerabilities based on risk, and report findings to relevant stakeholders
Develop and maintain scanning policies and procedures to ensure comprehensive coverage of assets
Work closely with IT and development teams to remediate identified vulnerabilities in a timely manner
Ensure compliance with relevant cybersecurity frameworks, standards, and regulations (e.g., NIST)
Assist in the development of System Security Plans (SSPs) and other documentation required for compliance purposes
Collaborate with the compliance team to prepare for internal and external audits
Provide technical guidance on security best practices and assist in security awareness training initiatives
Stay current with emerging security threats, vulnerabilities, and controls
Manage the Plan of Action and Milestones
Prepare, review and update RMF documentation
Participate in incident response activities as needed