Information Security Analyst

Dynamic Solutions Technology LLC•Linthicum Heights, MD

21d•Onsite

About The Position

Dynamic Solutions Technology, LLC is seeking a full-time Information Security Analyst to support a Federal Government customer. This is an exempt, on-site position in Linthicum, Maryland. The role supports cybersecurity operations across classified and unclassified environments, including monitoring systems and networks, assessing vulnerabilities, investigating security incidents, supporting DoD Risk Management Framework processes, and maintaining system authorization and compliance. The position requires an active Secret clearance with TS/SCI eligibility as stated in the opening description; the minimum qualifications also specify an active TS/SCI clearance or eligibility.

Requirements

At least 5 years of experience in patch management, vulnerability management, cybersecurity operations, or a related IT security field.
Active TS/SCI clearance or eligibility; the opening description also specifies an active Secret clearance with TS/SCI eligibility.
Bachelor of Science degree in a related field.
Two certifications from CompTIA Security+, CySA+, SSCP, or another certification appropriate to assigned duties under DoD 8140 qualification requirements.

Responsibilities

Monitor enterprise information systems, networks, applications, and security infrastructure for suspicious activity, threats, unauthorized access, and vulnerabilities across classified and unclassified environments.
Conduct recurring vulnerability scans, analyze results, identify security weaknesses, prioritize remediation, and track corrective actions for compliance with DoD requirements and security baselines.
Investigate cybersecurity alerts and potential incidents; document findings; and support containment, eradication, recovery, and reporting with cybersecurity leadership and authorized Government personnel.
Support implementation and assessment of security controls in accordance with DoD RMF, NIST SP 800-53, and applicable cybersecurity policies.
Assist ISSMs, ISSOs, and system owners with developing, reviewing, and maintaining SSPs, POA&Ms, security assessment documentation, and authorization artifacts in eMASS or other Government-approved systems.
Use SIEM platforms, intrusion detection tools, endpoint protection solutions, and automated monitoring technologies to correlate events, identify anomalous behavior, and support SOC activities.
Evaluate system configurations against STIGs, security checklists, and approved baselines; identify compliance deficiencies and coordinate corrective actions with system administrators and engineering personnel.
Analyze threat intelligence, indicators of compromise, network activity, and system logs to identify emerging threats, investigate suspicious behavior, and support threat hunting and defensive cybersecurity operations.
Collaborate with cybersecurity engineers, network administrators, DevSecOps personnel, cloud architects, and Government security stakeholders to evaluate technical risks, implement security improvements, and support secure enterprise operations.
Prepare vulnerability assessment reports, incident documentation, risk assessments, compliance findings, remediation status reports, and cybersecurity performance metrics; recommend improvements to strengthen the enterprise security posture.